Masanori Misono, Masahiro Ogino, Takaaki Fukai, Takahiro Shinagawa. FaultVisor2: Testing Hypervisor Device Drivers against Real Hardware Failures. In Proceedings of the 10th IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2018), Dec 2018. Acceptance Ratio: 19.8%. Best Paper Award.

1. 2
2 2 2
2 2
,1 1 , ,1 18 - 1 11 C 1 1 18 8 1 1E1
8 0 F F 0 F C C21
8 8 ))) 1 1 ( 3 ( C ( C 38 F 1 3 3
( C (

2. • 28 8 8 B H 8 D 89B
• 1H 8BB D BE 9 8 H E E 8 ED E C8D H H
• 1M8C B
• .8
• 3E 8D ' 25 8 B H E ( 8 H 658D 8B 7
• .8 9B8
• ) 200 8 B H E ( 8 H 4E 8B ,'' 200H
BE EC ,

3. '13 0'3
while(!(ioread(STAUS_REGISTER) & 0x80000));

4. '1 40'
while(!(ioread(STAUS_REGISTER) & 0x80000));

5. 2 51
' 0
' 0
' 0
while(!(ioread(STAUS_REGISTER) & 0x80000));

6. 8 6
01 1203 01 '
01 1203 01 '
01 1203 01 '
01 1203 01 '
while(!(ioread(STAUS_REGISTER) & 0x80000));

7. '1 0'
while(!(ioread(STAUS_REGISTER) & 0x80000));

8. 0 1
' '
' '
while(!(ioread(STAUS_REGISTER) & 0x80000));

9. 2 1
' 0
' 0
' 0
while(!(ioread(STAUS_REGISTER) & 0x80000));

10. 2 1 3
' 0
' 0
' 0
' 0
while(!(ioread(STAUS_REGISTER) & 0x80000));

11. 2 1 3
' 0
' 0
' 0
' 0
' 0
while(!(ioread(STAUS_REGISTER) & 0x80000));

12. :
! 12 231 0 12 0 ' !
12 231 0 12 0 ' !
12 231 0 12 0 ' !
12 231 0 12 0 ' !
8 12 231 0 12 0 ' !
3
while(!(ioread(STAUS_REGISTER) & 0x80000));

13. while(!(ioread(STAUS_REGISTER) & 0x80000))
{
count++;
if(count > TIMEOUT_MAX){
goto err;
}
usleep(1);
}
…
err:
do_error_handling();
' '

14. '
4 1
' '

15. 5 5
1 1 1
1 1 1
1 85
1 1 1 1 1 1
'

16. 1 1 1
1 1 1
61 8
1 1 1 1 1 1
'

17. 1 1 7 17
1 1 7 17
17 8 7
1 1 7 17 1 1 7 17
'

18. 1
• ' 8 8 1 8 8 8 8
8 1
1

19. • -
void func(void) {
int x = inb(…); // x is symbolic
if (x < 10) return -EIO;
else return 0;
}
void func(void) {
int x = inb(…); // x is symbolic
if (x < 10) return -EIO;
else return 0;
}
void func(void) {
int x = inb(…); // x is symbolic
if (x < 10) return -EIO;
else return 0;
}
実行パスの分岐
シンボルxの制約条件
• - -
A 1 8
A' -1 -
A -1 8 1 - 8 1
9 - -
1

