Constraint-Based BMC: A Backjumping Strategy

Abstract : Safety property checking is mandatory in the validation process of critical software. When formal verification tools fail to prove some properties, the automatic generation of counterexamples for a given loop depth is an important issue in practice. We investigate in this paper the capabilities of constraint-based bounded model checking for program verification and counterexample generation on real applications. We introduce DPVS (Dynamic Post-condition Variable driven Strategy), a new backjumping strategy we developed to handle an industrial application from a car manufacturer, the Flasher Manager. This backjumping strategy is used to search a faulty path and to collect the constraints of such a path. The simplified control flow graph (CFG) of the program is explored in a backward way, starting from the post-condition and jumping to the most promising node where the variables of the post-condition are defined. In other words, the constraints are collected by exploring the CFG in a dynamic and non-sequential backward way. The Flasher Manager application has been designed and simulated using the Simulink platform. However, this module is concretely embedded as a C program in a car computer, thus we have to check that the safety properties are preserved on this C code. We report experiments on the Flasher Manager with our constraint-based bounded model checker, and with CBMC, a state-of-the-art bounded model checker. Experiments show that DPVS and CBMC have similar performances on one property of the Flasher Manager; DPVS outperforms CBMC to find a counterexample for two properties; two of the properties of the Flasher Manager remain intractable for CBMC and DPVS.
Type de document :
Pré-publication, Document de travail
2011
Liste complète des métadonnées


https://hal.archives-ouvertes.fr/hal-00635417
Contributeur : Michel Rueher <>
Soumis le : lundi 30 juillet 2012 - 10:45:54
Dernière modification le : lundi 30 juillet 2012 - 20:03:00
Document(s) archivé(s) le : vendredi 16 décembre 2016 - 03:57:30

Fichier

preprint.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-00635417, version 4

Collections

Citation

Hélène Collavizza, Le Vinh Nguyen, Olivier Ponsini, Michel Rueher, Antoine Rollet. Constraint-Based BMC: A Backjumping Strategy. 2011. <hal-00635417v4>

Partager

Métriques

Consultations de
la notice

162

Téléchargements du document

75