Hardened Flow-Sensitive Trace Formula for Fault Localization

In formula-based fault localization methods, a program under test, which is unrolled to a certain bound, is encoded in a trace formula (TF). The efficiency and precision of the fault localization algorithm depend highly on the way this formula is encoded. The full flow-sensitive TF can cover all potential root causes, but is usually large and scalability problems remain. We propose a new encoding, the hardened flow-sensitive trace formula (HFTF), which reduces the complexity of the formula but does not lose essential control flow graph (CFG) information required for localizing faults. The HFTF is constructed using a concolic execution method that generates both failing and successful executions and uses the coverage information from these executions to simplify the trace formula.