Dynamic boundaries: information hiding by second order framing with first order assertions (ESOP invited lecture)

  • Authors:
  • David A. Naumann;Anindya Banerjee

  • Affiliations:
  • Stevens Institute of Technology, Hoboken, NJ;IMDEA Software, Madrid, Spain

  • Venue:
  • ESOP'10 Proceedings of the 19th European conference on Programming Languages and Systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

The hiding of internal invariants creates a mismatch between procedure specifications in an interface and proof obligations on the implementations of those procedures. The mismatch is sound if the invariants depend only on encapsulated state, but encapsulation is problematic in contemporary software due to the many uses of shared mutable objects. The mismatch is formalized here in a proof rule that achieves flexibility via explicit restrictions on client effects, expressed using ghost state and ordinary first order assertions.