Balancing Analysis Time and Bug Detection: Daily Development-friendly Bug...
summary
FiTx framework implements a practical, compiler-integrated checker using only single-compilation-unit analysis, static field offsets, simple aliasing and no indirect calls and builds as a Clang extension on LLVM. It finds 47 new bugs in Linux 5.15 within 2.5 hours, with 13 confirmed and fixed by developers, and reports per-file times under 1 second for 90% of files (99th percentile 3.79s). It outperforms Clang Static Analyzer and CppCheck on both speed and detection and yields a lower false positive rate (about 61% vs ~83%).
AI-written summary · about
chapters (13)
- 0:00Daily bug detection intro
- 1:28Static analysis in Linux
- 2:56Analysis time vs bug detection
- 4:21Finger traceable analysis
- 7:56Fix framework design
- 9:00Type state property analysis
- 10:28Return code interprocedural analysis
- 13:40Fix implementation
- 14:23Evaluation setup
- 14:45Fix bug detection
- 16:34Fix analysis time
- 16:56Tool comparison
- 19:48Summary
related talks
18mEnhancing Static Analysis for Practical Bug Detection: An LLM-Integrated Approach
18mPreview: Verification (Correctness & Debugging)
44mTest Intelligence: Finding More Bugs in Less Time with AI
55mSquash Bugs with Static Analysis
36mCode Analysis: Empowering developers to write performant, reliable, and safe C++
52mStructure aware fuzzing
14mUnveiling Compiler Faults via Attribute-Guided Compilation Space Exploration
40mCatching More Bugs with Fewer False Alarms