(draft; work in progress)
See also:
- Compilers
- Program analysis:
- Dynamic analysis - instrumentation, translation, sanitizers
- Static analysis - static analysis (static checkers and compilers) and verification
- Program Analysis Reading List - Rolf Rolles - http://www.msreverseengineering.com/program-analysis-reading-list/
- Reading for graduate students in static analysis - http://matt.might.net/articles/books-papers-materials-for-graduate-students/#analysis
- Program Analysis Resources - http://reversing.io/resources/
- Conferences on Software Verification and Analysis - https://github.com/soarlab/conferences
- Static Analysis Roadmap - https://tpiazza.me/posts/2017-11-01-static-analysis-roadmap.html
- Awesome Symbolic Execution - https://github.com/ksluckow/awesome-symbolic-execution
- Symbolic execution history timeline: https://github.com/enzet/symbolic-execution
- Symbolic Execution: Intuition and Implementation - http://www.usrsb.in/symbolic-execution-intuition-and-implementation.html
- A bibliography of papers related to symbolic execution - https://github.com/saswatanand/symexbib
- A Survey of Symbolic Execution Techniques
- ACM Computing Surveys 51(3) 2018
- Roberto Baldoni, Emilio Coppa, Daniele Cono D'Elia, Camil Demetrescu, Irene Finocchi
- https://github.com/season-lab/survey-symbolic-execution
- https://arxiv.org/abs/1610.00502
- All You Ever Wanted to Know About Dynamic Taint Analysis and Forward Symbolic Execution (but might have been afraid to ask)
- Security and Privacy (SP), 2010
- Edward J. Schwartz, Thanassis Avgerinos, David Brumley
- Paper: https://edmcman.github.io/papers/oakland10.pdf
- Slides: https://edmcman.github.io/pres/oakland10.pdf
- Systematic Comparison of Symbolic Execution Systems: Intermediate Representation and its Generation
- Annual Computer Security Applications Conference (ACSAC) 2019
- Sebastian Poeplau and Aurélien Francillon
- http://s3.eurecom.fr/tools/symbolic_execution/
- http://s3.eurecom.fr/docs/acsac19_poeplau.pdf
- https://hal.archives-ouvertes.fr/hal-02305914/
- Scaling Symbolic Evaluation for Automated Verification of Systems Code with Serval
- SOSP 2019
- Luke Nelson, James Bornholt, Ronghui Gu, Andrew Baumann, Emina Torlak, Xi Wang
- https://unsat.cs.washington.edu/projects/serval/
- https://blog.acolyer.org/2019/11/13/scaling-symbolic-evaluation-serval/
- Towards Effective Symbolic Execution
- 2022 PhD Dissertation
- Martin Nowack
- https://nbn-resolving.org/urn:nbn:de:bsz:14-qucosa2-906658
- Maat: an open-source Dynamic Symbolic Execution and Binary Analysis framework
- Provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting
- https://github.com/trailofbits/maat
- https://maat.re
- https://blog.trailofbits.com/2022/02/23/maat-symbolic-execution-made-easy/
- CMPUT 416: Foundations of Program Analysis
- University of Alberta; Fall 2020; Karim Ali
- https://www.youtube.com/playlist?list=PLZSJMiy_FDQDlyJUgp86UiPBzWivq4b4y
- https://github.com/cmput416/outline
- https://github.com/cmput416/lectures
- DECA: Designing Code Analyses for Large-scale Software Systems
- Paderborn University; Eric Bodden
- DECA I (WS 2020/2021)
- DECA II (SS 2021)
- Foundations of Programming Languages
- M-PS (WS 2014/2015): Concepts of Programming Languages
- http://sepl.cs.uni-frankfurt.de/2014-ws/m-ps/index.en.html
- http://web.archive.org/web/http://sepl.cs.uni-frankfurt.de/2014-ws/m-ps/index.en.html
- lectures (videos & slides):
