作者: Ernie Cohen , Michał Moskal , Wolfram Schulte , Stephan Tobies
DOI: 10.1007/978-3-642-14295-6_42
关键词:
摘要: We describe a practical method for reasoning about realistic concurrent programs Our allows global two-state invariants that restrict update of shared state provide simple, sufficient conditions checking those modularly The has been implemented in VCC, an automatic, sound, modular verifier C VCC used to verify functional correctness tens thousands lines Microsoft's Hyper-V virtualization platform and SYSGO's embedded real-time operating system PikeOS.