push eventseahorn/crab-llvm

caballa

commit sha f2dbfbbbd9868765ff6027d0db596cd734f25a20

py(clam.py): removed unused sea-dsa-log option

view details

caballa

commit sha 91781ab2732c5d323c800f06c2c43c2ae4221eb4

feat(cfg): support for more two new intrinsics. Clam translates these two external functions: - add_tag(%ptr, %tag) - check_does_not_have_tag(%ptr, %tag) into two special Crab intrinsics. These intrinsics are understood by the Crab Tag analysis. We have also rewritten a bit the code to have a separate function that translates those calls to external functions into Crab intrinsics that require a special translation.

view details

caballa

commit sha 30d4f6166d93b04aa1a85a0aafa251e15bdb78b8

fix(sea-dsa-wrapper): create a region if modified/read but not types. In seadsa, we keep track of the types of the data for each pointer dereference. If not types available then we were assuming that the pointer is never dereferenced and therefore, we don't generate a region for it. However, seadsa allows users to have special annotations such as sea_dsa_set_modified. This will mark a seadsa node as modified but without adding any type. This fix pretends that if the marker is modified or read but no actual dereference happened (i.e., node types are empty) then the node was dereferenced at offset 0.

view details

caballa

commit sha cebfc3ead222043059903ce94465f7e3790355d2

test: added some tests for the tag analysis

view details

push time in 3 days

push eventseahorn/crab

caballa

commit sha 8980b265068555630a9a637e4afe3aa08446ec96

refactor(discrete_domain): minor change (NFC)

view details

caballa

commit sha 3b9ec0ccd83b33beaa62428166e16b6ea34a8aff

fix(separate-discrete-domain): meet

view details

push time in 3 days

push eventseahorn/crab-llvm

caballa

commit sha 2db4398646ebc0cf089459c40581103b1db53251

refactor: adapt to Crab changes

view details

push time in 4 days

push eventseahorn/crab

caballa

commit sha ae58df2bfde284326bf75826d293c6d90fbae329

style(td-inter): renaming

view details

caballa

commit sha f27539584970fa186925fdd408d3a33cc33bdd0d

refactor: rename allocation_site with tag

view details

caballa

commit sha f13420e0c21695882b75d29bdfdfb9afeb1274b0

feat(domains): new tag analysis. It is part of the region domain and it is disabled by default. Crab understands two new CFG intrinsics statements: - add_tag(rgn, ref, TAG): associate the tag TAG to the data pointed by reference ref within region rgn. - b := does_not_have_tag(rgn, ref, TAG): set b to true only if the data pointed by reference ref within region rgn contains the tag TAG. The current tag analysis over-approximates the set of tags. This is the reason why the analysis can only answer queries asking whether the data associated to a reference does __not__ have a tag. For asking whether some data contains a tag we need to under-approximate the set of possible tags. This is not hard and it will be done soon. Note also that since the region domain smashes all the data within the region, the tags are actually associated to regions. That is, given this code: rgn := region_init(); ref1 := make_ref(rgn, ...); ref2 := make_ref(rgn, ...); assume_ref(ref1 != ref2) add_tag(rgn, ref1, TAG_1) add_tag(rgn, ref2, TAG_2) b1 := does_not_have_tag(rgn, ref1 , TAG2) b2 := does_not_have_tag(rgn, ref2 , TAG1) The values for b1 and b2 cannot be set to true due to the coarse smashing abstraction.

view details

push time in 4 days

push eventfacebook/SPARTA

Maxime Arthaud

commit sha 55837b969dcca7cdcf98afbcaee60caf33557647

Back out "use boost intrusive pointers instead of shared pointers" Summary: This is causing compiler errors with gcc, let's revert it until we fix the issue. Original commit changeset: 66cd99fc38f6 Reviewed By: thezhangwei Differential Revision: D26617927 fbshipit-source-id: b70d1648bbafa39c5c30550f1a83e19f726dd1cd

view details

push time in 5 days