Abstract:Over the years, several memory models have been proposed to capture the subtle concurrency semantics of C/C++.One of the most fundamental problems associated with a memory model M is consistency checking: given an execution X, is X consistent with M? This problem lies at the heart of numerous applications, including specification testing and litmus tests, stateless model checking, and dynamic analyses. As such, it has been explored extensively and its complexity is well-understood for traditional models like SC and TSO. However, less is known for the numerous model variants of C/C++, for which the problem becomes challenging due to the intricacies of their concurrency primitives. In this work we study the problem of consistency checking for popular variants of the C11 memory model, in particular, the RC20 model, its release-acquire (RA) fragment, the strong and weak variants of RA (SRA and WRA), as well as the Relaxed fragment of RC20. Motivated by applications in testing and model checking, we focus on reads-from consistency checking. The input is an execution X specifying a set of events, their program order and their reads-from relation, and the task is to decide the existence of a modification order on the writes of X that makes X consistent in a memory model. We draw a rich complexity landscape for this problem; our results include (i)~nearly-linear-time algorithms for certain variants, which improve over prior results, (ii)~fine-grained optimality results, as well as (iii)~matching upper and lower bounds (NP-hardness) for other variants. To our knowledge, this is the first work to characterize the complexity of consistency checking for C11 memory models. We have implemented our algorithms inside the TruSt model checker and the C11Tester testing tool. Experiments on standard benchmarks show that our new algorithms improve consistency checking, often by a significant margin.

Verifying C11 programs operationally

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in C/OS-II: A Case Study

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in μC/OS-II: A Case Study.

Verifying C11-Style Weak Memory Libraries

Verifying C11-Style Weak Memory Libraries via Refinement

Operational Aspects of C/C++ Concurrency

Owicki-Gries Reasoning for C11 Programs with Relaxed Dependencies (Extended Version)

A Formal C Memory Model for Separation Logic

Operationally Proving Memory Access Violations in Isabelle/HOL

Implementing and Verifying Release-Acquire Transactional Memory (Extended Version)

A denotational account of C11-style memory

Compositional Verification of Compiler Optimisations on Relaxed Memory

Verified Compilation for Shared-Memory C

Rely-guarantee Reasoning about Concurrent Memory Management: Correctness, Safety and Security

Lifting the Reasoning Level in Generic Weak Memory Verification (Extended Version)

The Right Kind of Non-Determinism: Using Concurrency to Verify C Programs with Underspecified Semantics

Practical Rely/Guarantee Verification of an Efficient Lock for seL4 on Multicore Architectures

Dynamic Verification of C/C++11 Concurrency over Multi Copy Atomics

Verifying Programs Under Custom Application-Specific Execution Models

Overhauling SC atomics in C11 and OpenCL

Optimal Reads-From Consistency Checking for C11-Style Memory Models