Static bug finding

LibAlchemy: A Two-Layer Persistent Summary Design for Taming Third-Party Libraries in Static Bug-Finding Systems
Despite the benefits of using third-party libraries (TPLs), the misuse of TPL functions raises quality and security concerns. Using …
PDF Cite Paper Link
Conquering the Extensional Scalability Problem for Value-Flow Analysis Frameworks
Modern static analyzers often need to simultaneously check a few dozen or even hundreds of value-flow properties, causing serious …
PDF Cite Paper Link
SMOKE: Scalable Path-Sensitive Memory Leak Detection for Millions of Lines of Code
Detecting memory leak at industrial scale is still not well addressed, in spite of the tremendous effort from both industry and …
PDF Cite Paper Link