A Tale of 1001 LoC: Potential Runtime Error-Guided Specification Synthesis for Verifying Large-Scale Programs
Fully automated verification of large-scale software and hardware systems is arguably the holy grail of formal methods. Large language models (LLMs) have recently demonstrated their potential for enhancing the degree of automation in formal verification by, e.g., generating formal specifications as essential to deductive verification, yet exhibit poor scalability due to long-context reasoning limitations and, more importantly, the difficulty of inferring complex, interprocedural specifications. This paper presents Preguss - a modular, fine-grained framework for automating the generation and refinement of formal specifications. Preguss synergizes between static analysis and deductive verification by steering two components in a divide-and-conquer fashion: (i) potential runtime error-guided construction and prioritization of verification units, and (ii) LLM-aided synthesis of interprocedural specifications at the unit level. We show that Preguss substantially outperforms state-of-the-art LLM-based approaches and, in particular, it enables highly automated RTE-freeness verification for real-world programs with over a thousand LoC, with a reduction of 80.6%~88.9% human verification effort.
Wed 7 OctDisplayed time zone: Pacific Time (US & Canada) change
10:30 - 12:00 | Analysing Dependencies and AlarmsOOPSLA at East Hall 1 Chair(s): Manu Sridharan University of California at Riverside | ||
10:30 18mTalk | Floating-Point Usage on GitHub: A Large-Scale Study of Statically Typed Languages OOPSLA Andrea Gilot Uppsala University, Tobias Wrigstad Uppsala University, Eva Darulova Uppsala University DOI Pre-print | ||
10:48 18mTalk | A Tale of 1001 LoC: Potential Runtime Error-Guided Specification Synthesis for Verifying Large-Scale Programs OOPSLA Zhongyi Wang Zhejiang University, Tengjie Lin Zhejiang University, Mingshuai Chen Zhejiang University, Haokun Li Peking University, Mingqi Yang Zhejiang University, Xiao Yi Chinese University of Hong Kong, Shengchao Qin Xidian University, Yixing Luo Beijing Institute of Control Engineering, Xiaofeng Li Beijing Institute of Control Engineering, Bin Gu Beijing Institute of Control Engineering, Liqiang Lu Zhejiang University, Jianwei Yin Zhejiang University DOI | ||
11:06 18mTalk | Beer: Interactive Alarm Resolution in Bayesian Program Analysis via Exploration-Exploitation OOPSLA DOI | ||
11:24 18mTalk | CLower: Detecting Compiler Pessimization Bugs through Redundant Memory Accesses OOPSLA Jianhao Xu Southeast University, Kunbo Zhang State Key Laboratory for Novel Software Technology at Nanjing University, Mathias Payer EPFL, Kangjie Lu University of Minnesota, Bing Mao State Key Laboratory for Novel Software Technology at Nanjing University DOI | ||