short-paper

ESBMC-Jimple: verifying Kotlin programs via jimple intermediate representation

Authors:

Lucas C. CordeiroAuthors Info & Claims

ISSTA 2022: Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis

Pages 777 - 780

https://doi.org/10.1145/3533767.3543294

Published: 18 July 2022 Publication History

Get Access

Abstract

We describe and evaluate the first model checker for verifying Kotlin programs through the Jimple intermediate representation. The verifier, named ESBMC-Jimple, is built on top of the Efficient SMT-based Context-Bounded Model Checker (ESBMC). It uses the Soot framework to obtain the Jimple IR, representing a simplified version of the Kotlin source code, containing a maximum of three operands per instruction. ESBMC-Jimple processes Kotlin source code together with a model of the standard Kotlin libraries and checks a set of safety properties. Experimental results show that ESBMC-Jimple can correctly verify a set of Kotlin benchmarks from the literature; it is competitive with state-of-the-art Java bytecode verifiers. A demonstration is available at https://youtu.be/J6WhNfXvJNc.

References

[1]

The Algorithms. 2022. TheAlgorithms/Kotlin (Github repository). https://github.com/TheAlgorithms/Kotlin

Google Scholar

[2]

Stephan Arlt, Philipp Rümmer, and Martin Schäf. 2013. Joogie: From java through jimple to boogie. In Proceedings of the 2Nd ACM SIGPLAN International Workshop on State Of the Art in Java Program Analysis. 3–8.

Digital Library

Google Scholar

[3]

Dirk Beyer. 2022. Progress on software verification: SV-COMP 2022. In TACAS. 13244, 375.

Google Scholar

[4]

Edmund M Clarke, Thomas A Henzinger, Helmut Veith, and Roderick Bloem. 2018. Handbook of model checking. 10, Springer.

Google Scholar

[5]

Lucas Cordeiro, Pascal Kesseli, Daniel Kroening, Peter Schrammel, and Marek Trtik. 2018. JBMC: A bounded model checking tool for verifying Java bytecode. In CAV. 183–190.

Google Scholar

[6]

Kotlin Foundation. 2022. Kotlin Language. https://kotlinlang.org/

Google Scholar

[7]

Bruno Góis Mateus and Matias Martinez. 2019. An empirical study on quality of Android applications written in Kotlin language. Empirical Software Engineering, 24, 6 (2019), 3356–3393.

Crossref

Google Scholar

[8]

Temesghen Kahsai, Philipp Rümmer, and Martin Schäf. 2019. JayHorn: A Java Model Checker - (Competition Contribution). In TACAS (LNCS, Vol. 11429). Springer, 214–218.

Crossref

Google Scholar

[9]

B. Fischer L. Cordeiro and J. MARQUES-SILVA. 2012. SMT-Based Bounded Model Checking for Embedded ANSI-C Software. IEEE Transactions on Software Engineering (TSE), 38 (2012), 957–974.

Digital Library

Google Scholar

[10]

Felipe R Monteiro, Mikhail R Gadelha, and Lucas C Cordeiro. 2022. Model checking C++ programs. STVR, 32, 1 (2022), e1793.

Google Scholar

[11]

Victor Oliveira, Leopoldo Teixeira, and Felipe Ebert. 2020. On the Adoption of Kotlin on Android Development: A Triangulation Study. In SANER. 206–216.

Google Scholar

[12]

Raja Vallée-Rai, Phong Co, Etienne Gagnon, Laurie Hendren, Patrick Lam, and Vijay Sundaresan. 2010. Soot: A Java bytecode optimization framework. In CASCON First Decade High Impact Papers. 214–224.

Digital Library

Google Scholar

Cited By

View all

Farias BMenezes Rde Lima Filho ESun YCordeiro LChristakis MPradel M(2024)ESBMC-Python: A Bounded Model Checker for Python ProgramsProceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis10.1145/3650212.3685304(1836-1840)Online publication date: 11-Sep-2024
https://dl.acm.org/doi/10.1145/3650212.3685304
Tihanyi NBisztray TFerrag MJain RCordeiro L(2024)How secure is AI-generated code: a large-scale comparison of large language modelsEmpirical Software Engineering10.1007/s10664-024-10590-130:2Online publication date: 21-Dec-2024
https://doi.org/10.1007/s10664-024-10590-1

Index Terms

ESBMC-Jimple: verifying Kotlin programs via jimple intermediate representation
1. Software and its engineering
  1. Software creation and management
    1. Software verification and validation
      1. Formal software verification
2. Theory of computation
  1. Logic
    1. Verification by model checking

Recommendations

Proving that programs eventually do something good
POPL '07: Proceedings of the 34th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages

In recent years we have seen great progress made in the area of automatic source-level static analysis tools. However, most of today's program verification tools are limited to properties that guarantee the absence of bad events (safety properties). ...
ESBMC 5.0: an industrial-strength C model checker
ASE '18: Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering

ESBMC is a mature, permissively licensed open-source context-bounded model checker for the verification of single- and multi-threaded C programs. It can verify both predefined safety properties (e.g., bounds check, pointer safety, overflow) and user-...
Verifying Components of Arm^® Confidential Computing Architecture with ESBMC
Static Analysis
Abstract
Realm Management Monitor (RMM) is an essential firmware component within the recent Arm Confidential Computing Architecture (Arm CCA). Previous work applies formal techniques to verify the specification and prototype reference implementation of ...

Comments

Information & Contributors

Information

Published In

ISSTA 2022: Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis

July 2022

808 pages

ISBN:9781450393799

DOI:10.1145/3533767

General Chair:
Sukyoung Ryu
KAIST, South Korea
,
Program Chair:
Yannis Smaragdakis
University of Athens, Greece

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 18 July 2022

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Short-paper

Conference

ISSTA '22

Sponsor:

SIGSOFT

ISSTA '22: 31st ACM SIGSOFT International Symposium on Software Testing and Analysis

July 18 - 22, 2022

Virtual, South Korea

Acceptance Rates

Overall Acceptance Rate 58 of 213 submissions, 27%

Upcoming Conference

ISSTA '25

Sponsor:
sigsoft

34th ACM SIGSOFT International Symposium on Software Testing and Analysis

June 25 - 28, 2025

Trondheim , Norway

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
124
Total Downloads

Downloads (Last 12 months)26
Downloads (Last 6 weeks)2

Reflects downloads up to 29 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Farias BMenezes Rde Lima Filho ESun YCordeiro LChristakis MPradel M(2024)ESBMC-Python: A Bounded Model Checker for Python ProgramsProceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis10.1145/3650212.3685304(1836-1840)Online publication date: 11-Sep-2024
https://dl.acm.org/doi/10.1145/3650212.3685304
Tihanyi NBisztray TFerrag MJain RCordeiro L(2024)How secure is AI-generated code: a large-scale comparison of large language modelsEmpirical Software Engineering10.1007/s10664-024-10590-130:2Online publication date: 21-Dec-2024
https://doi.org/10.1007/s10664-024-10590-1

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Abstract

References

Cited By

Index Terms

Recommendations

Proving that programs eventually do something good

ESBMC 5.0: an industrial-strength C model checker

Verifying Components of Arm® Confidential Computing Architecture with ESBMC

Comments

Information

Published In

Sponsors

Publisher

Publication History

Permissions

Check for updates

Author Tags

Qualifiers

Conference

Acceptance Rates

Upcoming Conference

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

Login options

Full Access

View options

PDF

eReader

Share

Share this Publication link

Share on social media

Affiliations

Verifying Components of Arm^® Confidential Computing Architecture with ESBMC