- Static Program Analysis
- Anders Møller and Michael I. Schwartzbach
- https://cs.au.dk/~amoeller/spa/
- PLISS 2019 - Anders Møller
- Static Program Analysis (part 1/2) - https://www.youtube.com/watch?v=Lr4cMmaJHrg
- Static Program Analysis (part 2/2) - https://www.youtube.com/watch?v=6QQSIIvH-F0
- 25 Years of Program Analysis
- DEF CON 25 (2017) - Yan Shoshitaishvili (Zardus)
- https://www.youtube.com/watch?v=XL9kWQ3YpLo
- https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Zardus-25-Years-of-Program-Analysis-UPDATED.pdf
- Software Analysis
- CIS 547; University of Pennsylvania
- Mayur Naik
- https://www.seas.upenn.edu/~cis547/
- https://www.youtube.com/playlist?list=PLF3-CvSRq2SYXEiS80KuZQ80q8K2aHLQX
- Software Analysis and Testing
- CIS 700; Georgia Institute of Technology
- Mayur Naik
- https://rightingcode.org/
- https://www.cis.upenn.edu/~mhnaik/edu/cis700/
- https://www.youtube.com/playlist?list=PLF3-CvSRq2SaApl3Lnu6Tu_ecsBr94543
- Program Analysis and Reliability - Nick Sumner, CMPT 886, Spring 2015, SFU
- Program analysis for reverse engineers: from T to ⊥
- BSides Canberra 2018; Adrian Herrera
- https://www.youtube.com/watch?v=vOmGmjbVff4
- slides (not displayed in the video, may be a good idea to watch alongside): https://drive.google.com/file/d/1j9rfMt14pubi6G9PKK3akddyeet5bf0x/view
- CS 252r: Advanced Topics in Programming Languages
- A Gentle Introduction to Program Analysis
- Programming Languages Mentoring Workshop 2014
- Isıl Dillig (University of Texas)
- https://www.cis.upenn.edu/~alur/CIS673/isil-plmw.pdf
- UFMG DCC888: Static Program Analysis
- 2020; Fernando Magno Quintão Pereira
- https://homepages.dcc.ufmg.br/~fernando/classes/dcc888/
- https://www.youtube.com/playlist?list=PLC-dUCVQghfdu7AG5f_p4oRyKgjDuoAWU
- SPARTA: a library that provides the basic blocks for building high-performance static code analyzers based on Abstract Interpretation
- https://github.com/facebookincubator/SPARTA
- SPARTA: a C++ library of software components for building high-performance static analyzers
- https://code.fb.com/open-source/sparta/
- Bill Torpey - static analysis posts
- Static Analysis with Clang - http://btorpey.github.io/blog/2015/04/27/static-analysis-with-clang/
- Mo' Static - http://btorpey.github.io/blog/2016/04/07/mo-static/
- Even Mo' Static - http://btorpey.github.io/blog/2016/11/12/even-mo-static/
- Lots o' static - http://btorpey.github.io/blog/2017/09/17/lotso-static/
- awesome-llvm: A curated list of awesome LLVM related docs, tools, and other resources
- LLVM Weekly - http://llvmweekly.org/
- https://eli.thegreenplace.net/tag/llvm-clang
- Building a Checker in 24 hours
- 2012 LLVM Developers’ Meeting; Anna Zaks, Jordan Rose
- https://llvm.org/devmtg/2012-11/Zaks-Rose-Checker24Hours.pdf
- https://www.youtube.com/watch?v=kdxlsP5QVPw
- Code transformation and analysis using Clang and LLVM
- Static and Dynamic Analysis
- HPC Summer School 2017; Hal Finkel
- https://llvm.org/devmtg/2017-06/2-Hal-Finkel-LLVM-2017.pdf
- https://github.com/hfinkel/llvm-ss-2017
- Compiler-assisted Performance Analysis
- Dg: LLVM Static Slicer
- Dependence graph for programs. A set of generic program analyses and a static slicer for LLVM bitcode
- https://github.com/mchalupa/dg
- FPSCEV: Floating-Point Scalar Evolution in LLVM
- LLVM Dataflow Info Printer Pass
- https://github.com/regehr/llvm-dataflow-info
- Tell us what some of LLVM's dataflow analyses think about the code being compiled.
