@@ -14,7 +14,6 @@ This section presents several static analysis tools. For each tool, we cover top
1414
1515{{< section >}}
1616
17-
1817## Basic theory
1918
2019Below is an overview of techniques implemented in static analysis tools.
@@ -23,52 +22,51 @@ Usually, tools support only a subset of the following analyses, with varying deg
2322
2423### Views on a code
2524
26- * Abstract Syntax Tree (AST)
27- * Control Flow Graph (CFG)
28- * Data Flow Graph (DFG)
29- * Call Graph
30- * Intermediate Representation (IR)
31- * Single Static Assignment Form (SSA)
32- * Use-Definition Chain (use-def)
25+ - Abstract Syntax Tree (AST)
26+ - Control Flow Graph (CFG)
27+ - Data Flow Graph (DFG)
28+ - Call Graph
29+ - Intermediate Representation (IR)
30+ - Single Static Assignment Form (SSA)
31+ - Use-Definition Chain (use-def)
3332
3433### Analyses
3534
36- * AST traversal
37- * Abstract Interpretation
38- * Constant Propagation
39- * Value Range analysis
40- * Data-Flow analysis
41- * Train Tracking
42- * Control-Flow analysis
43- * Domination relationship
44- * Reachability
45- * Hoare logic
46- * Model checking
47- * Symbolic execution
48- * Concolic execution
49- * Type analysis
50- * Alias/Pointer/points-to analysis
51- * Program slicing
52- * Global value numbering
53- * Hash consing
35+ - AST traversal
36+ - Abstract Interpretation
37+ - Constant Propagation
38+ - Value Range analysis
39+ - Data-Flow analysis
40+ - Train Tracking
41+ - Control-Flow analysis
42+ - Domination relationship
43+ - Reachability
44+ - Hoare logic
45+ - Model checking
46+ - Symbolic execution
47+ - Concolic execution
48+ - Type analysis
49+ - Alias/Pointer/points-to analysis
50+ - Program slicing
51+ - Global value numbering
52+ - Hash consing
5453
5554### Precision
5655
57- * Intraprocedural
58- * Flow-sensitivity (order of statements)
59- * Path-sensitivity (conditional branches)
60-
61- * Interprocedural
62- * Context-sensitivity (Polyvariance)
63- * Call-site
64- * Type
65- * Object
66- * Context-insensitive
56+ - Intraprocedural
57+ - Flow-sensitivity (order of statements)
58+ - Path-sensitivity (conditional branches)
6759
60+ - Interprocedural
61+ - Context-sensitivity (Polyvariance)
62+ - Call-site
63+ - Type
64+ - Object
65+ - Context-insensitive
6866
6967### Properties
7068
71- * Soundness
72- * Precision
73- * Completness
74- * Execution time
69+ - Soundness
70+ - Precision
71+ - Completness
72+ - Execution time
0 commit comments