Shuvendu K. Lahiri Sanjit A. Seshia Randal E. Bryant Carnegie Mellon University, USA Processor Verification Views of System Operation Instruction Set Instructions ...
wd. wa. Memory M Modeled as Function. M(a): Value at location a ... Can decide more expressive class. CVC (Successor of SVC) runs out of memory on larger cases ...
... in reorder buffer that will generate register value Inorder Retirement Managed by Retirement Buffer FIFO buffer keeping pending ... stdrd_cool fujitsu-99 ...
Mutable function to describe buffer contents. Integers to represent head & tail pointers ... RF. Mem. Fetch. Decode. Execute. Memory. Write. Back. Integer state ...
Theorem proving for first & higher order logics ... Check validity of F using decision ... Need to consider only finitely many interpretations of terms ' ...
Address wa will get wd. Otherwise get what's already in M. Express with Lambda Notation ... wd. wa. 15. Systems with Buffers. Modeling Method. Mutable ...
Satisfiable/Unsatisfiable. Decision Procedure for Decidable Fragment of First-Order Logic ... satisfiable/unsatisfiable. 9. Small Domain Encoding (SD) x y ...
New formal definition of convergence for term-level models. Based on symbolic simulation. A sound algorithm to detect convergence. Dealing with Function State ...
Synchronization protocol that should work for arbitrary number of processes ... Simulators, model checkers, ... All Operate at Bit Level. State model ...
Formally verify hardware and software systems. Build on success in verifying ... Air Bag Controller. Speedometer. Reading. Accelerometer. Reading. Deploy! 4 ...
Still view state as collection of bits. 6. Word-Level Abstraction ... RF. Mem. Fetch. Decode. Execute. Memory. Write. Back. Integer state. Boolean state ...
Verification proves correctness of design for all possible word sizes ... pred (T) Decrement. Formulas (F ) Boolean Expressions F, F1 F2, F1 F2 Boolean connectives ...
[Lahiri, Bryant, Cook, CAV 03, Clarke et al., FMSD 04] ... Algorithm of Das, Dill & Park, CAV* 99. Avoids exponential worst case in many cases in practice ...
Address wa will get wd. Otherwise get what's already in M. Express with Lambda Notation ... Write(M, wa, wd) Memory comparison predicate. M1 = M2. Mutable ...