- Testing Dataflow Analyses for Precision and Soundness
- Testing Static Analyses for Precision and Soundness
- CGO (Code Generation and Optimization) 2020
- Jubi Taneja, Zhengyang Liu, John Regehr
- http://www.cs.utah.edu/~regehr/cgo20.pdf
- LLVM Debugging Tips and Tricks
- Phasar - A LLVM-based static code analysis framework
- http://phasar.org/
- https://github.com/secure-software-engineering/phasar
- Static Analysis for C++ with Phasar
- https://pldi18.sigplan.org/event/pldi-2018-pldi-tutorials-static-analysis-for-c-with-phasar
- PhASAR: An Inter-Procedural Static Analysis Framework for C/C++
- TACAS 2019
- Philipp D. Schubert, Ben Hermann, Eric Bodden
- http://www.thewhitespace.de/publications/shb19-phasar.pdf
- SVF: Interprocedural Static Value-Flow Analysis in LLVM
- Pointer Analysis and Program Dependence Analysis for C and C++ Programs
- http://svf-tools.github.io/SVF/
- https://github.com/unsw-corg/SVF
- SVF: Interprocedural Static Value-Flow Analysis in LLVM
- Compiler Construction (CC '16)
- Yulei Sui and Jingling Xue
- https://yuleisui.github.io/publications/cc16.pdf
- 2016 EuroLLVM Developers' Meeting: Y. Sui "SVF: Static Value-Flow Analysis in LLVM"
- https://www.youtube.com/watch?v=nD-i-enA8rc
- haybale: Symbolic execution of LLVM IR with an engine written in Rust
- operates on LLVM IR, which allows it to analyze programs written in C/C++, Rust, Swift, or any other language which compiles to LLVM IR
- https://github.com/PLSysSec/haybale
- KLEE Symbolic Virtual Machine
- SymCC: efficient compiler-based symbolic execution
- https://github.com/eurecom-s3/symcc
- Symbolic execution with SymCC: Don't interpret, compile!
- USENIX Security 2020
- Sebastian Poeplau, Aurélien Francillon
- http://www.s3.eurecom.fr/tools/symbolic_execution/symcc.html
- https://www.usenix.org/conference/usenixsecurity20/presentation/poeplau
- Crux: a tool for improving the assurance of software using symbolic testing, currently supporting C, C++, and Rust
- https://crux.galois.com/
- Crucible: a library for symbolic simulation of imperative programs
- https://github.com/GaloisInc/crucible
- LLBMC: The Low-Level Bounded Model Checker
- http://llbmc.org/
- http://llbmc.org/publications.html
- LLBMC: Bounded Model Checking of C and C++ Programs Using a Compiler IR
- Verified Software: Theories, Tools and Experiments (VSTTE) 2012
- Florian Merz, Stephan Falke, Carsten Sinz
- https://doi.org/10.1007/978-3-642-27705-4_12
- http://llbmc.org/files/papers/VSTTE12.pdf
- http://llbmc.org/files/talks/vstte-2012.pdf
- llrêve: Automatic regression verification for LLVM programs
- Automatically check programs for equivalence
- https://github.com/mattulbrich/llreve
- https://formal.iti.kit.edu/projects/improve/reve/
- Relational Program Reasoning Using Compiler IR – Combining Static Verification and Dynamic Analysis
- Journal of Automated Reasoning 60(3) 2017
- Moritz Kiefer, Vladimir Klebanov, Mattias Ulbrich
- http://dx.doi.org/10.1007/s10817-017-9433-5
- SAW: Software Analysis Workbench
- https://saw.galois.com/
- Constructing Semantic Models of Programs with the Software Analysis Workbench
- Verified Software: Theories, Tools and Experiments (VSTTE) 2016
- Robert Dockins, Adam Foltzer, Joe Hendrix, Brian Huffman, Dylan McNamee, Aaron Tomb
- https://doi.org/10.1007/978-3-319-48869-1_5
- SeaHorn Verification Framework: A fully automated analysis framework for LLVM-based languages
- http://seahorn.github.io/
- https://github.com/seahorn/seahorn
- http://seahorn.github.io/#publications
- The SeaHorn Verification Framework
