How to avoid proving the absence of integer overflows - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

How to avoid proving the absence of integer overflows

Résumé

When proving safety of programs, we must show, in particular, the absence of integer overflows. Unfortunately, there are lots of situations where performing such a proof is extremely difficult, because the appropriate restrictions on function arguments are invasive and may be hard to infer. Yet, in certain cases, we can relax the desired property and only require the absence of overflow during the first n steps of execution, n being large enough for all practical purposes. It turns out that this relaxed property can be easily ensured for large classes of algorithms, so that only a minimal amount of proof is needed, if at all. The idea is to restrict the set of allowed arithmetic operations on the integer values in question, imposing a " speed limit " on their growth. For example, if we repeatedly increment a 64-bit integer, starting from zero, then we will need at least 2 64 steps to reach an overflow; on current hardware, this takes several hundred years. When we do not expect any single execution of our program to run that long, we have effectively proved its safety against overflows of all variables with controlled growth speed. In this paper, we give a formal explanation of this approach, prove its soundness, and show how it is implemented in the context of deductive verification.
Fichier principal
Vignette du fichier
main.pdf (185.1 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01162661 , version 1 (11-06-2015)
hal-01162661 , version 2 (09-10-2015)

Identifiants

  • HAL Id : hal-01162661 , version 2

Citer

Martin Clochard, Jean-Christophe Filliâtre, Andrei Paskevich. How to avoid proving the absence of integer overflows. 7th Working Conference on Verified Software: Theories, Tools, and Experiments, Jul 2015, San Francisco, CA, United States. ⟨hal-01162661v2⟩
777 Consultations
573 Téléchargements

Partager

Gmail Facebook X LinkedIn More