Formal verification of a multiprocessor hypervisor on arm relaxed memory hardware

R Tao, J Yao, X Li, SW Li, J Nieh, R Gu - Proceedings of the ACM …, 2021 - dl.acm.org
Concurrent systems software is widely-used, complex, and error-prone, posing a significant
security risk. We introduce VRM, a new framework that makes it possible for the first time to …

The leaky semicolon: compositional semantic dependencies for relaxed-memory concurrency

A Jeffrey, J Riely, M Batty, S Cooksey, I Kaysin… - Proceedings of the …, 2022 - dl.acm.org
Program logics and semantics tell a pleasant story about sequential composition: when
executing (S1; S2), we first execute S1 then S2. To improve performance, however …

What's Decidable About Causally Consistent Shared Memory?

O Lahav, U Boker - ACM Transactions on Programming Languages and …, 2022 - dl.acm.org
While causal consistency is one of the most fundamental consistency models weaker than
sequential consistency, the decidability of safety verification for (finite-state) concurrent …

Extending Intel-x86 consistency and persistency: formalising the semantics of Intel-x86 memory types and non-temporal stores

A Raad, L Maranget, V Vafeiadis - Proceedings of the ACM on …, 2022 - dl.acm.org
Existing semantic formalisations of the Intel-x86 architecture cover only a small fragment of
its available features that are relevant for the consistency semantics of multi-threaded …

Rely-guarantee reasoning for causally consistent shared memory

O Lahav, B Dongol, H Wehrheim - International Conference on Computer …, 2023 - Springer
Rely-guarantee (RG) is a highly influential compositional proof technique for concurrent
programs, which was originally developed assuming a sequentially consistent shared …

Semantics of Remote Direct Memory Access: Operational and Declarative Models of RDMA on TSO Architectures

G Ambal, B Dongol, H Eran, V Klimis, O Lahav… - Proceedings of the …, 2024 - dl.acm.org
Remote direct memory access (RDMA) is a modern technology enabling networked
machines to exchange information without involving the operating system of either side, and …

Compositional reasoning for non-multicopy atomic architectures

N Coughlin, K Winter, G Smith - Formal Aspects of Computing, 2023 - dl.acm.org
Rely/guarantee reasoning provides a compositional approach to reasoning about
concurrent programs. However, such reasoning traditionally assumes a sequentially …

Modular data-race-freedom guarantees in the promising semantics

M Cho, SH Lee, CK Hur, O Lahav - Proceedings of the 42nd ACM …, 2021 - dl.acm.org
Local data-race-freedom guarantees, ensuring strong semantics for locations accessed by
non-racy instructions, provide a fruitful methodology for modular reasoning in relaxed …

Deciding reachability under persistent x86-TSO

PA Abdulla, MF Atig, A Bouajjani, KN Kumar… - Proceedings of the …, 2021 - dl.acm.org
We address the problem of verifying the reachability problem in programs running under the
formal model Px86 defined recently by Raad et al. in POPL'20 for the persistent Intel x86 …

Distributed causal memory: modular specification and verification in higher-order distributed separation logic

L Gondelman, SO Gregersen, A Nieto… - Proceedings of the …, 2021 - dl.acm.org
We present the first specification and verification of an implementation of a causally-
consistent distributed database that supports modular verification of full functional …