- Computer Aided Verification (CAV) 2015
- A. Gurfinkel, T. Kahsai, A. Komuravelli, J.A.Navas
- http://seahorn.github.io/papers/cav15.pdf
- A Context-Sensitive Memory Model for Verification of C/C++ Programs
- Crab-llvm: Abstract Interpretation of LLVM bitcode
- SMACK Software Verifier and Verification Toolchain
- http://smackers.github.io
- https://github.com/smackers/smack
- SMACK: Decoupling Source Language Details from Verifier Implementations
- Computer Aided Verification (CAV) 2014
- Zvonimir Rakamaric, Michael Emmi
- https://soarlab.org/publications/2014_CAV_SMACK/
- SMACK Software Verification Toolchain
- International Conference on Software Engineering (ICSE) Companion 2016
- Montgomery Carter, Shaobo He, Jonathan Whitaker, Zvonimir Rakamaric, Michael Emmi
- https://soarlab.org/publications/2016_ICSE_SMACK/
- Leveraging Compiler Intermediate Representation for Multi- and Cross-Language Verification
- Verification, Model Checking, and Abstract Interpretation (VMCAI) 2020
- Jack Garzella, Marek S. Baranowski, Shaobo He, Zvonimir Rakamaric
- https://soarlab.org/publications/2020_vmcai_gbhr/
- clang-tutor: A collection of Clang plugins - learn the API through examples
- My First Clang Warning
- 2019 LLVM Developers’ Meeting
- Meike Baumgärtner, Dmitri Gribenko
- https://www.youtube.com/watch?v=FNnKMSkaLkY
- https://llvm.org/devmtg/2019-10/talk-abstracts.html#tut11
- Developing the Clang Static Analyzer
- 2019 LLVM Developers’ Meeting; Artem Dergachev
- https://www.youtube.com/watch?v=g0Mqx1niUi0
- Faster, Stronger C++ Analysis with the Clang Static Analyzer
- 2018 LLVM Developers’ Meeting; George Karpenkov, Artem Dergachev
- https://www.youtube.com/watch?v=4n3l-ZcDJNY
- Building Program Reasoning Tools using LLVM and Z3
- POPL 2020 Tutorial
- Introduction to LLVM and Z3; Static Dataflow Analysis, Dynamic Symbolic Execution, Assertion Verification
- http://rightingcode.org/tutorials/popl20/
- Getting Started With LLVM: Basics
- 2019 LLVM Developers’ Meeting; Jessica Paquette, Florian Hahn
- https://www.youtube.com/watch?v=3QQuhL-dSys
- How to contribute to LLVM
- 2022; Nikita Popov
- https://developers.redhat.com/articles/2022/12/20/how-contribute-llvm
- How to Contribute to LLVM
- 2019 LLVM Developers’ Meeting; Chris Bieneman, Kit Barton
- https://www.youtube.com/watch?v=C5Y977rLqpw
- Intro to the Architecture of LLVM
- 2020; Nick Desaulniers
- https://www.youtube.com/watch?v=bUTXhcf_aNc
- Introduction to LLVM
- 2019 LLVM Developers’ Meeting
- Eric Christopher & Johannes Doerfert
- https://www.youtube.com/watch?v=J5xExRGaIIY
- https://llvm.org/devmtg/2019-10/talk-abstracts.html#tut9
- Intrinsics, Metadata, and Attributes: The story continues!
- 2016 LLVM Developers’ Meeting
- Hal Finkel, Argonne National Laboratory
- https://www.youtube.com/watch?v=jII0AcgU_5c
- LLVM Seminar - Northeastern+MIT
- 2019; Mike Shah
- http://www.mshah.io/#Talks
- https://www.youtube.com/playlist?list=PLvv0ScY6vfd8NDoT7qUab4VVAWV67oH-N
- Introduction to LLVM
- Introduction to Clang
- Introduction to Program Analysis using LLVM
- Security Research and Development with LLVM - Andrew Reiter
- clang-llvm-tutorial
- Clang and LLVM Tutorial Examples (AST Interpreter, Function Pointer Analysis, Value Range Analysis, Data-Flow Analysis, Andersen Pointer Analysis, LLVM Backend)
- https://github.com/lijiansong/clang-llvm-tutorial/
- Custom Alias Analysis in LLVM
- Introduction to LLVM: Building simple program analysis tools and instrumentation
- LLVMPlayground: Small sample programs that use LLVM and Clang APIs.
