The semantics of x86-CC multiprocessor machine code

  • Authors:
  • Susmit Sarkar;Peter Sewell;Francesco Zappa Nardelli;Scott Owens;Tom Ridge;Thomas Braibant;Magnus O. Myreen;Jade Alglave

  • Affiliations:
  • University of Cambridge, Cambridge, United Kingdom;University of Cambridge, Cambridge, United Kingdom;INRIA, Rocquencourt, France;University of Cambridge, Cambridge, United Kingdom;University of Cambridge, Cambridge, United Kingdom;INRIA, Rocquencourt, France;Unviersity of Cambridge, Cambridge, United Kingdom;INRIA, Rocquencourt, France

  • Venue:
  • Proceedings of the 36th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
  • Year:
  • 2009

Quantified Score

Hi-index 0.02

Visualization

Abstract

Multiprocessors are now dominant, but real multiprocessors do not provide the sequentially consistent memory that is assumed by most work on semantics and verification. Instead, they have subtle relaxed (or weak) memory models, usually described only in ambiguous prose, leading to widespread confusion. We develop a rigorous and accurate semantics for x86 multiprocessor programs, from instruction decoding to relaxed memory model, mechanised in HOL. We test the semantics against actual processors and the vendor litmus-test examples, and give an equivalent abstract-machine characterisation of our axiomatic memory model. For programs that are (in some precise sense) data-race free, we prove in HOL that their behaviour is sequentially consistent. We also contrast the x86 model with some aspects of Power and ARM behaviour. This provides a solid intuition for low-level programming, and a sound foundation for future work on verification, static analysis, and compilation of low-level concurrent code.