Abstract:Implementations of concurrent objects should guarantee linearizability and a progress property such as wait-freedom, lock-freedom, starvation-freedom, or deadlock-freedom. These progress properties describe conditions under which a method call is guaranteed to complete. However, they fail to describe how clients are affected, making it difficult to utilize them in layered and modular program verification. Also we lack verification techniques for starvation-free or deadlock-free objects. They are challenging to verify because the fairness assumption introduces complicated interdependencies among progress of threads. Even worse, none of the existing results applies to concurrent objects with partial methods, i.e., methods that are supposed not to return under certain circumstances. A typical example is the lock_acquire method, which must not return when the lock has already been acquired. In this tutorial we examine the progress properties of concurrent objects. We formulate each progress property (together with linearizability as a basic correctness requirement) in terms of contextual refinement. This essentially gives us progress-aware abstraction for concurrent objects. Thus, when verifying clients of the objects, we can soundly replace the concrete object implementations with their abstractions, achieving modular verification. For concurrent objects with partial methods, we formulate two new progress properties, partial starvation-freedom (PSF) and partial deadlock-freedom (PDF). We also design four patterns to write abstractions for PSF or PDF objects under strongly or weakly fair scheduling, so that these objects contextually refine their abstractions. Finally, we introduce a rely-guarantee style program logic LiLi for verifying linearizability and progress together for concurrent objects. It unifies thread-modular reasoning about all the six progress properties (wait-freedom, lock-freedom, starvation-freedom, deadlock-freedom, PSF and PDF) in one framework. We have successfully applied LiLi to verify starvation-freedom or deadlock-freedom of representative algorithms such as lock-coupling lists, optimistic lists and lazy lists, and PSF or PDF of lock algorithms.

A Formally Verified Sequentializer for Lustre-Like Concurrent Synchronous Data-Flow Programs

Credible sorting for synchronous data-flow programs

Trustworthy Translation for Eliminating High-Order Operation of a Synchronous Dataflow Language

Verified Lustre Normalization with Node Subsampling

The synchronous data flow programming language LUSTRE

Key Translations of the Trustworthy Compiler L2C and Its Design and Implementation

A Formally Verified Transformation to Unify Multiple Nested Clocks for a Lustre-like Language

Csimpl: A Rely-Guarantee-Based Framework For Verifying Concurrent Programs

Towards certified separate compilation for concurrent programs

A Program Logic for Concurrent Objects under Fair Scheduling.

CommCSL: Proving Information Flow Security for Concurrent Programs using Abstract Commutativity

Towards Proved Formal Specification and Verification of STL Operators as Synchronous Observers

From Traces To Proofs: Proving Concurrent Program Safe

Progress of Concurrent Objects

Verifying Parallel Low-Level Programs for Multi-core Processor

Using Concurrent Relational Logic with Helpers for Verifying the AtomFS File System

Synchronous Programming with Refinement Types

Practical Rely/Guarantee Verification of an Efficient Lock for seL4 on Multicore Architectures

Verified Code Transpilation with LLMs

An Extension to Data-Flow-Oriented Formal Specification Language for Specifying Concurrent Software Systems

Towards a Verified Compiler Prototype for the Synchronous Language SIGNAL