Enterprise-scale static analysis: A Pinpoint experience
summary
Pinpoint is an LLVM-based cross-language platform that deploys to Tencent, Baidu, Huawei, Alibaba and daily-scans million+‑line repos. It implements a sparse value‑flow with on‑demand pointers model, builds feasibility queries (purify/color transformations) and prunes with cheap checks before SMT solving. Benchmarks show 40 concurrent checks over 8M LOC in about two hours, >80 confirmed bugs and four CVEs; a pipelined engine stage called Coyote doubles–triples throughput, making large-scale whole‑program checks practical.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 0:30Pinpoint
- 2:18Liabilities
- 3:51Rhetoric
- 4:55New observations
- 5:15Big systems
- 6:04Live systems
- 6:52Software supply chain
- 7:56Dark code problem
- 9:04Source code testing
- 10:25What does all this mean
- 10:48How to get your static analysis adopted
- 12:19Design requirements
- 15:10Academic research
- 15:39All research
- 16:41Metrics
- 17:13Detailed observations
- 19:10Major design frameworks
- 19:59FDS
- 21:57Symbolic execution
- 22:47By Abduction
- 24:20Sparse Value Flow
- 26:03Solution
- 29:30Architecture
- 30:22Other contributions
- 31:16Performance
- 32:16Bug example
- 33:59Pinpoint Coyote
- 36:05Speed improvement
- 36:32Conclusion
- 38:54More information
related talks
01h 03mSOAP - Keynote: Beyond Code: New Signals for Static Analysis
58mSecurity Static Analysis - Avoiding an Angry Mob of Engineers
51mReal World Static Analysis For Real Humans
14mTool Talk: CodeChecker
27mStatic Code Analysis with Python
42mContemporary Automatic Program Analysis
29m“The Current State of (free) Static Analysis"
22mWriting safe and secure code