1 / 18

Discovering Affine Equalities Using Random Interpretation

Discovering Affine Equalities Using Random Interpretation. Sumit Gulwani George Necula EECS Department University of California, Berkeley. Probabilistically Sound Program Analysis!. Sound program analysis is hard We are used to pay in terms of Loss of completeness or precision

omer
Download Presentation

Discovering Affine Equalities Using Random Interpretation

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Discovering Affine Equalities UsingRandom Interpretation Sumit Gulwani George Necula EECS Department University of California, Berkeley

  2. Probabilistically Sound Program Analysis! • Sound program analysis is hard • We are used to pay in terms of • Loss of completeness or precision • Complicated algorithms • Long Running Time • Can we pay in terms of soundness instead? • Judgments are unsound with low probability • We can predict and control the probability of error • Can gain simplicity and efficiency

  3. The Problem of Discovering Affine Equalities • Discover equalities of the form 2y + 3z = 7 • Compiler Optimizations • Loop Invariants • Translation Validation • There exist polynomial time deterministic algorithms [Karr 76] • involve complicated and expensive operations • We present a randomized algorithm • as complete as the deterministic algorithms • but faster and simpler (almost as simple as an interpreter)

  4. Example 1 F T • Random testing will have to exercise all the 4 paths to verify the assertions • Our algorithm is similar to random testing • However, we execute the program once, in a way that it captures the “effect” of all the paths a := 0; b := 1; a := 1; b := 0; T F c := b – a; d := 1 – 2b; c := 2a + b; d := b – 2; assert (c + d = 0); assert (c = a + 1)

  5. Idea #1: The Affine Join Operation • Execute both the branches • Combine the values of the variables at joins using the affine join operation ©w for some randomly chosen w v1©w v2´ w £ v1 + (1-w) £ v2 a := 4; b := 1; a := 2; b := 3; a = 2 ©7 4 = -10 b = 3 ©7 1 = 15 (w = 7)

  6. Example 1 • Choose a random weight for each join independently. • All choices of random weights verify the first assertion • Almost all choices contradict the second assertion. F T a := 0; b := 1; a := 1; b := 0; w1 = 5 a = 0, b = 1 a = 1, b = 0 a = -4, b = 5 T F c := b – a; d := 1 – 2b; c := 2a + b; d := b – 2; w2 = -3 a = -4, b = 5 c = 9, d = -9 a = -4, b = 5 c = -3, d = 3 a = -4, b = 5 c = -39, d = 39 assert (c + d = 0); assert (c = a + 1)

  7. Geometric Interpretation of the Affine Join operation • satisfies all the affine relationships that are satisfied by both (e.g. x + y = 1, z = 0) • Given any relationship that is not satisfied by any of (e.g. x=2), also does not satisfy it with high probability : State before the join : State after the join y x = 2 x + y = 1 (x = 0, y = 1) x (x = 1, y = 0)

  8. Example 2 • Idea #1 is not enough • We need to make use of the conditional x=y on the true branch a := x + y T F If (x = y) b := a b := 2x assert (b = 2x)

  9. Idea #2: The Adjust Operation • Execute multiple runs of the program in parallel • Sample = Collection of states at each program point • “Adjust” the sample before a conditional (by taking affine joins of the states in the sample) such that • Adjustment preserves original relationships • Adjustment satisfies the equality in the conditional • Use adjusted sample on the true branch

  10. Geometric Interpretation of the Adjust Operation Original Point (lies on e1=0) Conditional (e2=0) Adjusted Point (lies on e1=0 Å e2=0)

  11. The Randomized Interpreter R S’ S’ S1 S2 True False x := e e = 0 ? S S S2 S1 Si = S’i[x à e] S1 = Adjust(S’,e) S2 = S’ Si = S1i ©wi S2i

  12. Completeness and soundness of R • We compare the randomized interpreter R with a suitable abstract interpreter A • R mimics A with high probability • R is as complete as A • R is sound with high probability

  13. The Abstract Interpreter A Abstract Domain = Sets of affine relationships T’ T’ T1 T2 True False x := e e = 0 ? T T T2 T1 T = T’[x’/x] [ { x = e[x’/x] } T = { g=0 | T1) g=0, T2) g=0 } T1 = T’ [ { e = 0 } T2 = T’

  14. Completeness Theorem • If T ) g = 0, then S ² g = 0 • Proof: • The affine join operation preserves affine relationships • And so does the adjust operation

  15. Soundness Theorem • If T ) g = 0, then with high probability S ² g = 0 • Error probability · • b: number of branches • j: number of joins • d: size of the field • r: number of points in the sample • If j = b = 10, r = 15, d ¼ 232, then error probability ·

  16. Loops and Fixed Point Computation • The lattice of sets of affine relationships has finite depth n. Thus, the abstract interpreter A converges to a fixed point. • Thus, the randomized interpreter R also converges (probabilistically) • We can detect convergence by comparing the ranks of the samples in two successive iterations • rank = number of linearly independent relationships

  17. Related Work • Abstract interpretation on sets of affine relationships [Karr76, Cousot77] • Operations are comparatively complicated and expensive • Value numbering • More of syntactic flavor than semantic • Random testing • Can exhibit counterexamples but doesn’t prove assertions • Equivalence testing for read-once branching programs • Similar idea of affine joins

  18. Conclusion and Future Work • Randomization can help achieve simplicity and efficiency at the expense of making soundness probabilistic • Interesting possible extensions: • Memory • Non-Linear assignments • Inequalities • Dependent conditionals

More Related