You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Josh Berdine 268015fbf3 [sledge] Add concurrency analysis ... Summary: This diff changes the analysis exploration algorithm from considering only sequential executions to considering executions of the interleaving semantics. As part of this, symbolic states are changed so that each thread has its own registers, while all memory is shared between them. Currently only a simple threads interface is supported: they can be created with `thread_create(&thread_routine)`, they can exit by returning from `thread_routine`, and they can be joined with `thread_join`. Current simplifications include that newly created threads are already runnable, thread routines accept no arguments and return no result, and no failures are possible. The concurrent exploration algorithm gives preference to executions which have fewer context switches, thereby performing an incremental form of context-bounded analysis. A form of partial-order reduction is performed, where the symbolic states are joined across (prefixes of) executions with the same number of context switches which reach a point where the instruction pointers and call stacks of all threads are the same. This has the effect of "dagifying" the concurrent execution tree by merging points after e.g. threads perform actions that commute with each other. This is unlike traditional partial-order reduction in that it relies on the symbolic join to combine the results of commuting operations in a way that the following symbolic execution can take advantage of, rather than performing some up-front analysis to identify commuting operations and quotienting the space of executions. The current state of the symbolic join and execution is significantly suboptimal in this regard. Differential Revision: D29441149 fbshipit-source-id: cf801a6b1		3 years ago
..
FA_dynamic_size_array.c	[sledge] Update tests	4 years ago
FA_mallctl_thread_allocatedp.cpp	[sledge] Update tests	4 years ago
FN_ptr_arith_bad.cpp	[sledge] Update tests	4 years ago
addr_of_global_struct.c	[sledge] Update tests	4 years ago
address_arith.c	[sledge] Update tests	4 years ago
address_arith_unsafe.c	[sledge] Update tests	4 years ago
arithmetic.c	[sledge] Update tests	4 years ago
arithmetic_loop.c	[sledge] Update tests	4 years ago
arithmetic_loop_unsafe.c	[sledge] Update tests	4 years ago
array_access.c	[sledge] Update tests	4 years ago
array_access_unsafe.c	[sledge] Update tests	4 years ago
assert.c	[sledge] Add definitions to llair_intrinsics for assert	4 years ago
bool_to_int.c	[sledge] Update tests	4 years ago
copy_struct_on_stack.c	[sledge] Update tests	4 years ago
free_free.c	[sledge] Update tests	4 years ago
free_local.c	[sledge] Update tests	4 years ago
global_vars.c	[sledge] Update tests	4 years ago
globals.c	[sledge] Test: Update test infra	4 years ago
icall.c	[sledge] Strengthen dynamic resolution of indirect calls	4 years ago
int_bool_assign.c	[sledge] Update tests	4 years ago
irreducible.c	[sledge] Update tests	4 years ago
loop.c	[sledge] Update tests	4 years ago
nested_loop_branch.c	[sledge] Update tests	4 years ago
nested_loop_branch_break.c	[sledge] Update tests	4 years ago
nonreducible_call_graph.c	[sledge] Update tests	4 years ago
range_for.cpp	[sledge] Update tests	4 years ago
recursion.c	[sledge] Update tests	4 years ago
struct_array_copy.c	[sledge] Update tests	4 years ago
thread.c	[sledge] Add concurrency analysis	3 years ago
tmp_uaf.cpp	[sledge] Suppress warning in test from newer clang	3 years ago
uad.cpp	[sledge] Update tests	4 years ago
wrap_malloc.c	[sledge] Update tests	4 years ago