SPLASH 2026
Sun 4 - Fri 9 October 2026 Oakland, California, United States
co-located with SPLASH/ISSTA 2026
Tue 6 Oct 2026 10:30 - 10:48 at East Hall 2 - Pointer and Dataflow Analysis Chair(s): Manas Thakur

Sparse Value-Flow Analysis (SVFA) is essential for detecting software bugs such as null pointer dereference and memory leak. However, SVFA heavily relies on path-sensitive pointer analysis, which faces significant scalability challenges when analyzing industrial-scale projects, notably the summary-explosion problem. To address this issue, we propose \textsc{Hermes}, which symbolizes memory side effects and constructs an incomplete Sparse Value-Flow Graph (SVFG) called Lazy Symbolic Expression Graph (LSEG). Leveraging this structure, \textsc{Hermes} builds inter-procedural value flows relevant to bug detection only when necessary, significantly reducing the overhead of pointer analysis and streamlining the bug-search paths. Evaluations on large-scale real-world projects demonstrate that, compared to the state-of-the-art, \textsc{Hermes} achieves average speedups of at least 9.84$\times$ and 4.79$\times$ for pointer analysis and bug search, respectively, without sacrificing the effectiveness of bug detection.

Tue 6 Oct

Displayed time zone: Pacific Time (US & Canada) change

10:30 - 12:00
Pointer and Dataflow AnalysisOOPSLA at East Hall 2
Chair(s): Manas Thakur IIT Bombay
10:30
18m
Talk
Hermes: Making Path-Sensitive Pointer Analysis Scalable for Sparse Value-Flow Analysis
OOPSLA
Yuxuan He Xiamen University, Ruilin Jiang Xiamen University, He Zhang Xiamen University, Qingkai Shi Nanjing University, Huaxun Huang Xiamen University, Rongxin Wu Xiamen University
DOI
10:48
18m
Talk
Heap Abstraction via Early-Confluent Object Merging for Pointer Analysis
OOPSLA
Jinpeng Wang Nanjing University, Yufei Liang Nanjing University, Zhongsheng Zhan Nanjing University, Tian Tan Nanjing University, Yue Li Nanjing University
DOI Pre-print
11:06
18m
Talk
Mechanically Translating Iterative Dataflow Analysis to Algebraic Program Analysis
OOPSLA
Chenyu Zhou University of Southern California, Jingbo Wang Purdue University, Chao Wang University of Southern California
DOI
11:24
18m
Talk
When FPGA Meets Dataflow Analysis: An Explorative Step
OOPSLA
Fang Wei Nanjing University, Qinlin Chen Nanjing University, Nairen Zhang Nanjing University, Jiacai Cui Nanjing University, Tian Tan Nanjing University, Zhiqiang Zuo Nanjing University, Yue Li Nanjing University
DOI
11:42
18m
Talk
Beyond Nominality: Faster Rapid Type Analysis in the Presence of Structural Subtyping
OOPSLA
Elton Pinto Georgia Institute of Technology, Milind Chabbi Uber Technologies
DOI