- Nick Sumner's Examples
- slides: https://www.cs.sfu.ca/~wsumner/teaching/886/llvm.pdf
- llvm-demo: A simple example of how LLVM can be used to gather static or dynamic facts about a program.
- callgraph-profiler-template: A template for an introductory project on dynamic analysis using LLVM
- clang-plugins-demo: A simple example of defining custom plugins for Clang and the Clang Static Analyzer
- llvm-dataflow-analysis: (very simple) static intraprocedural dataflow analyses
- overflower-template: Template for a project to teach basic static dataflow analysis using LLVM
- path-profiler-template: A template for a path profiling project using LLVM
- Quarkslab blog
- Writing a basic clang static analysis check
- Kaleidoscope: Implementing a Language with LLVM
- LLVM IR Tutorial - Phis, GEPs and other things, oh my!
- 2019 EuroLLVM Developers’ Meeting; Vince Bridgers, Felipe de Azevedo Piovezan (Intel)
- https://www.youtube.com/watch?v=m8G_S5LwlTo
- Mapping High Level Constructs to LLVM IR
- Compiling a Functional Language Using C++
- A Complete Guide to LLVM for Programming Language Creators
- LLVM's getelementptr, by example
- Creating an LLVM Sanitizer from Hopes and Dreams
- https://blog.trailofbits.com/2019/06/25/creating-an-llvm-sanitizer-from-hopes-and-dreams/
- llvm-sanitizer-tutorial and documentation
- Instrew: Leveraging LLVM for High Performance Dynamic Binary Instrumentation
- Loom: LLVM instrumentation library
- PolyTracker: An LLVM-based instrumentation tool for universal taint analysis.
- QBDI (QuarkslaB Dynamic binary Instrumentation): A Dynamic Binary Instrumentation framework based on LLVM
- https://qbdi.quarkslab.com
- https://github.com/quarkslab/QBDI
- 34C3 (2017) Implementing an LLVM based Dynamic Binary Instrumentation framework: https://events.ccc.de/congress/2017/Fahrplan/events/9006.html
- Example: plugging Triton on top of QBDI - http://shell-storm.org/repo/Notepad/qbdi_with_triton.txt
- A Preliminary Test of QBDI - https://www.johnfxgalea.com/2018/01/13/a-preliminary-test-of-qbdi/
- Example: SRAC - a Simple Return Address Checker - https://github.com/johnfxgalea/SRAC
- sbt-instrumentation: Configurable instrumentation of LLVM bitcode
- https://github.com/staticafi/sbt-instrumentation
- Instrumentation of LLVM IR - https://is.muni.cz/th/409920/fi_m/?lang=en
Lifting: Disassembly, Decompilation, Recompilation, Reverse Engineering
- ANVILL Decompiler Toolchain
- ANVILL forges beautiful LLVM bitcode out of raw machine code
- https://github.com/lifting-bits/anvill
- decomp: Compositional Decompilation using LLVM IR
- https://github.com/decomp/decomp
- Design documents: https://github.com/decomp/doc
- llvm-mctoll
- This tool statically (AOT) translates (or raises) binaries to LLVM IR.
- https://github.com/Microsoft/llvm-mctoll
- Raising binaries to LLVM IR with MCTOLL
- LCTES 2019 (WIP paper)
- S. Bharadwaj Yadavalli, Aaron Smith
- https://dl.acm.org/citation.cfm?id=3326354
- https://conf.researchr.org/details/LCTES-2019/LCTES-2019-papers/15/Raising-Binaries-to-LLVM-IR-with-MCTOLL-Work-in-progress-
- McSema: Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
- https://www.trailofbits.com/research-and-development/mcsema/
- https://github.com/lifting-bits/mcsema
- Decompiling Binaries into LLVM IR Using McSema and Dyninst
- Rellic: produces goto-free C output from LLVM bitcode
- Rellic is an implementation of the pattern-independent structuring algorithm to produce a goto-free C output from LLVM bitcode.
