License: Creative Commons Attribution 3.0 Unported license (CC BY 3.0)
When quoting this document, please refer to the following
DOI: 10.4230/OASIcs.WCET.2013.42
URN: urn:nbn:de:0030-drops-41211
URL: http://dagstuhl.sunsite.rwth-aachen.de/volltexte/2013/4121/
Go to the corresponding OASIcs Volume Portal

Cassé, Hugues ; Birée, Florian ; Sainrat, Pascal

Multi-architecture Value Analysis for Machine Code

pdf-format:
6.pdf (0.5 MB)

Abstract

Safety verification of critical real-time embedded systems requires Worst Case Execution Time information (WCET). Among the existing approaches to estimate the WCET, static analysis at the machine code level has proven to get safe results. A lot of different architectures are used in real-time systems but no generic solution provides the ability to perform static analysis of values handled by machine instructions. Nonetheless, results of such analyses are worth to improve the precision of other analyzes like data cache, indirect branches, etc. This paper proposes a semantic language aimed at expressing semantics of machine instructions whatever the underlying instruction set is. This ensures abstraction and portability of the
value analysis or any analysis based on the semantic expression of the instructions. As a proof of concept, we adapted and refined an existing analysis representing values as Circular-Linear Progression (CLP), that is, as a sparse integer interval effective to model pointers. In addition, we show how our semantic instructions allow to build back conditions of loop in order to refine the CLP values and improve the precision of the analysis.Both contributions have been implemented in our framework, OTAWA, and experimented on the Malärdalen benchmark to desmonstrate the effectiveness of the approach.

BibTeX - Entry

@InProceedings{cass_et_al:OASIcs:2013:4121,
  author =	{Hugues Cass{\'e} and Florian Bir{\'e}e and Pascal Sainrat},
  title =	{{Multi-architecture Value Analysis for Machine Code}},
  booktitle =	{13th International Workshop on Worst-Case Execution Time Analysis},
  pages =	{42--52},
  series =	{OpenAccess Series in Informatics (OASIcs)},
  ISBN =	{978-3-939897-54-5},
  ISSN =	{2190-6807},
  year =	{2013},
  volume =	{30},
  editor =	{Claire Maiza},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{http://drops.dagstuhl.de/opus/volltexte/2013/4121},
  URN =		{urn:nbn:de:0030-drops-41211},
  doi =		{10.4230/OASIcs.WCET.2013.42},
  annote =	{Keywords: machine code, static analysis, value analysis, semantics}
}

Keywords: machine code, static analysis, value analysis, semantics
Collection: 13th International Workshop on Worst-Case Execution Time Analysis
Issue Date: 2013
Date of publication: 08.07.2013

DROPS-Home | Fulltext Search | Imprint | Privacy Published by LZI