Conference paper Open Access

# Symbolic execution of transition systems with function summaries

Boudhiba, Imen; Gaston, Christophe; Le Gall, Pascale; Prévosto Virgile

### DataCite XML Export

<?xml version='1.0' encoding='utf-8'?>
<identifier identifierType="URL">https://zenodo.org/record/1402569</identifier>
<creators>
<creator>
<creatorName>Boudhiba, Imen</creatorName>
<givenName>Imen</givenName>
<familyName>Boudhiba</familyName>
</creator>
<creator>
<creatorName>Gaston, Christophe</creatorName>
<givenName>Christophe</givenName>
<familyName>Gaston</familyName>
</creator>
<creator>
<creatorName>Le Gall, Pascale</creatorName>
<givenName>Pascale</givenName>
<familyName>Le Gall</familyName>
</creator>
<creator>
<creatorName>Prévosto Virgile</creatorName>
</creator>
</creators>
<titles>
<title>Symbolic execution of transition systems with function summaries</title>
</titles>
<publisher>Zenodo</publisher>
<publicationYear>2018</publicationYear>
<subjects>
<subject>Input Output Symbolic Transition Systems</subject>
<subject>Functions summaries</subject>
<subject>Symbolic Execution</subject>
<subject>Transition coverage</subject>
</subjects>
<dates>
<date dateType="Issued">2018-06-08</date>
</dates>
<resourceType resourceTypeGeneral="Text">Conference paper</resourceType>
<alternateIdentifiers>
<alternateIdentifier alternateIdentifierType="url">https://zenodo.org/record/1402569</alternateIdentifier>
</alternateIdentifiers>
<relatedIdentifiers>
<relatedIdentifier relatedIdentifierType="DOI" relationType="IsIdenticalTo">10.1007/978-3-319-61467-0_3</relatedIdentifier>
<relatedIdentifier relatedIdentifierType="URL" relationType="IsPartOf">https://zenodo.org/communities/vessedia</relatedIdentifier>
</relatedIdentifiers>
<rightsList>
<rights rightsURI="info:eu-repo/semantics/openAccess">Open Access</rights>
</rightsList>
<descriptions>
<description descriptionType="Abstract">&lt;p&gt;Reactive systems can be modeled with various kinds of automata, such as Input Output Symbolic Transition Systems (IOSTS). Symbolic execution (SE) applied to IOSTS allows computing constraints associated to IOSTS path executions (path conditions). In this context, generating test cases amounts to finding numerical input values satisfying such constraints using solvers. This paper explores the case where IOSTS models contain functions which are outside of the scope of such solvers. We propose to use function summaries which are logical formulas built from concrete values describing some representative input/output data tuples of the function. We define algorithmic strategies to solve path conditions including such functions based on techniques using and enriching function summaries. Our method has been implemented within the Diversity tool and has been applied to several examples.&lt;/p&gt;</description>
</descriptions>
<fundingReferences>
<fundingReference>
<funderName>European Commission</funderName>
<funderIdentifier funderIdentifierType="Crossref Funder ID">10.13039/501100000780</funderIdentifier>
<awardNumber awardURI="info:eu-repo/grantAgreement/EC/H2020/731453/">731453</awardNumber>
<awardTitle>VERIFICATION ENGINEERING OF SAFETY AND SECURITY CRITICAL DYNAMIC INDUSTRIAL APPLICATIONS</awardTitle>
</fundingReference>
</fundingReferences>
</resource>

47
62
views