A. Absint and . Informatik, Astrée run-time error analyzer

A. Radio and . Inc, ARINC) ARINC 653

J. Bertrane, Static analysis by abstract interpretation of the quasisynchronous composition of synchronous programs, Proc. of the 6th Int. Conf. on Verification, Model Checking and Abstract Interpretation (VMCAI'05), pp.97-112, 2005.

J. Bertrane, Proving the Properties of Communicating Imperfectly-Clocked Synchronous Systems, Proc. of the 13th Int. Static Analysis Symposium (SAS'06), pp.370-386, 2006.
DOI : 10.1007/11823230_24

J. Bertrane, P. Cousot, R. Cousot, J. Feret, L. Mauborgne et al., Static analysis and verification of aerospace software by abstract interpretation, AIAA Infotech@Aerospace, pp.1-38, 2010.
URL : https://hal.archives-ouvertes.fr/inria-00528611

F. Besson, D. Cachera, T. P. Jensen, and D. Pichardie, Certified Static Analysis by Abstract Interpretation, Foundations of Security Analysis and Design V, pp.223-257, 2007.
DOI : 10.1145/1146809.1146811

URL : https://hal.archives-ouvertes.fr/inria-00538753

B. Blanchet, P. Cousot, R. Cousot, J. Feret, L. Mauborgne et al., Design and implementation of a special-purpose static program analyzer for safety-critical real-time embedded software, invited chapter, The Essence of Computation: Complexity, Analysis, Transformation. Essays Dedicated to Neil D. Jones, pp.85-108, 2002.

B. Blanchet, P. Cousot, R. Cousot, J. Feret, L. Mauborgne et al., A static analyzer for large safety-critical software, Proc. of the ACM SIGPLAN 2003 Conf. on Programming Language Design and Implementation (PLDI'03), pp.196-207, 2003.
URL : https://hal.archives-ouvertes.fr/hal-00128135

O. Bouissou, E. Conquet, P. Cousot, R. Cousot, J. Feret et al., Space software validation using abstract interpretation, Proc. of the Int. Space System Engineering Conference, Data Systems In Aerospace (DASIA'09), pp.1-7, 2009.
URL : https://hal.archives-ouvertes.fr/inria-00528590

F. Bourdoncle, Abstract, Journal of Functional Programming, vol.154, issue.04, pp.407-423, 1992.
DOI : 10.1017/S0956796800000496

F. Bourdoncle, Efficient chaotic iteration strategies with widenings, Proc. of the Int. Conf. on Formal Methods in Programming and their Applications (FMPA'93), pp.128-142, 1993.
DOI : 10.1007/BFb0039704

R. E. Bryant, Graph-Based Algorithms for Boolean Function Manipulation, IEEE Transactions on Computers, vol.35, issue.8, p.35, 1986.
DOI : 10.1109/TC.1986.1676819

R. M. Burstall, Program proving as hand simulation with a little induction, Proc. of IFIP Congress, pp.308-312, 1974.

P. Caspi, C. Mazuet, and N. R. Paligot, About the Design of Distributed Control Systems: The Quasi-Synchronous Approach, 20th Int. Conf. on Computer Safety, Reliability and Security, pp.215-226, 2001.
DOI : 10.1007/3-540-45416-0_21

P. Cousot, Méthodes itératives de construction et d'approximation de points fixes d'opérateurs monotones sur un treillis, analyse sémantique de programmes (in French) Thèse d'État ès sciences mathématiques, 1978.

P. Cousot, Semantic foundations of program analysis, invited chapter, Program Flow Analysis: Theory and Applications, chapter 10, pp.303-342, 1981.

P. Cousot, Types as abstract interpretations, Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages , POPL '97, pp.316-331, 1997.
DOI : 10.1145/263699.263744

P. Cousot, Constructive design of a hierarchy of semantics of a transition system by abstract interpretation, Theoretical Computer Science, vol.277, issue.1-2, pp.47-103, 2002.
DOI : 10.1016/S0304-3975(00)00313-3

P. Cousot and R. Cousot, Static determination of dynamic properties of programs, Proc. of the Second Int. Symp. on Programming (ISOP'76), pp.106-130, 1976.

