TLA+ Model Checking Made Symbolic

Igor Konnov 1 Jure Kukovec 2 Thanh-Hai Tran 2
1 VERIDIS - Modeling and Verification of Distributed Algorithms and Systems
LORIA - FM - Department of Formal Methods , Inria Nancy - Grand Est, MPII - Max-Planck-Institut für Informatik
Abstract : TLA + is a language for formal specification of all kinds of computer systems. System designers use this language to specify concurrent, distributed, and fault-tolerant protocols, which are traditionally presented in pseudo-code. TLA + is extremely concise yet expressive: The language primitives include Booleans, integers, functions, tuples, records, sequences, and sets thereof, which can be also nested. This is probably why the only model checker for TLA + (called TLC) relies on explicit enumeration of values and states. In this paper, we present APALACHE-a first symbolic model checker for TLA +. Like TLC, it assumes that all specification parameters are fixed and all states are finite structures. Unlike TLC, APALACHE translates the underlying transition relation into quantifier-free SMT constraints, which allows us to exploit the power of SMT solvers. Designing this translation is the central challenge that we address in this paper. Our experiments show that APALACHE outperforms TLC on examples with large state spaces.
Keywords : Model checking TLA+ SMT
Complete list of metadatas

Cited literature [91 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-02280888
Contributor : Igor Konnov <>
Submitted on : Friday, September 6, 2019 - 4:43:42 PM
Last modification on : Saturday, September 7, 2019 - 1:19:31 AM

File

camera.pdf
Files produced by the author(s)

Identifiers

Collections

Citation

Igor Konnov, Jure Kukovec, Thanh-Hai Tran. TLA+ Model Checking Made Symbolic. Proc. ACM Program. Lang. 3, OOPSLA, Article, In press, 3, ⟨10.1145/3360549⟩. ⟨hal-02280888⟩

Share

Metrics

Record views

119

Files downloads

88