~/talk

Bennet: Randomized Specification Testing for Heap-Manipulating Programs

Talkat OOPSLA 2025 · 2025-10-16..10-18· [testing]
slides:none on file

Bennet synthesizes C test generators from CN specifications by compiling preconditions into a DSL and running randomized backtracking search to place heap objects, enforce exclusive ownership, and carry size constraints on failure. It emits standalone C harnesses, generates 100 passing cases for nearly all non-buggy CN tutorial examples, finds two real bugs in existing code, and consistently rediscovers injected bugs (20/20 trials); some hard exact-list targets remain unsynthesized.

AI-written summary · about

  1. 0:00Randomized specification testing
  2. 1:02Separation logic in C
  3. 2:25CN specs and predicates
  4. 3:31Generator DSL for C
  5. 4:54Backtracking and ownership
  6. 6:21Consistent input distribution
  7. 7:23Generator optimizations
  8. 8:47Efficient constraint reordering
  9. 9:28Bennett evaluation on CN code
  10. 10:34Bugs found with Bennett
  11. 11:17Optimization passes impact
  12. 11:59Summary of CN generators
  13. 12:25Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.