| Virual Oral Presentation Slide by Slide |
IEEE/ICACT20260385 Slide.09
[Big Slide]
| Oral Presentation |
|
|
Flow sensitivity is the analyzers ability to track the specific order of operations. In this example, the pointer a is allocated, freed, and then re-allocated. A flow-insensitive tool might see these conflicting states and miss the bug, but IKOS follows the execution timeline. It understands that even though the pointer was valid at one point, it became invalid again after the second free(), allowing it to correctly flag the final line as a Use-after-free. | |
| [Go to Next Slide] |