20. 201 . .02,
0 D0
'0
C 2 C
'0 8 2
F 0 0
F- D 0
0 1 0 C
D
C

21. 8
• 1 1 81 2 1 181 1 2 81
• D 1 1 1 1
• D 1 1 1 81
• 1
! 1 1 1 C
• 1 1 1 C 181
1 2 1 1 1 1
' 1
1
1
' 1
1 1
1
' 1
1

22. 8 8
1 8
'
1 81 8
1 81 8
8 1 8
2 1
1 1

23. )
3
8 8
3 2 8
'
2 82 8
8 33 8
2 82 8
8 2 8
8 8
2
12 8

24. 2 2 )
4
8 81
' 2 8
1
1 2 1 82 18
8 18
1 2 1 82 18 1
18 2 8
2 2

25. 2 2 )
2
2
' /5
51 5
8
51 2 5
5
2
8 2

26. 6
' 6
8 66
A
6 8
86A 2
8 1 1 6 8 8

27. • A A EF DFG F A EGCC DF F G F E D
• D D CCD CD F G F A I 8GF 7 F C D E D
G
G EF
1''
' 2 ' ' 1

28. • ) 2
• / ' 21 / ( )
• )
• ( 1 1 1
' ' 8

29. )ADI )D '
0
-I GH
0
E F GDF
0
IAH GDF
( GG HD FHI A
GH F ( GG
1 2 9
C H DC
18
FDDH D
18
CDC FDDH
1 8

30. )ADI )D '
0
-I GH 3
0
E F GDF
0
IAH GDF
( GG HD FHI A
GH F ( GG
1 2
C H DC
18
FDDH D
18
CDC FDDH
1 8

31. )ADI )D '
0
-I GH 3
0
E F GDF
0
IAH GDF
( GG HD FHI A
GH F ( GG
1 2
C H DC
18
FDDH D
18
CDC FDDH
1 8

32. )ADI )D '
0
-I GH 3
0
E F GDF
0
IAH GDF
( GG HD FHI A
GH F ( GG
1 2
C H DC
18
FDDH D
18
CDC FDDH
1 8

33. )ADI )D '
0
-I GH 3
0
E F GDF
0
IAH GDF
( GG HD FHI A
GH F ( GG
1 2
C H DC
18
FDDH D
18
CDC FDDH
1 8

34. • 0 '
'8 3'
4
4 A
1 8 0
0 '
0 ' 1 384
218 84 4 1 0 ' 34 4 43 A 18 C1

35. • 2 0 ' 5 8
( )
' 3' 8
A
1 0
0 '
0 ' 1 3

36. • 6 E CA 1 3 8 C 6
• A 6 1 6C A 36
' C6'
2,'
C A
EA 3 66 AA
C A
2 C3 66 AA
A
EA 3 366 AA
3
13
1
'
1

37. • 1 8 - 1 3 0 1 =1 7 7
• =7 8 1 133 ( =7 8 1 133
- -
) 3) '
7 8 1 133
7 8 1 133
8
)1 1

38. • ' 3 1 1 0 01 0 ' 88 0
' 1 8
) (
2 3
' 0 81 2 88
' 0 81 2 88
3 1 8 0 ' 8 8

39. • 1 1 01 1 9 3 8 23 1 2 8 8
0 1 1 8 93 01 1
) (
' 8 0'8
-3 00 1
-3 00 1
1 1 12 8

40. • 8 4 . 1 .8 8
• 1. . 8. 8 8. 8 .4 8 . 0 1 .8 8
. . 8 .8
) (
4
.8 8
' .
1.8
.8 8
' . ' .
1.8
.8 8
' .

41. • . HE
• 5068 -3 )
• 4 1 1 E ' 8HI H ) '
• -M C I 1 E
• E E8 H I CE IE CE
• 3I8 I 8 I I E 8 H 8 E E8 H
• 8 E H I I EEI I C8 8 E I IE I HI
, E ,EC (

42. N VH O (
5PUIN B)( LX FI 3F1 5
5PUIN ) (7 I 3FI 5
2VTL P L L 0SLWI 5 OIO S WTN 5I 0
7 5 8I E -50 7TLDOS' -50 G PUS NNIS
4 RISWLT S 8AESI 1 BL ) 861SPIN .VLNH )' )'
8 UKISF ESH - GM C 1XUSIOI(
5PUIN SI L K RISUKSIEHLP HLTEFNIH
-8 00 ( ''84Z 3. X
3VITU FVPUV ( 7LPVX MISPIN ( ) '

43. ' '

44. '

45. ' '

46. ' '

47. ' '

48. 3 . 43
• C C
D D
• . 1 8
. 8 D
• . 1 8
• 1 8 D
• ) ) F C I 8 D
( E ( ' '
1E 28

49. ( )
' '

50. ( )
' '

51. • 1 - 1 A5 1A5 1 5A1 1 5 - 1 -
5 1 - 8 5 1 5 - 1 1 A5 -85E- 5
• 81 1 1 1 5-8 1 1 A5 -85E- 5 1 1 1 5
• 51A1 - 8 1 1-8 1C1 5 1 A5 1
• - 1 - 851 8 1 1 1A5 1 5A1
• C 1 5 1
• ' 11 5 1 - 81 5 5 -8 1 -58 1 5
• 8 1 A1 1- - 1 - 5 5 -8 1 1 A5 -85E- 5
8

52. • 2 2 ' 12
5
' 2
' 2 ' 2
5
8 2 2
' 28

53. • LF D G 0 L D 8D L E MK 3MR ?D ME 1
0DL D 5 CT D 3 H R D - 6222 1 :
• . 7 DHL / BIA D 5 C 1 HSD EM
G N , TTT A BIA D BMK A MF G C C HSD EM
• IDIM GH D D HLF 1DSHBD 1 HSD .F HL 5 CT D
3 H R D HL D 2LSH MLKDL .0 .0
0 MRC0MK '

54. ' '

55. 0G OA0 H -
L A H H ,, ' I 3 2 850 DOIABL GN
. GB 8 7B 1 IPHB 05B 1
0 7 L ( EI D 6 NB ' ,
3OBMN H 4ECD EBLL ( )

56. ' '

57. ' '

58. '