infer_clone

History

Josh Berdine 268015fbf3 [sledge] Add concurrency analysis Summary: This diff changes the analysis exploration algorithm from considering only sequential executions to considering executions of the interleaving semantics. As part of this, symbolic states are changed so that each thread has its own registers, while all memory is shared between them. Currently only a simple threads interface is supported: they can be created with `thread_create(&thread_routine)`, they can exit by returning from `thread_routine`, and they can be joined with `thread_join`. Current simplifications include that newly created threads are already runnable, thread routines accept no arguments and return no result, and no failures are possible. The concurrent exploration algorithm gives preference to executions which have fewer context switches, thereby performing an incremental form of context-bounded analysis. A form of partial-order reduction is performed, where the symbolic states are joined across (prefixes of) executions with the same number of context switches which reach a point where the instruction pointers and call stacks of all threads are the same. This has the effect of "dagifying" the concurrent execution tree by merging points after e.g. threads perform actions that commute with each other. This is unlike traditional partial-order reduction in that it relies on the symbolic join to combine the results of commuting operations in a way that the following symbolic execution can take advantage of, rather than performing some up-front analysis to identify commuting operations and quotienting the space of executions. The current state of the symbolic join and execution is significantly suboptimal in this regard. Differential Revision: D29441149 fbshipit-source-id: cf801a6b1		3 years ago
..
fol	[sledge] Add a distinct formula and use it to strengthen Sh.pure_approx	3 years ago
llair	[sledge] Add concurrency analysis	3 years ago
test	[sledge] Add concurrency analysis	3 years ago
alarm.ml	[sledge] Add explicit type for Alarms	4 years ago
alarm.mli	[sledge] Add explicit type for Alarms	4 years ago
control.ml	[sledge] Add concurrency analysis	3 years ago
control.mli	[sledge] Add scheduler strategy for random path sampling	4 years ago
control_intf.ml	[sledge] Move analysis config options from Domain_intf to Control_intf	4 years ago
domain_intf.ml	[sledge] Add concurrency analysis	3 years ago
domain_relation.ml	[sledge] Add concurrency analysis	3 years ago
domain_relation.mli	[sledge] Add concurrency analysis	3 years ago
domain_sh.ml	[sledge] Add concurrency analysis	3 years ago
domain_sh.mli	[sledge] Add concurrency analysis	3 years ago
domain_unit.ml	[sledge] Add concurrency analysis	3 years ago
domain_unit.mli	[sledge] Rename Dom to Domain	4 years ago
domain_used_globals.ml	[sledge] Add concurrency analysis	3 years ago
domain_used_globals.mli	[sledge] Rename Dom to Domain	4 years ago
exec.ml	[sledge] Add explicit type for Alarms	4 years ago
exec.mli	[sledge] Add explicit type for Alarms	4 years ago
llair_to_Fol.ml	[sledge] Add concurrency analysis	3 years ago
llair_to_Fol.mli	[sledge] Add concurrency analysis	3 years ago
or_alarm.ml	[sledge] Add explicit type for Alarms	4 years ago
or_alarm.mli	[sledge] Add explicit type for Alarms	4 years ago
report.ml	[sledge] Add type for instruction pointers and use in Control	3 years ago
report.mli	[sledge] Add type for instruction pointers and use in Control	3 years ago
sh.ml	[sledge] Minor improvement of Sh printing	3 years ago
sh.mli	[sledge] Add n-ary join to Domain and use in analysis	3 years ago
solver.ml	[sledge] Make tracing more explicit by including module names	4 years ago
solver.mli	[sledge] Add support for dumping and replaying solver queries	4 years ago
stop.ml	[sledge] Support stopping on first report in release mode	4 years ago
stop.mli	[sledge] Support stopping on first report in release mode	4 years ago
threadID.ml	[sledge] Add concurrency analysis	3 years ago
threadID.mli	[sledge] Add concurrency analysis	3 years ago