- https://github.com/lifting-bits/rellic
- Rellume — Lifts x86-64 to LLVM IR
- https://github.com/aengelke/rellume
- Rellume is a lifter for x86-64 machine code to LLVM IR with focus on the performance of the lifted code. The generated LLVM IR can be compiled and executed again, for example using LLVM's JIT compiler, ideally having the same (or even better) performance as the original code.
- Remill: Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
- reopt: A tool for analyzing x86-64 binaries.
- https://github.com/GaloisInc/reopt
- Reopt is a tool under development for decompiling and recompiling code. It works by mapping binaries into LLVM byte code, using the LLVM optimization passes to optimize the LLVM, and then combining the newly generated into the binary to generate a new executable.
- reopt-vcg: an in-progress Lean4 prototype LLVM/x86 equivalence checker for programs optimized by reopt.
- RetDec: a retargetable machine-code decompiler based on LLVM
- revng: a static binary translator
- revng is a static binary translator. Given a input ELF binary for one of the supported architectures (currently MIPS, ARM and x86-64) it will analyze it and emit an equivalent LLVM IR. To do so, revng employs the QEMU intermediate representation (a series of TCG instructions) and then translates them to LLVM IR.
- https://rev.ng/
- https://github.com/revng/revng
- Building, Testing and Debugging a Simple out-of-tree LLVM Pass
- 2016 EuroLLVM Developers' Meeting
- Serge Guelton & Adrien Guinet
- http://llvm.org/devmtg/2016-03/Tutorials/Tutorial.pdf
- https://github.com/quarkslab/llvm-dev-meeting-tutorial-2015
- https://blog.quarkslab.com/goto-llvm_dev_meeting.html
- https://www.youtube.com/watch?v=Z5KcwVaak3s
- llvm-pass-tutorial: A step-by-step tutorial for building an LLVM sample pass
- llvm-tutor: Basic LLVM passes for learning the API
- https://github.com/banach-space/llvm-tutor
- Writing an LLVM Pass: 101
- 2019 LLVM Developers’ Meeting; Andrzej Warzynski
- https://www.youtube.com/watch?v=ar7cJl2aBuU
- http://llvm.org/devmtg/2019-10/talk-abstracts.html#tut4
- Writing an LLVM Optimization
- 2020; Jonathan Smith
- A brief overview of LLVM, its pass and IR frameworks and API, and a tutorial on how to write legacy and modern optimization passes.
- https://www.youtube.com/watch?v=MagR2KY8MQI
- https://old.reddit.com/r/cpp/comments/hopfg3/writing_an_llvm_optimization_my_quarantine/
- float-compare-pass: Fork of LLVM for demonstrating optimization pass development
- 2007 LLVM Developer's Meeting; Devang Patel
- http://llvm.org/devmtg/2007-05/03-Patel-Passmanager.pdf
- LLVM Pass Manager Demystified (1 of 3) - https://www.youtube.com/watch?v=dZOrlikTaik
- LLVM Pass Manager Demystified (2 of 3) - https://www.youtube.com/watch?v=PaUWxVLGBg0
- LLVM Pass Manager Demystified (3 of 3) - https://www.youtube.com/watch?v=4HEy5EtVdCA
- How Compilers Work: Introduction to LLVM Passes
- C++ on Sea 2022
- Andrzej Warzynski
- https://www.youtube.com/watch?v=mfTYfzKqi5s
- LLVM’s New Pass Manager
