Liu, Yu;
Mechtaev, Sergey;
Subotić, Pavle;
Roychoudhury, Abhik;
(2023)
Program Repair Guided by Datalog-Defined Static Analysis.
In:
Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering.
(pp. pp. 1216-1228).
Association for Computing Machinery (ACM): New York, NY, United States.
Preview |
Text
Mechtaev_Program Repair Guided by Datalog-Defined Static.pdf Download (274kB) | Preview |
Abstract
Automated program repair relying on static analysis complements test-driven repair, since it does not require failing tests to repair a bug, and it avoids test-overfitting by considering program properties. Due to the rich variety and complexity of program analyses, existing static program repair techniques are tied to specific analysers, and thus repair only narrow classes of defects. To develop a general-purpose static program repair framework that targets a wide range of properties and programming languages, we propose to integrate program repair with Datalog-based analysis. Datalog solvers are programmable fixed point engines which can be used to encode many program analysis problems in a modular fashion. The program under analysis is encoded as Datalog facts, while the fixed point equations of the program analysis are expressed as recursive Datalog rules. In this context, we view repairing the program as modifying the corresponding Datalog facts. This is accomplished by a novel technique, symbolic execution of Datalog, that evaluates Datalog queries over a symbolic database of facts, instead of a concrete set of facts. The result of symbolic query evaluation allows us to infer what changes to a given set of Datalog facts repair the program so that it meets the desired analysis goals. We developed a symbolic executor for Datalog called Symlog, on top of which we built a repair tool SymlogRepair. We show the versatility of our approach on several analysis problems --- repairing null pointer exceptions in Java programs, repairing data leaks in Python notebooks, and repairing four types of security vulnerabilities in Solidity smart contracts.
| Type: | Proceedings paper |
|---|---|
| Title: | Program Repair Guided by Datalog-Defined Static Analysis |
| Event: | ESEC/FSE '23: 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering |
| ISBN-13: | 979-8-4007-0327-0 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1145/3611643.3616363 |
| Publisher version: | https://doi.org/10.1145/3611643.3616363 |
| Language: | English |
| Additional information: | © 2023 Copyright held by the owner/author(s). This is an Open Access article distributed under the terms of the Creative Commons Attribution Licence (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited. https://creativecommons.org/licenses/by/4.0/ |
| Keywords: | program repair, static analysis, Datalog, symbolic execution |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery-pp.ucl.ac.uk/id/eprint/10184117 |
Archive Staff Only
 |
View Item |
