An Abstract Interpretation-Based Framework for Control Flow Reconstruction from Binaries. / Kinder, Johannes; Zuleger, Florian; Veith, Helmut.

Proc. 10th Int. Conf. Verification, Model Checking, and Abstract Interpretation (VMCAI 2009). Springer, 2009. p. 214-228.

Research output: Chapter in Book/Report/Conference proceedingConference contribution



  • vmcai09

    Accepted author manuscript, 256 KB, PDF document


Due to indirect branch instructions, analyses on executables commonly suffer from the problem that a complete control flow graph of the program is not available. Data flow analysis has been proposed before to statically determine branch targets in many cases, yet a generic strategy without assumptions on compiler idioms or debug information is lacking. We have devised an abstract interpretation-based framework for generic low level programs with indirect jumps which safely combines a pluggable abstract domain with the notion of partial control flow graphs. Using our framework, we are able to show that the control flow reconstruction algorithm of our disassembly tool Jakstab produces the most precise overapproximation of the control flow graph with respect to the used abstract domain.
Original languageEnglish
Title of host publicationProc. 10th Int. Conf. Verification, Model Checking, and Abstract Interpretation (VMCAI 2009)
Publication statusPublished - 2009
This open access research output is licenced under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.

ID: 17558145