ISSN 03617688, Programming and Computer Software, 2015, Vol. 41, No. 4, pp. 197–208. © Pleiades Publishing, Ltd., 2015. Original Russian Text © M.U. Mandrykin, A.V. Khoroshilov, 2015, published in Programmirovanie, 2015, Vol. 41, No. 4. HighLevel Memory Model with LowLevel Pointer Cast Support for Jessie Intermediate Language1 M. U. Mandrykin* and A. V. Khoroshilov** The Institute for System Programming of the RAS, ul. A. Solzhenitsyna 25, Moscow, 109004 Russia email: *
[email protected], **
[email protected] @ Abstract—The paper presents a target analyzable language used for verification of realworld production GNU C programs (Linux kernel modules). The language represents an extension of the existing intermediate language used by the Jessie plugin for the F@ramaC static analysis framework. Compared to the original Jessie, the extension is fully compatible with the C semantics of arrays, initially supports discriminated unions and prefix (hierarchical) structure pointer casts and provides a limited, but reasonable support for lowlevel pointer casts (reinterpretations of the underlying bytes of memory). The paper describes the approaches to translation of the original C code into the analyzable intermediate language and of the intermediate language into Why3ML i.e. the input language of the Why3 deductive verification platform. DOI: 10.1134/S0361768815040040 1 INTRODUCTION violations and buffer overruns). Third, C is a lowlevel language with generally untyped semantics, which can There are many tools and techniques for static ver substantially influence the choice of an appropriate ification of C source code. Among them are deduction techniques, that are based on translation of the origi memory model. nal C source code supplied with specifications of the Let’s assume the VC for the assertion check at line properties being verified into a set of logical formulas 10 (a[n] = 1) is required.