Beyond Edge Coverage: Per-Task Data-Flow Extraction at Kernel Function Boundaries via LLVM

arXiv:2606.00455 · cs.CR, cs.OS · Submitted 2026-05-30 · Read on arXiv

cs.CR, cs.OS

Submitted: 2026-05-30

Updated: 2026-10-09

Code: https://github.com/llvm/llvm-project

Terminology

Trace — 38× in this paper · explained in 2 episodes
Verification — 20× in this paper · explained in 2 episodes
Verifier — 9× in this paper · explained in 2 episodes
Core — 4× in this paper · explained in 2 episodes
Formal Verification — 3× in this paper · explained in 2 episodes
Actor — 2× in this paper · explained in 3 episodes
Information Gain — 2× in this paper · explained in 2 episodes
Semantic Gap — 2× in this paper · explained in 2 episodes
Allocator — 1× in this paper · explained in 1 episode
Benchmark — 1× in this paper · explained in 2 episodes
Consistency — 1× in this paper · explained in 3 episodes
Distillation — 1× in this paper · explained in 2 episodes
Formal Methods — 1× in this paper · explained in 3 episodes
In Runtime Verification — 1× in this paper
Reinforcement Learning — 1× in this paper · explained in 4 episodes
Structural Constraints — 1× in this paper · explained in 2 episodes

Related papers