From Event-B to Verified C via HLL

Ning Ge (1, 2) , Arnaud Dieumegard (2) , Eric Jenn (3, 2) , Laurent Voisin (1)

1 Systerel
2 IRT Saint Exupéry - Institut de Recherche Technologique
3 TAES - THALES Avionics Electrical Systems

This work addresses the correct translation of an Event-B model to C code via an intermediate formal language, HLL. The proof of correctness follows two main steps. First, the final refinement of the Event-B model, including in-variants, is translated to HLL. At that point, additional properties (e.g., deadlock-freeness, liveness properties, etc.) are added to the HLL model. The proof of the invariants and additional properties at the HLL level guarantees the correctness of the translation. Second, the C code is automatically generated from the HLL model for most of the system functions and manually for the remaining ones; in this case, the HLL model provides formal contracts to the software developer. An equivalence proof between the C code and the HLL model guarantees the correctness of the code.

Mots clés: S3; Equivalence proof; C; HLL; Property proof; Event-B; Code generation

Domaines: Performance et fiabilité [cs.PF]; Calcul formel [cs.SC]; Génie logiciel [cs.SE]

Ning Ge, Arnaud Dieumegard, Eric Jenn, Laurent Voisin. From Event-B to Verified C via HLL. 2016. ⟨hal-01387137⟩