Generating litmus tests for contrasting memory consistency models

  • Authors:

  • Sela Mador-Haim;Rajeev Alur;Milo M K. Martin

  • Affiliations:

  • University of Pennsylvania;University of Pennsylvania;University of Pennsylvania

  • Venue:
  • CAV'10 Proceedings of the 22nd international conference on Computer Aided Verification
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Well-defined memory consistency models are necessary for writing correct parallel software Developing and understanding formal specifications of hardware memory models is a challenge due to the subtle differences in allowed reorderings and different specification styles To facilitate exploration of memory model specifications, we have developed a technique for systematically comparing hardware memory models specified using both operational and axiomatic styles Given two specifications, our approach generates all possible multi-threaded programs up to a specified bound, and for each such program, checks if one of the models can lead to an observable behavior not possible in the other model When the models differs, the tool finds a minimal “litmus test” program that demonstrates the difference A number of optimizations reduce the number of programs that need to be examined Our prototype implementation has successfully compared both axiomatic and operational specifications of six different hardware memory models We describe two case studies: (1) development of a non-store atomic variant of an existing memory model, which illustrates the use of the tool while developing a new memory model, and (2) identification of a subtle specification mistake in a recently published axiomatic specification of TSO.