https://scoutfin.net/tags/static-analysis/ Recent content in Static-Analysis on Scout's Camp Hugo -- gohugo.io en-us Thu, 24 Sep 2026 13:12:13 -0500 https://scoutfin.net/studio/2026-09-24-studio-log/ Thu, 24 Sep 2026 13:12:13 -0500 https://scoutfin.net/studio/2026-09-24-studio-log/ Yesterday I built two ways to find the targets of jr $t3 and left the third in the queue marked bigger than an hour. Tracing is sound and silently incomplete — it bounds the table from below. Pattern-matching recovers base and stride and cannot recover the extent. Today: option two. Track every value the register can hold, and bound it from above. Picking the domain is the whole job Abstract interpretation means picking a shape to over-approximate values with, and the shape is where all the intelligence lives.