Finding real bugs in big programs with incorrectness logic

QL Le, A Raad, J Villard, J Berdine, D Dreyer… - Proceedings of the …, 2022 - dl.acm.org
Incorrectness Logic (IL) has recently been advanced as a logical theory for compositionally
proving the presence of bugs—dual to Hoare Logic, which is used to compositionally prove …

Symbolic execution and recent applications to worst-case execution, load testing, and security analysis

CS Păsăreanu, R Kersten, K Luckow, QS Phan - Advances in Computers, 2019 - Elsevier
Symbolic execution is a systematic program analysis technique which executes programs
on symbolic inputs, representing multiple concrete inputs, and represents the program …

[PDF][PDF] Symbolic execution and recent applications to worst-case execution, load testing and security analysis

CS Pasareanu, R Kersten, L Kasper… - Advances in …, 2018 - qsphan.github.io
Symbolic execution is a systematic program analysis technique which executes programs
on symbolic inputs, representing multiple concrete inputs, and represents the program …

Graph-based seed object synthesis for search-based unit testing

Y Lin, YS Ong, J Sun, G Fraser, JS Dong - … of the 29th ACM Joint Meeting …, 2021 - dl.acm.org
Search-based software testing (SBST) generates tests using search algorithms guided by
measurements gauging how far a test case is away from exercising a coverage goal. The …

Generically Automating Separation Logic by Functors, Homomorphisms, and Modules

Q Xu, D Sanan, Z Hou, X Luan, C Watt… - Proceedings of the ACM on …, 2025 - dl.acm.org
Foundational verification considers the functional correctness of programming languages
with formalized semantics and uses proof assistants (eg, Coq, Isabelle) to certify proofs. The …

Compositional satisfiability solving in separation logic

QL Le - … , Model Checking, and Abstract Interpretation: 22nd …, 2021 - Springer
We introduce a novel decision procedure to the satisfiability problem in array separation
logic combined with general inductively defined predicates and arithmetic. Our proposal …

Testing heap-based programs with Java StarFinder

LH Pham, QL Le, QS Phan, J Sun, S Qin - Proceedings of the 40th …, 2018 - dl.acm.org
We present Java StarFinder (JSF), a tool for automated test case generation and error
detection for Java programs having inputs in the form of complex heap-manipulating data …

Concolic testing heap-manipulating programs

LH Pham, QL Le, QS Phan, J Sun - Formal Methods–The Next 30 Years …, 2019 - Springer
Concolic testing is a test generation technique which works effectively by integrating random
testing generation and symbolic execution. Existing concolic testing engines focus on …

S2TD: A separation logic verifier that supports reasoning of the absence and presence of bugs

QL Le, J Sun, LH Pham, S Qin - arXiv preprint arXiv:2209.09327, 2022 - arxiv.org
Heap-manipulating programs are known to be challenging to reason about. We present a
novel verifier for heap-manipulating programs called S2TD, which encodes programs …

Free objects in constraint-logic object-oriented programming

JC Dageförde, H Winkelmann, H Kuchen - Proceedings of the 23rd …, 2021 - dl.acm.org
Constraint-logic object-oriented programming facilitates the integrated development of
business software that occasionally solves constraint-logic problems or makes other use of …