- New PM: taming a custom pipeline of Falcon JIT
- 2018 EuroLLVM Developers’ Meeting - Fedor Sergeev, Azul Systems
- https://www.youtube.com/watch?v=6X12D46sRFw
- http://llvm.org/devmtg/2018-04/slides/Sergeev-Taming%20a%20custom%20pipeline%20of%20Falcon%20JIT.pdf
- The LLVM Pass Manager, Part 2
- 2014 LLVM Developers' Meeting
- Chandler Carruth, Google
- https://llvm.org/devmtg/2014-10/#talk11
- https://llvm.org/devmtg/2014-10/Slides/Carruth-TheLLVMPassManagerPart2.pdf
- Video: http://web.archive.org/web/20160718071630/http://llvm.org/devmtg/2014-10/Videos/The%20LLVM%20Pass%20Manager%20Part%202-720.mov
- Passes in LLVM, Part 1
- 2014 European LLVM Conference
- Chandler Carruth
- https://www.youtube.com/watch?v=rY02LT08-J8
- https://llvm.org/devmtg/2014-04/PDFs/Talks/Passes.pdf
- Porting Burst to the New LLVM Pass Manager
- Writing LLVM Pass in 2018
- 2018; Min-Yih Hsu
- Preface - https://medium.com/@mshockwave/writing-llvm-pass-in-2018-preface-6b90fa67ae82
- Part I: Write a new HelloWorld Pass in new pass manager fashion
- Part II - AnalysisManager - https://medium.com/@mshockwave/writing-llvm-pass-in-2018-part-ii-640f680978ec
- Part III - In-Tree Pass Integration - https://medium.com/@mshockwave/writing-llvm-pass-in-2018-part-iii-d44cd0c2c354
- Writing Pass Instrumentations for the New PassManager
- 2020; Min-Yih Hsu
- The more general and flexible version of
-print-before/-print-after - https://medium.com/@mshockwave/writing-pass-instrument-for-llvm-newpm-f17c57d3369f
- https://github.com/mshockwave/LLVM-NewPM-PassInstrumentation-Demo
- A Few Billion Lines of Code Later: Using Static Analysis to Find Bugs in the Real World
- Communications of the ACM, Vol. 53 No. 2, 2010
- Al Bessey, Ken Block, Ben Chelf, Andy Chou, Bryan Fulton, Seth Hallem, Charles Henri-Gros, Asya Kamsky, Scott McPeak, Dawson Engler
- https://cacm.acm.org/magazines/2010/2/69354-a-few-billion-lines-of-code-later/fulltext
- Analysing the Program Analyser
- Continuous Reasoning: Scaling the Impact of Formal Methods
- Logic in Computer Science (LISC) 2018; Peter O'Hearn
- https://research.fb.com/publications/continuous-reasoning-scaling-the-impact-of-formal-methods/
- From Start-ups to Scale-ups: Opportunities and Open Problems for Static and Dynamic Program Analysis
- IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM) 2018
- Mark Harman, Peter O'Hearn
- https://research.fb.com/publications/from-start-ups-to-scale-ups-opportunities-and-open-problems-for-static-and-dynamic-program-analysis/
- How to Prevent the next Heartbleed
- 2014; David A. Wheeler
- https://dwheeler.com/essays/heartbleed.html
- Lessons from Building Static Analysis Tools at Google (2018)
- Pointer analysis: haven't we solved this problem yet?
- Righting Software
- IEEE Software, May 2004
- https://www.microsoft.com/en-us/research/publication/righting-software/
- Source Code Analysis: A Road Map
- Future of Software Engineering (FOSE) 2007
- David Binkley
- https://dl.acm.org/citation.cfm?id=1254713
- Static versus dynamic analysis---an illusory distinction?
