Abstract:Modern SoCs are heterogeneous parallel systems comprised of components developed by distinct teams and possibly even different vendors. The memory consistency model (MCM) of processors in such SoCs specifies the ordering rules which constrain the values that can be read by load instructions in parallel programs running on such systems. The implementation of required MCM orderings can span components which may be designed and implemented by many different teams. Ideally, each team would be able to specify the orderings enforced by their components independently and then connect them together when conducting MCM verification. However, no prior automated approach for formal hardware MCM verification provided this. To bring automated hardware MCM verification in line with the realities of the design process, we present RealityCheck, a methodology and tool for automated formal MCM verification of modular microarchitectural ordering specifications. RealityCheck allows users to specify their designs as a hierarchy of distinct modules connected to each other rather than a single flat specification. It can then automatically verify litmus test programs against these modular specifications. RealityCheck also provides support for abstraction, which enables scalable verification by breaking up the verification of the entire design into smaller verification problems. We present results for verifying litmus tests on 7 different designs using RealityCheck. These include in-order and out-of-order pipelines, a non-blocking cache, and a heterogeneous processor. Our case studies cover the TSO and RISC-V (RVWMO) weak memory models. RealityCheck is capable of verifying 98 RVWMO litmus tests in under 4 minutes each, and its capability for abstraction enables up to a 32.1% reduction in litmus test verification time for RVWMO.

Research on Method of Formal Design and Verification of Memory Management Based on Microkernel Architecture

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in μC/OS-II: A Case Study.

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in C/OS-II: A Case Study

Formal Design and Verification of Interrupt Mechanism Based on Microkernel

VTOS: Research on Methodology of "Light-Weight" Formal Design and Verification for Microkernel OS.

VSOS-HAM:Research on Isabelle/HOL-based OS kernel hardwareabstract model and formal verification method

Survey of Formal Design and Verification for Operating System

Rely-guarantee Reasoning about Concurrent Memory Management: Correctness, Safety and Security

Research on Formal Design of Multi-thread Mechanism Based on Microkernel Architecture

Research on Microkernel Integrity Semantics Model and Formal Verification

Design of Secure Operating System

Formal Verification of L4 Memory Management Using SPIN

Fine-Grained Formal Specification and Analysis of Buddy Memory Allocation in Zephyr RTOS

SEMMA: Secure Efficient Memory Management Approach in Virtual Environment.

RealityCheck: Bringing Modularity, Hierarchy, and Abstraction to Automated Microarchitectural Memory Consistency Verification

Formal Modelling, Testing and Verification of HSA Memory Models using Event-B

Verification Framework for UML-Based Design of Embedded Systems.

Modeling and Proof of a File System Based on Micro-Kernel

Rely-Guarantee Reasoning About Concurrent Memory Management In Zephyr Rtos

A formal verification method: model checking

Partition Consistency: A Case Study in Modeling Systems with Weak Memory Consistency and Proving Correctness of their Implementations