// Run Alias Analysis on a sequential Boogie program
// and returned the pruned program
public static PersistentProgram RunAliasAnalysis(PersistentProgram inp, bool pruneEP = true)
{
var newinp = inp;
if (Options.unrollDepth > 0)
{
Stats.resume("unroll");
var unrp = new cba.LoopUnrollingPass(Options.unrollDepth);
newinp = unrp.run(newinp);
Stats.stop("unroll");
}
var program = newinp.getProgram();
//AliasAnalysis.AliasAnalysis.dbg = true;
//AliasAnalysis.AliasConstraintSolver.dbg = true;
AliasAnalysis.AliasAnalysisResults res = null;
if (Options.UseAliasAnalysisForAssertions)
{
// Do SSA
program =
SSA.Compute(program, PhiFunctionEncoding.Verifiable, new HashSet <string> {
"int"
});
if (Options.inlineDepth > 0)
{
Stats.resume("inlining");
Stats.resume("read.write");
program = BoogieUtil.ReResolveInMem(program);
Stats.stop("read.write");
var op = CommandLineOptions.Clo.InlineDepth;
CommandLineOptions.Clo.InlineDepth = Options.inlineDepth;
cba.InliningPass.InlineToDepth(program);
CommandLineOptions.Clo.InlineDepth = op;
RemoveHavocs(program);
Stats.stop("inlining");
}
/* TODO: Is this needed?
* Stats.resume("read.write");
* program = BoogieUtil.ReResolveInMem(program);
* Stats.stop("read.write");
*/
// Make sure that aliasing queries are on identifiers only
var af =
AliasAnalysis.SimplifyAliasingQueries.Simplify(program);
Stats.resume("fixpoint");
res =
AliasAnalysis.AliasAnalysis.DoAliasAnalysis(program);
Stats.stop("fixpoint");
}
else
{
// Make sure that aliasing queries are on identifiers only
var af =
AliasAnalysis.SimplifyAliasingQueries.Simplify(program);
res = new AliasAnalysis.AliasAnalysisResults();
af.Iter(s => res.aliases.Add(s, true));
}
var origProgram = inp.getProgram();
AliasAnalysis.PruneAliasingQueries.Prune(origProgram, res);
if (pruneEP)
{
PruneRedundantEntryPoints(origProgram);
}
return(new PersistentProgram(origProgram, inp.mainProcName, inp.contextBound));
}
// Replace "assume x == NULL" with "assume x == NULL; assert false;"
// provided x can indeed alias NULL
// Also returns a map from allocation_site to possible branches affected by it
public static Tuple <Program, Dictionary <int, HashSet <int> > > Run(Program program, string ep, bool useAA, bool injectAssert)
{
var ib = new InstrumentBranches(program, useAA, injectAssert);
ib.instrument(ep);
if (!useAA)
{
Console.WriteLine("For deadcode detection, we added {0} angelic assertions", ib.assertsAdded);
return(Tuple.Create <Program, Dictionary <int, HashSet <int> > >(program, null));
}
var inp = new PersistentProgram(program, ep, 1);
//inp.writeToFile("progbefore.bpl");
// Make sure that aliasing queries are on identifiers only
var af =
AliasAnalysis.SimplifyAliasingQueries.Simplify(program);
// Do SSA
program =
SSA.Compute(program, PhiFunctionEncoding.Verifiable, new HashSet <string> {
"int"
});
//BoogieUtil.PrintProgram(program, "b3.bpl");
// Run AA
AliasAnalysis.AliasAnalysisResults res =
AliasAnalysis.AliasAnalysis.DoAliasAnalysis(program);
// allocation site of null
var nil = res.allocationSites[ib.nullQuery.Name].FirstOrDefault();
Debug.Assert(nil != null);
var deadcodeAssertId = 0;
// add the assert false OR assume reach(true)
var MkAssertFalse = new Func <int, PredicateCmd>(i =>
{
var acmd = injectAssert ? BoogieAstFactory.MkAssert(Expr.False) as PredicateCmd :
new AssumeCmd(Token.NoToken,
new NAryExpr(Token.NoToken, new FunctionCall(ib.reach), new List <Expr> {
Expr.True
})) as PredicateCmd;
acmd.Attributes = new QKeyValue(Token.NoToken,
