Abstract:Memory consistency model (MCM) issues in out-of-order-issue microprocessor-based shared-memory systems are notoriously non-intuitive and a source of hardware design bugs. Prior hardware verification work is limited to in-order-issue processors, to proving the correctness only of some test cases, or to bounded verification that does not scale in practice beyond 7 instructions across all threads. Because cache coherence (i.e., write serialization and atomicity) and pipeline front-end verification and testing are well-studied, we focus on the memory ordering in an out-of-order-issue processor's load-store queue and the coherence interface between the core and global coherence. We propose QED based on the key notion of observability that any hardware reordering matters only if a forbidden value is produced. We argue that one needs to consider (1) only directly-ordered instruction pairs -- transitively non-redundant pairs connected by an edge in the MCM-imposed partial order -- and not all in-flight instructions, and (2) only the ordering of external events from other cores (e.g.,invalidations) but not the events' originating cores, achieving verification scalability in both the numbers of in-flight memory instructions and of cores. Exhaustively considering all pairs of instruction types and all types of external events intervening between each pair, QED attempts to restore any reordered instructions to an MCM-complaint order without changing the execution values, where failure indicates an MCM violation. Each instruction pair's exploration results in a decision tree of simple, narrowly-defined predicates to be evaluated against the RTL. In our experiments, we automatically generate the decision trees for SC, TSO, and RISC-V WMO, and illustrate automatable verification by evaluating a substantial predicate against BOOMv3 implementation of RISC-V WMO, leaving full automation to future work.

Verifying Pipelined-RAM Consistency over Read/Write Traces of Data Replicas

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in C/OS-II: A Case Study

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in μC/OS-II: A Case Study.

Partition Consistency: A Case Study in Modeling Systems with Weak Memory Consistency and Proving Correctness of their Implementations

Simulation of Parallel Random Access Machines on Linear Arrays with Reconfigurable Pipelined Bus Systems

On Consistency for Bulk-Bitwise Processing-in-Memory

RealityCheck: Bringing Modularity, Hierarchy, and Abstraction to Automated Microarchitectural Memory Consistency Verification

System Level Asynchronous Virtual Pipeline on Dynamically and Partially Reconfigurable Architecture

Read Consistency in Distributed Database Based on DMVCC

An Exploration of Page Replication for NoC-Based On-Chip Distributed Memory Systems

QED: Scalable Verification of Hardware Memory Consistency

Exploiting Commutativity For Practical Fast Replication

Replicating Persistent Memory Key-Value Stores with Efficient RDMA Abstraction

Algorithm-Directed Crash Consistence in Non-Volatile Memory for HPC.

Parameterized algorithm for replicated objects with local reads

MRCN: Enhanced Coherence Mechanism for Near Memory Processing Architectures

Regional Consistency: Programmability and Performance for Non-Cache-Coherent Systems

Verifying Sequential Consistency on Shared-Memory Multiprocessors by Model Checking

RG_VIPS: A Simple Cache Coherence Protocol Based on Region-Grain Directories

Optimal Reads-From Consistency Checking for C11-Style Memory Models

Stabilizer: Geo-Replication with User-defined Consistency