- Programming Languages: Application and Interpretation
- Type Safety in Three Easy Lemmas
- On the Relationship Between Static Analysis and Type Theory
- Soundness and completeness: with precision
- What is soundness (in static analysis)? - http://www.pl-enthusiast.net/2017/10/23/what-is-soundness-in-static-analysis/
- Brown CS: CSCI 1730: Programming Languages
- OPLSS (Oregon Programming Languages Summer School)
- https://www.cs.uoregon.edu/research/summerschool/
- 2019-2017, 2003: https://www.youtube.com/channel/UCDe6N9R7U-RYWA57wzJQ2SQ/playlists
- 2016-2015: https://www.youtube.com/channel/UCsON_8vogp4nCQFTnfu43kA/playlists
- free video lectures available, including the introductory ones based on Practical Foundations for Programming Languages: http://www.cs.cmu.edu/~rwh/pfpl/
- Programming Language Implementation Summer School (PLISS)
- Approachable PL Papers for Undergrads
- SSA book - http://ssabook.gforge.inria.fr/latest/
- Intermediate Representations in Imperative Compilers: A Survey
- ACM Computing Surveys, Vol. 45, No. 3, Article 26, 2013
- James Stanier, Des Watson
- http://dx.doi.org/10.1145/2480741.2480743
- http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.885.5223&rep=rep1&type=pdf
- Modern Intermediate Representations (IR)
- Introduction to LLVM - David Chisnall (Cambridge University)
- HPC Summer School 2017
- https://llvm.org/devmtg/2017-06/1-Davis-Chisnall-LLVM-2017.pdf
- Testing Intermediate Representations for Binary Analysis
- CS 7194 - Great works in Programming Languages - https://www.cs.cornell.edu/courses/cs7194/2019sp/
- Type Systems - Neel Krishnaswami
- http://jschuster.org/blog/2016/11/29/getting-started-in-programming-languages/
- Programming Languages: Application and Interpretation by Shriram Krishnamurthi
- SIGPLAN Awards - http://www.sigplan.org/Awards/
- Great Works in Programming Languages
- Collected by Benjamin C. Pierce
- https://www.cis.upenn.edu/~bcpierce/courses/670Fall04/GreatWorksInPL.shtml
- 10PL: 10 papers that all PhD students in programming languages ought to know, for some value of 10
- Northeastern University Programming Research Lab
- https://github.com/nuprl/10PL
- Best of PLDI 2004
- Classic Papers in Programming Languages and Logic
- Karl Crary
- https://www.cs.cmu.edu/~crary/819-f09/
- What Type Soundness Theorem Do You Really Want to Prove?
- https://blog.sigplan.org/2019/10/17/what-type-soundness-theorem-do-you-really-want-to-prove/
- Milner Award Lecture: The Type Soundness Theorem That You Really Want to Prove (and now you can)
- POPL 2018; Derek Dreyer
- https://www.youtube.com/watch?v=8Xyk_dGcAwk
- Type Theory Behind Glasgow Haskell Compiler Internals
- Principles of Programming Languages
- Lectures - Matthias Felleisen
- https://felleisen.org/matthias/4400-s20/lectures.html
- learn-programming-languages
- Resources for the working programmer to learn more about the fundamentals and theory of programming languages.
- Jean Yang
- https://github.com/jeanqasaur/learn-programming-languages
- A practitioner’s guide to reading programming languages papers
- Basic Mechanics of Operational Semantics
- PLMW @ ICFP 2020; David Van Horn
- https://www.youtube.com/watch?v=exhwykjH_z4
- Crash Course on Notation in Programming Language Theory
- Jeremy G. Siek
- LambdaConf 2018
- Part 1: https://www.youtube.com/watch?v=vU3caZPtT2I
- Part 2: https://www.youtube.com/watch?v=MhuK_aepu1Y
- Slides: https://www.dropbox.com/s/joaq7m9v75blrw5/pl-notation-lambdaconf-2018.pdf?dl=1
- 2012 blog post: http://siek.blogspot.com/2012/07/crash-course-on-notation-in-programming.html
- How do I read type systems notation
- It's Time for a New Old Language
- Guy Steele
- 2017 ACM Symposium on Principles and Practice of Parallel Programming (PPoPP)
- https://www.youtube.com/watch?v=7HKbjYqqPPQ
- https://www.youtube.com/watch?v=dCuZkaaou0Q
- Slides: https://labs.oracle.com/pls/apex/f?p=94065:40150:0::::P40150_PUBLICATION_ID:5376
- What are we thinking when we present a type theory?
- Homotopy Type Theory Electronic Seminar Talks, 2020-06-15; Peter LeFanu Lumsdaine
- https://www.youtube.com/watch?v=kQe0knDuZqg
- https://www.uwo.ca/math/faculty/kapulkin/seminars/hottestfiles/Lumsdaine-2020-06-15-HoTTEST.pdf
- Programming Language Semantics: It’s Easy As 1,2,3
- Journal of Functional Programming 2023
- Graham Hutton
- https://www.cs.nott.ac.uk/~pszgmh/123.pdf
- https://doi.org/10.1017/S0956796823000072