Conference paper Open Access

Certifying Graph-Manipulating C Programs via Localizations within Data Structures

Wang, Shengyi; Cao, Qinxiang; Mohan, Anshuman; Hobor, Aquinas

DataCite XML Export

<?xml version='1.0' encoding='utf-8'?>
<resource xmlns:xsi="" xmlns="" xsi:schemaLocation="">
  <identifier identifierType="DOI">10.5281/zenodo.3368779</identifier>
      <creatorName>Wang, Shengyi</creatorName>
      <affiliation>National University of Singapore</affiliation>
      <creatorName>Cao, Qinxiang</creatorName>
      <affiliation>Shanghai Jiao Tong University</affiliation>
      <creatorName>Mohan, Anshuman</creatorName>
      <affiliation>National University of Singapore</affiliation>
      <creatorName>Hobor, Aquinas</creatorName>
      <affiliation>National University of Singapore</affiliation>
    <title>Certifying Graph-Manipulating C Programs 
via Localizations within Data Structures</title>
    <subject>Separation logic</subject>
    <subject>Graph-manipulating programs</subject>
    <date dateType="Issued">2019-08-15</date>
  <resourceType resourceTypeGeneral="Text">Conference paper</resourceType>
    <alternateIdentifier alternateIdentifierType="url"></alternateIdentifier>
    <relatedIdentifier relatedIdentifierType="DOI" relationType="IsVersionOf">10.5281/zenodo.3368778</relatedIdentifier>
    <rights rightsURI="info:eu-repo/semantics/openAccess">Open Access</rights>
    <description descriptionType="Abstract">&lt;p&gt;We develop powerful and general techniques to mechanically verify realistic programs that manipulate heap- represented graphs. These graphs can exhibit well-known organization principles, such as being a directed acyclic graph or a disjoint-forest; alternatively, these graphs can be totally unstructured. The common thread for such structures is that they exhibit deep intrinsic sharing and can be expressed using the language of graph theory. We construct a modular and general setup for reasoning about abstract mathematical graphs and use separation logic to define how such abstract graphs are represented concretely in the heap. We develop a Localize rule that enables modular reasoning about such programs, and show how this rule can support existential quantifiers in postconditions and smoothly handle modified program variables. We demonstrate the generality and power of our techniques by integrating them into the Verified Software Toolchain and certifying the correctness of six graph-manipulating programs written in CompCert C, including a 400-line generational garbage collector for the CertiCoq project. While doing so, we identify two places where the semantics of C is too weak to define generational garbage collectors of the sort used in the OCaml runtime. Our proofs are entirely machine-checked in Coq.&lt;/p&gt;</description>
    <description descriptionType="Other">As submitted to the OOPSLA '19 Artifact Evaluation Committee</description>
All versions This version
Views 131131
Downloads 9090
Data volume 10.7 MB10.7 MB
Unique views 116116
Unique downloads 7070


Cite as