Wed 23 Oct 2024 16:00 - 16:20 at IBR East - Static Analysis and Program Verification 3 Chair(s): Frank Tip

While static analysis is instrumental in uncovering software bugs, its precision in analyzing large and intricate codebases remains challenging. The emerging prowess of Large Language Models (LLMs) offers a promising avenue to address these complexities. In this paper, we present LLift, a pioneering framework that synergizes static analysis and LLMs, with a spotlight on identifying use-before-initialization (UBI) bugs within the Linux kernel. Drawing from our insights into variable usage conventions in Linux, we enhance path analysis using post-constraint guidance. This approach, combined with our methodically crafted procedures, empowers LLift to adeptly handle the challenges of bug-specific modeling, extensive codebases, and the unpredictable nature of LLMs. Our real-world evaluations identified four previously undiscovered UBI bugs in the mainstream Linux kernel, which the Linux community has acknowledged. This study reaffirms the potential of marrying static analysis with LLMs, setting a compelling direction for future research in this area.

Wed 23 Oct

Displayed time zone: Pacific Time (US & Canada) change

16:00 - 17:40
Static Analysis and Program Verification 3OOPSLA 2024 at IBR East
Chair(s): Frank Tip Northeastern University
16:00
20m
Talk
Enhancing Static Analysis for Practical Bug Detection: An LLM-Integrated Approach
OOPSLA 2024
Haonan Li University of California at Riverside, USA, Yu Hao University of California at Riverside, USA, Yizhuo Zhai University of California at Riverside, USA, Zhiyun Qian University of California at Riverside, USA
DOI
16:20
20m
Talk
PP-CSA: Practical Privacy-Preserving Software Call Stack Analysis
OOPSLA 2024
Zhaoyu Wang HKUST, Pingchuan Ma HKUST, Huaijin Wang , Shuai Wang Hong Kong University of Science and Technology
DOI
16:40
20m
Talk
Semantic-Type-Guided Bug Finding
OOPSLA 2024
Kelvin Qian Johns Hopkins University, Scott F. Smith The Johns Hopkins University, Brandon Stride Johns Hopkins University, Shiwei Weng Johns Hopkins University, Ke Wu Johns Hopkins University
DOI
17:00
20m
Talk
Seneca: Taint-Based Call Graph Construction for Java Object Deserialization
OOPSLA 2024
Joanna C. S. Santos University of Notre Dame, Mehdi Mirakhorli Rochester Institute of Technology, Ali Shokri Virginia Tech
DOI
17:20
20m
Talk
VeriEQL: Bounded Equivalence Verification for Complex SQL Queries with Integrity ConstraintsOOPSLA 2024 Distinguished Paper Award
OOPSLA 2024
Yang He Simon Fraser University, Pinhan Zhao University of Michigan, Xinyu Wang University of Michigan, Yuepeng Wang Simon Fraser University
DOI Pre-print