"deadcode", new List <object> {
Expr.Literal(i)
}, null);
return(acmd);
});
// build a map from AA allocation sites to allocation_site id
var as2id = new Dictionary <string, HashSet <int> >();
foreach (var tup in ib.allocationSite2Func)
{
var asites = res.allocationSites[tup.Value.Name];
asites.Where(s => !as2id.ContainsKey(s)).Iter(s => as2id.Add(s, new HashSet <int>()));
asites.Iter(s => as2id[s].Add(tup.Key));
}
if (AliasAnalysis.AliasConstraintSolver.environmentPointersUnroll != 0)
{
Console.WriteLine("AA Warning: EnvironmentPointersUnroll is non-zero, which means that the dependency information for deadcode branches is not sound.");
Console.WriteLine("AA Warning: We currently rely on: forall unknown allocation sites that return a, ReachableAllocationSitesViaFields(a) = {a}.");
}
// map from allocation_site to possible branches affected by it
var depInfo = new Dictionary <int, HashSet <int> >();
program = inp.getProgram();
var id = 0; var added = 0;
foreach (var impl in program.TopLevelDeclarations.OfType <Implementation>())
{
foreach (var blk in impl.Blocks)
{
blk.Cmds.RemoveAll(c => (c is AssumeCmd) && QKeyValue.FindBoolAttribute((c as AssumeCmd).Attributes, "ForDeadCodeDetection"));
var ncmds = new List <Cmd>();
for (int i = 0; i < blk.Cmds.Count; i++)
{
ncmds.Add(blk.Cmds[i]);
var acmd = blk.Cmds[i] as AssumeCmd;
if (acmd == null)
{
continue;
}
id++;
if (!ib.id2Func.ContainsKey(id))
{
continue;
}
var asites = res.allocationSites[ib.id2Func[id].Name];
//if (!Options.disbleDeadcodeOpt || !asites.Contains(nil) && asites.Count != 0)
{
var assertid = deadcodeAssertId++;
ncmds.Add(MkAssertFalse(assertid));
// compute dependent allocations for this branch
var dep = new HashSet <int>();
asites.Where(a => as2id.ContainsKey(a))
.Iter(a => dep.UnionWith(as2id[a]));
dep.Where(d => !depInfo.ContainsKey(d))
.Iter(d => depInfo.Add(d, new HashSet <int>()));
dep.Iter(d => depInfo[d].Add(assertid));
added++;
}
//i++;
}
blk.Cmds = ncmds;
}
}
//BoogieUtil.PrintProgram(program, "progafter.bpl");
Console.WriteLine("For deadcode detection, we added {0} angelic assertions", added);
return(Tuple.Create(program, depInfo));
}
static void Main(string[] args)
{
System.Runtime.GCSettings.LatencyMode = System.Runtime.GCLatencyMode.Batch;
if (args.Length < 2 || !args[0].EndsWith(".bpl") || !args[1].EndsWith(".bpl"))
{
Console.WriteLine("Usage: AvHarnessInstrumentation infile.bpl outfile.bpl [options]");
return;
}
SetOptions(args);
// Initialize Boogie
CommandLineOptions.Install(new CommandLineOptions());
CommandLineOptions.Clo.PrintInstrumented = true;
BoogieUtil.InitializeBoogie("");
ProgTransformation.PersistentProgramIO.useDuplicator = true;
var sw = new Stopwatch();
sw.Start();
if (Options.killAfter > 0)
{
var timer = new System.Timers.Timer(Options.killAfter * 1000);
timer.Elapsed += (sender, e) => HandleTimer(sw);
timer.Start();
}
try
{
// Get the program, install the harness and do basic instrumentation
var inprog = GetProgram(args[0]);
Utils.Print(string.Format("#Procs : {0}", inprog.TopLevelDeclarations.OfType <Implementation>().Count()), Utils.PRINT_TAG.AV_STATS);
Utils.Print(string.Format("#EntryPoints : {0}", harnessInstrumentation.entrypoints.Count), Utils.PRINT_TAG.AV_STATS);
Utils.Print(string.Format("#AssertsBeforeAA : {0}", AssertCountVisitor.Count(inprog)), Utils.PRINT_TAG.AV_STATS);
if (Options.delayAA)
{
PruneRedundantEntryPoints(inprog);
BoogieUtil.PrintProgram(inprog, args[1]);
}
else
{
var program = new PersistentProgram(inprog, AvnAnnotations.CORRAL_MAIN_PROC, 0);
