4 ms·
Is anyone aware what are the tool's limitations? Seems open-sourced ~1-2 months ago already, with publications history spanning much longer [1], but the README
by akavel 11y ago
Is anyone aware what are the tool's limitations? Seems open-sourced ~1-2 months ago already, with publications history spanning much longer [1], but the README is very sparse, and I wouldn't probably understand much if I tried to dive into the research papers. Or am I to believe it will find 100% all memory issues?
[1]: http://research.microsoft.com/en-us/projects/slayer/ http://research.microsoft.com/en-us/projects/slayer/
- saminishtiaq 11y agoIt's a static analysis tool, so it has many TimeOut limitations :-) In practise, many abstract interpretation based tools generalize too much, lose too much information, then get lost and TO instead. The test suite released there gives a good empirical idea of what SLAyer can do. You'll see lots of while-loops over single- and doubly-linked lists as SLAyer can generalize Separation Logic points-to predicates to 'sll' list predicates.
- akavel 10y agoI'm specifically interested here in what the tool cannot do, more than what it can do. For now all I can tell is it "works for some empirical cases, and maybe works in rest of cases, but not strictly defined, don't expect anything concrete".