P. Cousot and R. Cousot, Abstract interpretation, Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages , POPL '77, pp.238-252, 1977.
DOI : 10.1145/512950.512973

URL : https://hal.archives-ouvertes.fr/hal-01108790

P. Cousot and R. Cousot, Constructive versions of Tarski???s fixed point theorems, Pacific Journal of Mathematics, vol.82, issue.1, pp.43-57, 1979.
DOI : 10.2140/pjm.1979.82.43

P. Cousot and R. Cousot, Systematic design of program analysis frameworks, Proceedings of the 6th ACM SIGACT-SIGPLAN symposium on Principles of programming languages , POPL '79, pp.269-282, 1979.
DOI : 10.1145/567752.567778

P. Cousot and R. Cousot, Invariance proof methods and analysis techniques for parallel programs, pp.243-271, 1984.

P. Cousot and R. Cousot, Sometime = always + recursion ? always on the equivalence of the intermittent and invariant assertions methods for proving inevitability properties of programs, Acta Informatica, vol.4, issue.1, pp.1-31, 1987.
DOI : 10.1007/BF00290704

P. Cousot and R. Cousot, Abstract Interpretation Frameworks, Journal of Logic and Computation, vol.2, issue.4, pp.511-547, 1992.
DOI : 10.1093/logcom/2.4.511

P. Cousot and R. Cousot, Comparing the Galois connection and widening/narrowing approaches to abstract interpretation, Proc. of the 4th Int. Symp. on Programming Language Implementation and Logic Programming (PLILP'92), pp.269-295, 1992.
DOI : 10.1007/3-540-55844-6_142

P. Cousot and R. Cousot, ???A la Burstall??? intermittent assertions induction principles for proving inevitability properties of programs, Theoretical Computer Science, vol.120, issue.1, pp.123-155, 1993.
DOI : 10.1016/0304-3975(93)90248-R

P. Cousot and R. Cousot, Systematic design of program transformation frameworks by abstract interpretation, Conf. Rec. of the 29th Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages (POPL'02), pp.178-190, 2002.

P. Cousot and N. Halbwachs, Automatic discovery of linear restraints among variables of a program, Proceedings of the 5th ACM SIGACT-SIGPLAN symposium on Principles of programming languages , POPL '78, pp.84-97, 1978.
DOI : 10.1145/512760.512770

P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Miné et al., The Astrée static analyzer

P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Miné et al., The Astrée analyser, Proc. of the 14th European Symposium on Programming Languages and Systems (ESOP'05), pp.21-30, 2005.

P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Miné et al., Combination of Abstractions in the ASTR??E Static Analyzer, Proc. of the 11th Annual Asian Computing Science Conference (ASIAN'06), pp.272-300, 2006.
DOI : 10.1007/978-3-540-24725-8_2

P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Miné et al., Varieties of Static Analyzers: A Comparison with ASTREE, First Joint IEEE/IFIP Symposium on Theoretical Aspects of Software Engineering (TASE '07), pp.3-17, 2007.
DOI : 10.1109/TASE.2007.55

URL : https://hal.archives-ouvertes.fr/hal-00154031

P. Cousot, P. Ganty, and J. Raskin, Fixpoint-Guided Abstraction Refinements, Proc. of the 14th Int. Static Analysis Symposium (SAS'07), pp.333-348, 2007.
DOI : 10.1007/978-3-540-74061-2_21

P. Cousot, R. Cousot, and L. Mauborgne, The Reduced Product of Abstract Domains and the Combination of Decision Procedures, 14th Int. Conf. on Fondations of Software Science and Computation Structures, pp.456-472, 2011.
DOI : 10.1007/978-3-642-19805-2_31

D. Delmas and J. Souyris, Astr??e: From Research to Industry, Proc. of the 14th Int. Static Analysis Symposium (SAS'07), pp.437-451, 2007.
DOI : 10.1007/978-3-540-74061-2_27

E. W. Dijkstra, Cooperating Sequential Processes, Programming Languages: NATO Advanced Study Institute, pp.43-112, 1968.
DOI : 10.1007/978-1-4757-3472-0_2

. Dspace, TargetLink code generator

E. Technologies, Scade suite TM , the standard for the development of safety-critical embedded software in the avionics industry

A. Euclid, Elementa geometriae, book xii, proposition 17

J. Feret, Static Analysis of Digital Filters, Proc. of the 13th European Symp. on Programming Languages and Systems, pp.33-48, 2004.
DOI : 10.1007/978-3-540-24725-8_4

URL : https://hal.archives-ouvertes.fr/inria-00528447

J. Feret, The Arithmetic-Geometric Progression Abstract Domain, Proc. of the 6th Int. Conf. on Verification, Model Checking and Abstract Interpretation (VMCAI'05), pp.42-58, 2005.
DOI : 10.1007/978-3-540-30579-8_3

URL : https://hal.archives-ouvertes.fr/inria-00528450

J. Feret, Numerical abstract domains for digital filters, Proc. of the First Int. Workshop on Numerical & Symbolic Abstract Domains (NSAD'05), 2005.

