Constraint-Based BMC: A Backward Approach

Hélène Collavizza (1) , Le Vinh Nguyen (1) , Olivier Ponsini (1) , Michel Rueher (1) , Antoine Rollet (2)

1 Laboratoire d'Informatique, Signaux, et Systèmes de Sophia-Antipolis (I3S) / Equipe CEP
2 LaBRI - Laboratoire Bordelais de Recherche en Informatique

Safety property checking is mandatory in the validation process of critical software. When formal verification tools fail to prove some properties, the automatic generation of counterexamples for a given loop depth is therefore an important issue in practice. We investigate in this paper the capabilities of constraint-based bounded model checking for program verification and counterexample generation on real applications. We introduce DPVS (Dynamic Post-condition Variable driven Strategy), a new non-sequential search strategy we have developed to handle an industrial application from a car manufacturer, the Flasher Manager. This application has been designed and simulated using the Simulink platform. However, this module is concretely embedded as a C program in a car computer, thus we have to check that the safety properties are preserved on this C code. We report experiments on the Flasher Manager application with our constraint-based bounded model checker, and with CBMC, a state-of-the-art bounded model checker. Experiments show that DPVS and CBMC have similar performances on one property of the Flasher Manager; DPVS outperforms CBMC to find a counterexample for two properties; two of the properties of the Flasher Manager remain intractable both for CBMC and DPVS.

Mots clés: embedded systems; validation; constraint-based bounded model checking; counterexample generation

Domaines: Performance et fiabilité [cs.PF]; Systèmes embarqués

Hélène Collavizza, Le Vinh Nguyen, Olivier Ponsini, Michel Rueher, Antoine Rollet. Constraint-Based BMC: A Backward Approach. 2011. ⟨hal-00635417v1⟩