Ключевые и приглашённые докладчики

Бертран Мейер

Профессор, университеты Иннополис и Politecnico di Milano

Бертран Мейер — создатель языка программирования Эйфель.

В 1974 г. окончил Политехническую школу (École Polytechnique) в Париже и стал инженером. В этом же году получил степень магистра по Computer Science в Стэнфордском университете. Степень доктора наук получил в 1985 г. в университете Анри Пуанкаре (Нанси).

С 1974 по 1983 год работал инженером-исследователем. Затем он возглавил отдел программных разработок в Électricité de France.

В 1978 г. вышла (в соавторстве) первая книга Б. Мейера «Методы программирования», переведенная в 1982 г. на русский язык под редакцией и с предисловием Андрея Петровича Ершова.

С 1983 по 1986 гг. — приглашенный профессор в университете Калифорнии (Санта-Барбара).

С 2011 года Б. Мейер работал заведующим кафедры «Программная инженерия и верификация программ» в Санкт-Петербургском государственном университете информационных технологий, механики и оптики.

В 2012 присоединился к программному комитету SECR и учредил премию за лучший исследовательский доклад.

C 2015 года преподаватель в университете Иннополис (Иннополис, Республика Татарстан, Россия).

Последними изданными книгами являются: Agile! The Good, the Hype and the Ugly (2014) и Touch of Class: Learning to Program Well, Using Object Technology and Contracts.

Everything you always wanted to know about your program

13 октября, 17:45
Room I|I зал

Обсудить доклад

This will be a description and hands-on demo of work in progress: an automatic program analyzer producing precise answers to questions about run-time object structures.

During its executions, a program can produce huge and complex data structures. Can we confidently predict some of their properties? Examples, important for program verification and compiler optimization, include:

Aliasing: can two pointer expressions, say x and a.b.c, ever point to the same object?
Reachability: is there a path from a given object to another?
Void safety: in x.f, can x ever be a null pointer, causing the program to crash?

The last example is critical: void safety remains in almost all languages an unsolved problem. (The principal exception is Eiffel, which achieves void-safety by design.) Null-pointer calls are unpredictable and can crash any program, even after months of flawless operation. The Common Vulnerabilities and Exposure security database is replete with catastrophic null-pointer attacks involving many widely used products, even the JPEG protocol.

To provide a widely applicable solution, I have developed a theory of object structures, duality semantics, and implemented it. I will briefly outline the theory (based on abstract interpretation and my own earlier work on the Alias Calculus); but mostly the talk is a demonstration of the resulting tool, in its current partial state, on a number of examples. The target programming language is a concentrate of the mechanisms of major languages, making the concepts applicable to C, Java, C# etc.

Anyone who has had even a superficial brush with a static analysis tool, starting with the old “lint” for C, knows that in the end only one thing counts: removing false alarms. With most tools, after the initial thrill of learning a thing or two that they did not know about their program, users quickly lose interest. The reason is that these tools produce a deluge of irrelevant warnings; users must then manually and painfully comb through the list, to weed out the few genuine risks. Precision (minimizing the rate of false alarms) is the name of the game. The requirements are cruel: the only acceptable rate of false alarms, if a tool is to have any chance of practical acceptability, is very close to zero.

Thanks to the theory, the tool presented (in addition to, I hope, being sound) is precise in its approximation of run-time properties. That precision is tunable: it depends on the depth of analysis, which the user can specify, a better precision yielding a longer computation. For every context – from immediate feedback during interactive development to final thorough check before a major release – a user can decide the appropriate tradeoff between computation time and precision.

I will present the state of the work, its achievements and limitations, and say a few words about my development process.