CSimpl: A Rely-Guarantee-Based Framework for Verifying Concurrent Programs

Abstract

It is essential to deal with the interference of the environment between programs in concurrent program verification. This has led to the development of concurrent program reasoning techniques such as Rely-Guarantee. However, the source code of the programs to be verified often involves language features such as exceptions and procedures which are not supported by the existing mechanizations of those concurrent reasoning techniques. Schirmer et al. have solved a similar problem for sequential programs by developing a verification framework called Simpl, which provides a rich sequential language that can encode most of the features in real world programming languages. Since Simpl only aims to verify sequential programs, it does not support the specification nor the verification of concurrent programs. In this paper we introduce CSimpl, an extension of Simpl with concurrency-oriented language features and verification techniques. We prove the compositionality of the CSimpl semantics and we provide inference rules for the language constructors to reason about CSimpl programs using Rely-Guarantee. We show that the inference rules are sound w.r.t. the language semantics. Finally, we run a case study where we use CSimpl to specify and prove functional correctness of an abstract communication model of the XtratuM partitioning separation micro-kernel.

Proof Tactics for Assertions in Separation Logic

“…Semantics of actions. Our ongoing project involves integrating the semantics of actions in Feng's local rely/guarantee [17] in the CSimpl framework [35]. The assertion language of local rely/guarantee extends separation logic assertions with an additional semantic level to specify predicates over pairs (σ, σ ) of states, called actions, which are represented by the states before and after the action.…”

An Executable Formal Model of the VHDL in Isabelle/HOL

“…The project adopts a multi-layer verification approach where we formalise each layer separately and use a refinement-based approach to show that properties proved at the top level are preserved at the lower levels. This work closely connects with the other components of the project such as the formal modelling and verification of verilog [8] and the SPARCv8 instruction set architecture for the LEON3 processor [9], [10], a verification framework for concurrent C-like programs [11], and automated reasoning techniques for separation logic [12]- [14]. For easy integration, these related sub-projects partly determine our software choices such as Isabelle/HOL and hardware choices such as LEON3 and VHDL.…”

A Continuous Certification Methodology for DevOps

“…Certification has been moving from manual, after-deployment processes, to semi-automatic tools for run time evaluation. New certification schemes for the cloud have been defined [1,3,14,15,19], where the involvement of the certification authority is weakened, and the importance of semiautomatic and trustworthy techniques and tools raises. Notwithstanding their huge potential, such approaches still prove a poor fit for modern systems that mix cloud applications and microservices.…”