ECOOP 2026
Mon 29 June - Fri 3 July 2026 Brussels, Belgium

This program is tentative and subject to change.

Fri 3 Jul 2026 11:00 - 11:22 at I.2.03 - Static Analysis Chair(s): Sven Keidel

Static taint analysis is an important technique for bug-finding and vulnerability detection on source code. One commonly used technique to solve inter-procedural taint analysis problems is the well-studied Interprocedural Finite Distributive Subsets (IFDS) algorithm. However, when performing a whole-program analysis, IFDS-based taint analyses have trouble scaling to large target programs, mainly due to its huge memory consumption. A common technique to solve this issue is to modularize the analysis by visiting the call graph bottom-up, performing local sub-analyses in isolation. Still, bottom-up formulations of IFDS are rare due to their own scalability issues caused by over-approximating the analysis state at the beginning of a procedure. In this work we study how one can improve scalability for bottom-up taint analysis of C and C++ programs on millions of lines of code. We present MonoIFDS, a variant of the IFDS algorithm that combines IFDS-style procedure summaries with bottom-up inter-procedural propagation. It uses a modified encoding of the data-flow state and propagation to improve the efficiency of handling large analysis states, and to enable optimizations, such as optimizing the iteration order, that were not beneficial on IFDS analyses before. In our evaluation we show, how MonoIFDS performs compared to SparseIFDS when analyzing real-world C and C++ programs. Achieving a speedup of 6.17 on average with only consuming 51% of the memory compared to SparseIFDS, MonoIFDS drastically outperforms the state-of-the-art SparseIFDS and enables developers to target the analysis of large programs on consumer hardware.

This program is tentative and subject to change.

Fri 3 Jul

Displayed time zone: Brussels, Copenhagen, Madrid, Paris change

11:00 - 12:30
Static AnalysisTechnical Papers at I.2.03
Chair(s): Sven Keidel Fraunhofer SIT | ATHENE
11:00
22m
Talk
Scaling Bottom-up IFDS Taint Analysis with Optimized Data-flow Encoding
Technical Papers
Fabian Schiebel Heinz Nixdorf Institute, Paderborn University, Eric Bodden
11:22
22m
Talk
DelExp: a Relational Container Abstraction with Applications to Compositional Analysis
Technical Papers
Milla Valnet Sorbonne Université, Raphaël Monat Inria and University of Lille, Antoine Miné Sorbonne Université
11:45
22m
Talk
Comparing Transparent Static Analyzers with Open Verification Dashboard
Technical Papers
Tom Goalard University of Rennes, Karoliine Holter University of Tartu, Estonia, Simmo Saan University of Tartu, Estonia, Vesal Vojdani University of Tartu, Raphaël Monat Inria and University of Lille
12:07
22m
Talk
Field-Sensitive Over-Tainting Reduction in IFDS Taint Analysis via CFL-Reachability
Technical Papers