Checking JML specifications using an extensible software model checking framework

Authors:
Robby;Edwin Rodríguez;Matthew B. Dwyer;John Hatcliff
Affiliations:
Department of Computing and Information Sciences, Kansas State University, 234 Nichols Hall, 66506, Manhattan, KS, USA;Department of Computing and Information Sciences, Kansas State University, 234 Nichols Hall, 66506, Manhattan, KS, USA;Department of Computer Science and Engineering, University of Nebraska-Lincoln, 256 Avery Hall, 68588, Lincoln, NE, USA;Department of Computing and Information Sciences, Kansas State University, 234 Nichols Hall, 66506, Manhattan, KS, USA
Venue:
International Journal on Software Tools for Technology Transfer (STTT)
Year:
2006

Citing 0
Cited 7

JML-based verification of liveness properties on a class in isolation

Proceedings of the 2006 conference on Specification and verification of component-based systems
Full functional verification of linked data structures

Proceedings of the 2008 ACM SIGPLAN conference on Programming language design and implementation
JML Runtime Assertion Checking: Improved Error Reporting and Efficiency Using Strong Validity

FM '08 Proceedings of the 15th international symposium on Formal Methods
Teaching Program Specification and Verification Using JML and ESC/Java2

TFM '09 Proceedings of the 2nd International Conference on Teaching Formal Methods
C.OPEN and ANNOTATOR: tools for on-the-fly model checking C programs

Proceedings of the 14th international SPIN conference on Model checking software
Deadlock and starvation free reentrant readers-writers: A case study combining model checking with theorem proving

Science of Computer Programming
A case study on the lightweight verification of a multi-threaded task server

Science of Computer Programming

Quantified Score

Hi-index	0.00

Visualization

Abstract

The use of assertions to express correctness properties of programs is growing in practice. Assertions provide a form of lightweight checkable specification that can be very effective in finding defects in programs and in guiding developers to the cause of a problem. A wide variety of assertion languages and associated validation techniques have been developed, but run-time monitoring is commonly thought to be the only practical solution. In this paper, we describe how specifications written in the Java Modeling Language (JML), a general purpose behavioral specification and assertional language for Java, can be validated using a customized model checker built on top of the Bogor model checking framework. Our experience illustrates the need for customized state-space representations and reduction strategies in model checking frameworks in order to effectively check the kind of strong behavioral specifications that can be written in JML. We discuss the advantages and tradeoffs of model checking relative to other specification validation techniques and present data that suggest that the cost of model checking strong specifications is practical for several real programs.