Interprocedural Functional Shape Analysis using Local Heaps

We present a framework for interprocedural shape analysis, which is context-and flow-sensitive with the ability to perform destructive pointer updates. Instancesof the framework are precise enough to prove the absence of program errors suchas null dereferences, memory leaks and verify conformance to API specifications.Technically, our analysis computes procedure summaries as transformers frominputs to outputs while ignoring parts of the heap not relevant to the procedure.This makes the analysis modular in the heap and thus allows reusing the effect ofa procedure at different call-sites and even between different contexts occurring atthe same call-site.A prototype of our framework was implemented and used to verify interestingproperties of heap manipulating programs.