Constraint based analysis of java using jahob and amrc
Project Introduction
In this project, we are trying to bridge two verification tools Jahob and Armc. Jahob is quite powerful in accepting complecated Java programs and translate it into simplified intermidiate language. We are trying to write a translater from this representation of program to input format of ARMC. ARMC takes transition relation as input. ARMC is powerful in computing loop invariant and fixedpoint analysis automaticlly. Result of ARMC can be fed back to Jahob to improe its analysis of programs. (Both the tools are evolving and It is difficult to claim about their capabilities.)
Class Presentation
I am going to present following paper which describes internal functions of ARMC.
ARMC: The Logical Choice for Software Model Checking with Abstraction Refinement
ARMC
ARMC stands for Abstract Refinement Model Checker. We have already learned this methodlogy in the course. This model checker executes program using abstract set of states. Model checker divided its process in following three procedures:
Abstract Fixed Point
Feasible Counter Example
Refine
ARMC calls them in a loop. Until any of the following two event happens:
Abstract Fixed Point
finds a fixed point which does not contain error state.Feasible Counter Example
finds a concrete counter example.
Project Status
- Infrastructure for ARMC translation is done.
- Able to translate simple arithmetic programs.
- De-sugaring of program calls yet to be done.
- Only very simple formula can be processed.( Need to convert Formula to DNF form)
- Sometimes generates buggy transition relation ( But few tests are working well. )
- Support for If and Loops is incomplete.
Difficulties and issues
- It took some time to understand Jahob data-structures.
- Some places it was difficult to say what format of formula program will receive.
- Needs more experimentation and effort for making this plugin usable