// Run alias analysis
Stats.resume("alias.analysis");
Console.WriteLine("Running alias analysis");
program = RunAliasAnalysis(program);
Stats.stop("alias.analysis");
var assertCnt = AssertCountVisitor.Count(program.getProgram());
Utils.Print(string.Format("#AssertsAfterAA : {0}", assertCnt), Utils.PRINT_TAG.AV_STATS);
// run Houdini pass
if (Options.HoudiniPass)
{
Utils.Print("Running Houdini Pass");
program = RunHoudiniPass(program);
assertCnt = AssertCountVisitor.Count(program.getProgram());
Utils.Print(string.Format("#Asserts : {0}", assertCnt), Utils.PRINT_TAG.AV_STATS);
}
if (assertCnt == 0)
{
// program has been proved correct
// Write a trivial program
System.IO.File.WriteAllLines(args[1], new string[]
{
"procedure {:entrypoint} {:NoVerificationNecessary} dummy() { }"
});
}
else
{
program.writeToFile(args[1]);
}
}
}
catch (Exception e)
{
//stacktrace containts source locations, confuses regressions that looks for AV_OUTPUT
Utils.Print(String.Format("AngelicVerifier failed with: {0}", e.Message), Utils.PRINT_TAG.AV_OUTPUT);
Utils.Print(String.Format("AngelicVerifier failed with: {0}", e.Message + e.StackTrace), Utils.PRINT_TAG.AV_DEBUG);
}
finally
{
Stats.printStats();
Utils.Print(string.Format("TotalTime(ms) : {0}", sw.ElapsedMilliseconds), Utils.PRINT_TAG.AV_STATS);
}
}
static void Main(string[] args)
{
System.Runtime.GCSettings.LatencyMode = System.Runtime.GCLatencyMode.Batch;
if (args.Length < 2 || !args[0].EndsWith(".bpl") || !args[1].EndsWith(".bpl"))
{
Console.WriteLine("Usage: AvHarnessInstrumentation infile.bpl outfile.bpl [options]");
return;
}
SetOptions(args);
// Initialize Boogie
CommandLineOptions.Install(new CommandLineOptions());
CommandLineOptions.Clo.PrintInstrumented = true;
BoogieUtil.InitializeBoogie("");
ProgTransformation.PersistentProgramIO.useDuplicator = true;
var sw = new Stopwatch();
sw.Start();
try
{
// Get the program, install the harness and do basic instrumentation
var inprog = GetProgram(args[0]);
var program = new PersistentProgram(inprog, AvnAnnotations.CORRAL_MAIN_PROC, 0);
Utils.Print(string.Format("#Procs : {0}", inprog.TopLevelDeclarations.OfType <Implementation>().Count()), Utils.PRINT_TAG.AV_STATS);
Utils.Print(string.Format("#EntryPoints : {0}", harnessInstrumentation.entrypoints.Count), Utils.PRINT_TAG.AV_STATS);
Utils.Print(string.Format("#AssertsBeforeAA : {0}", AssertCountVisitor.Count(inprog)), Utils.PRINT_TAG.AV_STATS);
// Run alias analysis
Stats.resume("alias.analysis");
Console.WriteLine("Running alias analysis");
program = RunAliasAnalysis(program);
Stats.stop("alias.analysis");
Utils.Print(string.Format("#AssertsAfterAA : {0}", AssertCountVisitor.Count(program.getProgram())), Utils.PRINT_TAG.AV_STATS);
// run Houdini pass
if (Options.HoudiniPass)
{
Utils.Print("Running Houdini Pass");
program = RunHoudiniPass(program);
Utils.Print(string.Format("#Asserts : {0}", AssertCountVisitor.Count(program.getProgram())), Utils.PRINT_TAG.AV_STATS);
}
program.writeToFile(args[1]);
}
catch (Exception e)
{
//stacktrace containts source locations, confuses regressions that looks for AV_OUTPUT
Utils.Print(String.Format("AngelicVerifier failed with: {0}", e.Message), Utils.PRINT_TAG.AV_OUTPUT);
Utils.Print(String.Format("AngelicVerifier failed with: {0}", e.Message + e.StackTrace), Utils.PRINT_TAG.AV_DEBUG);
}
finally
{
Stats.printStats();
Utils.Print(string.Format("TotalTime(ms) : {0}", sw.ElapsedMilliseconds), Utils.PRINT_TAG.AV_STATS);
}
}