P. Ferrara, Static Analysis Via Abstract Interpretation of the Happens-Before Memory Model, Proc. of the Second Int. Conf. on Tests and Proofs, pp.116-133, 2008.
DOI : 10.1007/978-3-540-79124-9_9

P. Ferrara, Static analysis via abstract interpretation of multithreaded programs, 2009.
URL : https://hal.archives-ouvertes.fr/tel-00417502

R. W. Floyd, Assigning meanings to programs, Proc. of the American Mathematical Society Symposia on Applied Mathematics, pp.19-32, 1967.

R. Giacobazzi, F. Ranzato, and F. Scozzari, Making abstract interpretations complete, Journal of the ACM, vol.47, issue.2, pp.361-416, 2000.
DOI : 10.1145/333979.333989

R. Ginosar, Fourteen ways to fool your synchronizer, Ninth International Symposium on Asynchronous Circuits and Systems, 2003. Proceedings., pp.89-97, 2003.
DOI : 10.1109/ASYNC.2003.1199169

J. Gosling, B. Joy, G. Steele, and G. Bracha, The Java language specification, 2005.

É. Goubault, Static Analyses of the Precision of Floating-Point Operations, Proc. of the 8th Int. Static Analysis Symposium (SAS'01), pp.234-259, 2001.
DOI : 10.1007/3-540-47764-0_14

P. Granger, Static analysis of arithmetical congruences, International Journal of Computer Mathematics, vol.30, issue.3-4, pp.165-190, 1989.
DOI : 10.1145/29873.29875

P. Granger, Static analysis of linear congruence equalities among variables of a program, Proc. of the Int. Joint Conf. on Theory and Practice of Software Development (TAP- SOFT'91), pp.169-192, 1991.
DOI : 10.1007/3-540-53982-4_10

R. Heckmann and C. Ferdinand, Worst-case execution time prediction by static program analysis, Proc. of the 18th Int. Parallel and Distributed Processing Symposium (IPDPS'04), pp.26-30, 2004.

T. Ieee and . Group, Portable operating system interface (POSIX)

A. /. Std, IEEE standard for binary floating-point arithmetic, pp.745-1985, 1985.

I. Group, Working draft, standard for programming language C++, 2010.

B. Jeannet and A. Miné, The Apron numerical abstract domain library, 2007.

B. Jeannet and A. Miné, Apron: A Library of Numerical Abstract Domains for Static Analysis, Proc. of the 21st Int. Conf. on Computer Aided Verification (CAV'09), pp.661-667, 2009.
DOI : 10.1007/978-3-642-02658-4_52

URL : https://hal.archives-ouvertes.fr/hal-00786354

C. B. Jones, Development Methods for Computer Programs including a Notion of Interference, 1981.

J. Jourdan, V. Laporte, S. Blazy, X. Leroy, and D. Pichardie, A formally-verified C static analyzer, Conf. Rec. of the 42nd Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages, 2015.
URL : https://hal.archives-ouvertes.fr/hal-01078386

D. Kästner, S. Wilhelm, S. Nenova, P. Cousot, R. Cousot et al., Astrée: Proving the absence of rutime errors, Proc. of Embedded Real-Time Software and Systems (ERTS'10), pp.1-5, 2010.

L. Lamport, Proving the Correctness of Multiprocess Programs, IEEE Transactions on Software Engineering, vol.3, issue.2, pp.125-143, 1977.
DOI : 10.1109/TSE.1977.229904

L. Lamport, How to Make a Multiprocessor Computer That Correctly Executes Multiprocess Programs, IEEE Transactions on Computers, vol.28, issue.9, pp.690-691, 1979.
DOI : 10.1109/TC.1979.1675439

K. Larsen, F. Larsson, P. Pettersson, and W. Yi, Efficient verification of realtime systems: Compact data structure and state-space reduction, Proc. of the 18th IEEE Real-Time Systems Symp. (RTSS'97), pp.14-24, 1997.

