Verification of a Virtual Filesystem Switch

Ernst, Gerhard; Schellhorn, Gerhard; Haneberg, Dominik; Pfähler, Jörg; Reif, Wolfgang

doi:10.1007/978-3-642-54108-7_13

Cited by 15 publications

(17 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We have proven our VFS correct wrt. the POSIX model relative to AFS [15]. As a consequence, any AFS-compliant file system can be plugged in to yield a correct system.…”

Section: Vfs + Afs As a Refinement Of Posixmentioning

confidence: 98%

“…The efforts [1] and [25] focus on an analysis of reads and writes with pages, in the first, data is accessed a byte at a time, whereas [25] provides a POSIX-style interface for read/write while integrating some effect of power-loss. An in-depth technical comparison to our model can be found in [15].…”

Section: Fig 5 Posix Create Operationmentioning

confidence: 99%

“…Our formal POSIX model [15] defines the overall requirements of the system. It has been derived from the official specification [41] and is furthermore an evolution of a lot of existing related work to which we compare at the end of this section.…”

Section: Posix Specification and Modelmentioning

confidence: 99%

“…The section also highlights some of the problems that need to be tackled and describes our solutions. The formal models are also available at our web-presentation [11]. Section 4 explains how we generate Scala and C code from our model hierarchy and integrate it into Linux.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Development of a Verified Flash File System

Schellhorn

Ernst

Pfähler

et al. 2014

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Abstract. This paper gives an overview over the development of a formally verified file system for flash memory. We describe our approach that is based on Abstract State Machines and incremental modular refinement. Some of the important intermediate levels and the features they introduce are given. We report on the verification challenges addressed so far, and point to open problems and future work. We furthermore draw preliminary conclusions on the methodology and the required tool support.

show abstract

“…We have proven our VFS correct wrt. the POSIX model relative to AFS [15]. As a consequence, any AFS-compliant file system can be plugged in to yield a correct system.…”

Section: Vfs + Afs As a Refinement Of Posixmentioning

confidence: 98%

Section: Fig 5 Posix Create Operationmentioning

confidence: 99%

Section: Posix Specification and Modelmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Development of a Verified Flash File System

Schellhorn

Ernst

Pfähler

et al. 2014

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…Ernst et al [13] give a global first-order specification of the POSIX file system, and show that a heap-based implementation of VFS (Virtual Filesystem Switch), an abstraction layer within the Linux implementation of file systems, is correct. They use separation logic to reason about the implementation.…”

Section: Local Approachmentioning

confidence: 99%

Reasoning about the POSIX file system: local update and global pathnames

Ntzik

Gardner

2015

Proceedings of the 2015 ACM SIGPLAN International Conference on Object-Oriented Programming, Systems, Languages, and Applicatio

View full text Add to dashboard Cite

We introduce a program logic for specifying a core sequential subset of the POSIX file system and for reasoning abstractly about client programs working with the file system. The challenge is to reason about the combination of local directory update and global pathname traversal (including '..' and symbolic links) which may overlap the directories being updated. Existing reasoning techniques are either based on first-order logic and do not scale, or on separation logic and can only handle linear pathnames (no '..' or symbolic links). We introduce fusion logic for reasoning about local update and global pathname traversal, introducing a novel effect frame rule to propagate the effect of a local update on overlapping pathnames. We apply our reasoning to the standard recursive remove utility (rm -r), discovering bugs in well-known implementations.

show abstract

Why Programming Must Be Supported by Modeling and How

Börger

2018

Leveraging Applications of Formal Methods, Verification and Validation. Modeling

View full text Add to dashboard Cite

Verification of a Virtual Filesystem Switch

Cited by 15 publications

References 29 publications

Development of a Verified Flash File System

Development of a Verified Flash File System

Reasoning about the POSIX file system: local update and global pathnames

Why Programming Must Be Supported by Modeling and How

Contact Info

Product

Resources

About