paperbot · PL 论文追踪

全部论文 待读 收藏

P1 SMT Solver Validation Empowered by Large Pre-Trained Language Models

大型预训练语言模型赋能的 SMT 求解器验证
ASE 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE)2023匹配度 6/10 · 该论文用 LLM 生成 SMT 公式来模糊测试求解器,属于“AI→PL”中用 LLM 改进形式化验证/测试工具链的相邻方向,且有较强工程落地与真实缺陷发现;但它聚焦 SMT 求解器测试,而非静态分析、浮点分析、贝叶斯程序分析或 Agentic 程序,因此不是核心匹配。引用 22 inbox
Maolin Sun, Yibiao Yang, Yang Wang, Ming Wen, Haoxiang Jia, Yuming Zhou
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:提出 LasT,用重训练-微调与数据增强驱动 LLM 生成 SMT 公式来模糊测试求解器,发现 65 个真实缺陷。

SMT 求解器广泛用于软件验证、测试生成和程序合成,但其内部缺陷会导致严重后果,而如何生成有效测试公式仍是难题。本文提出将大型语言模型用于 SMT 公式生成,以模糊测试求解器,并设计重训练-微调流水线,结合数据增强提升生成效果。作者实现工具 LasT,对 Z3、cvc5 和 Bitwuzla 等先进求解器进行大规模测试。结果显示,LasT 已发现 65 个真实缺陷,其中 45 个被开发者修复,表明 LLM 可有效增强 SMT 求解器验证。

问题
SMT 求解器中的隐藏缺陷会导致软件验证、测试生成和程序合成等任务产生错误结果,而现有测试方法仍难以生成能全面测试求解器的有效公式。
方法
提出重训练-微调流水线,利用大型预训练语言模型生成 SMT 测试公式,并通过数据增强提升生成性能,实现模糊测试工具 LasT。
评估
在 Z3、cvc5 和 Bitwuzla 上开展广泛测试,LasT 共发现 65 个真实缺陷,其中 45 个已被开发者修复。
原文摘要(Abstract)

SMT solvers are utilized to check the satisfiability of logic formulas and have been applied in various crucial domains, including software verification, test case generation, and program synthesis. However, bugs hidden in SMT solvers can lead to severe consequences, causing erroneous results in these domains. Therefore, ensuring the reliability and robustness of SMT solvers is of critical importance. Despite several testing approaches proposed for SMT solvers, generating effective test formulas to comprehensively test SMT solvers remains a challenge. To address this challenge, in this study, we propose to port large language models (LLMs) to generate SMT formulas for fuzzing solvers. Specifically, the study presents a novel retrain-finetune pipeline to unleash the potential of language models to generate effective SMT formulas and improve their generation performance through data augmentation. We implemented our approach as a practical fuzzing tool, named LasT,and then extensively tested the state-of-the-art SMT solvers, namely Z3, cvc5, and Bitwuzla. To date, Last has successfully uncovered 65 genuine bugs for the solvers, of which 45 have been fixed by the developers.

链接与引用

DOI 原文 · DBLP

BibTeX
@inproceedings{SunYWWJZ23,
  title = {SMT Solver Validation Empowered by Large Pre-Trained Language Models},
  author = {Maolin Sun and Yibiao Yang and Yang Wang and Ming Wen and Haoxiang Jia and Yuming Zhou},
  booktitle = {ASE},
  year = {2023},
  doi = {10.1109/ase56229.2023.00180}
}