X. Leroy, Formal certification of a compiler back-end or: programming a compiler with a proof assistant, Conf. Rec. of the 33rd Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages (POPL'06), pp.42-54, 2006.
URL : https://hal.archives-ouvertes.fr/inria-00000963

J. Manson, W. Pugh, and S. V. Adve, The java memory model, Conf. Rec. of the 32nd Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages (POPL'05), pp.378-391, 2005.

M. Martel, Enhancing the implementation of mathematical formulas for fixedpoint and floating-point arithmetics. Formal Methods in System Design, pp.265-278, 2009.

L. Mauborgne, Astrée: Verification of absence of run-time error, Building the Information Society, pp.385-392, 2004.

L. Mauborgne and X. , Trace Partitioning in Abstract Interpretation Based Static Analyzers, Proc. of the 14th European Symp. on Programming Languages and Systems (ESOP'05), pp.5-20, 2005.
DOI : 10.1007/978-3-540-31987-0_2

A. Miné, The octagon abstract domain, Proc. of the Analysis, Slicing and Transformation Workshop (AST'01), pp.310-319, 2001.

A. Miné, Relational abstract domains for the detection of floating-point runtime errors, Proc. of the 13th European Symp. on Programming Languages and Systems, pp.3-17, 2004.

A. Miné, Weakly Relational Numerical Abstract Domains, 2004.

A. Miné, The octagon abstract domain. Higher-Order and Symbolic Computation, pp.31-100, 2006.

A. Miné, Field-sensitive value analysis of embedded C programs with union types and pointer arithmetics, Proc. of the ACM SIGPLAN- SIGBED Conf. on Languages, Compilers, and Tools for Embedded Systems (LCTES'06), pp.54-63, 2006.

A. Miné, Static Analysis of Run-Time Errors in Embedded Critical Parallel C Programs, Proc. of the 20th European Symposium on Programming, pp.398-418, 2011.
DOI : 10.1007/978-3-540-30538-5_4

A. Miné, Relational Thread-Modular Static Value Analysis by Abstract Interpretation, Proc. of the 15th Int. Conf. on Verification, Model Checking, and Abstract Interpretation (VMCAI'14), pp.39-58, 2014.
DOI : 10.1007/978-3-642-54013-4_3

D. Monniaux, The Parallel Implementation of the Astr??e Static Analyzer, Proc. of the 3rd Asian Symp. on Programming Languages and Systems (APLAS'05), pp.86-96, 2005.
DOI : 10.1007/11575467_7

R. E. Moore, Interval Analysis, 1966.

G. C. Necula, Proof-carrying code, Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages , POPL '97, pp.106-119, 1997.
DOI : 10.1145/263699.263712

G. C. Necula, Translation Validation for an Optimizing Compiler, Proc. of the Conf. on Programming Language Design and Implementation (PLDI'00), pp.83-94, 2000.

S. Owicki and D. Gries, An axiomatic proof technique for parallel programs I, Acta Informatica, vol.11, issue.4, pp.319-340, 1976.
DOI : 10.1007/BF00268134

A. Pnueli, O. Shtrichman, and M. Siegel, Translation validation for synchronous languages, Proc. of the 25th Int. Coll. on Automata, Languages and Programming (ICALP'98), volume 1443 of LNCS, pp.235-246, 1998.
DOI : 10.1007/BFb0055057

J. C. Reynolds, The discoveries of continuations. Lisp and Sy,bolic Computation, pp.233-248, 1993.

X. Rival and L. Mauborgne, The trace partitioning abstract domain, ACM Transactions on Programming Languages and Systems, vol.29, issue.5, 2007.
DOI : 10.1145/1275497.1275501

V. Saraswat, R. Jagadeesan, M. Michael, and C. Von-praun, A theory of memory models, Proceedings of the 12th ACM SIGPLAN symposium on Principles and practice of parallel programming , PPoPP '07, pp.161-172, 2007.
DOI : 10.1145/1229428.1229469

A. Tarski, A lattice-theoretical fixpoint theorem and its applications, Pacific Journal of Mathematics, vol.5, issue.2, pp.285-310, 1955.
DOI : 10.2140/pjm.1955.5.285