Journal/document/root.tex
author Christian Urban <christian dot urban at kcl dot ac dot uk>
Tue, 06 May 2014 14:36:40 +0100
changeset 32 e861aff29655
parent 27 6b1141c5e24c
child 35 92f61f6a0fe7
permissions -rwxr-xr-x
made some modifications.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
20
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
     1
%\documentclass{article}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
     2
\documentclass{llncs}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
     3
%\textwidth 130mm
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
     4
%\textheight 200mm
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
     5
%\renewenvironment{abstract}{\section*{Abstract}\small}{}
27
6b1141c5e24c cleaned up
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 24
diff changeset
     6
\pagestyle{headings}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
     7
\usepackage{isabelle}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
     8
\usepackage{isabellesym}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
     9
\usepackage{amsmath}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    10
\usepackage{amssymb}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    11
\usepackage{mathpartir}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    12
\usepackage{tikz}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    13
\usepackage{pgf}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    14
\usepackage{pdfsetup}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    15
\usepackage{ot1patch}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    16
\usepackage{times}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    17
\usepackage{stmaryrd}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    18
\usepackage{url}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    19
\usepackage{color}
7
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    20
\usepackage{courier}
32
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    21
\usetikzlibrary{patterns}
7
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    22
\usepackage{listings}
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    23
\lstset{language=C,
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    24
        numbers=left,
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    25
        basicstyle=\small\ttfamily,
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    26
        numberstyle=\footnotesize, frame=tb}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    27
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    28
\urlstyle{rm}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    29
\isabellestyle{it}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    30
\renewcommand{\isastyleminor}{\it}%
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    31
\renewcommand{\isastyle}{\normalsize\it}%
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    32
7
0514be2ad83e started code explanation
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 6
diff changeset
    33
%%%\titlerunning{Proving the Priority Inheritance Protocol Correct}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    34
\def\dn{\,\stackrel{\mbox{\scriptsize def}}{=}\,}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    35
\renewcommand{\isasymequiv}{$\dn$}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    36
\renewcommand{\isasymemptyset}{$\varnothing$}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    37
\renewcommand{\isacharunderscore}{\mbox{$\_\!\_$}}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    38
\renewcommand{\isasymiota}{}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    39
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    40
\newcommand{\numbered}[1]{\refstepcounter{equation}{\rm(\arabic{equation})}\label{#1}}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    41
\definecolor{mygrey}{rgb}{.80,.80,.80}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    42
20
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    43
%\newtheorem{definition}{Definition}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    44
%\newtheorem{theorem}[definition]{Theorem}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    45
%\newtheorem{lemma}[definition]{Lemma}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    46
%\newtheorem{proof}{Proof}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    47
%\renewcommand{\theproof}{}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    48
%\newcommand{\qed}{\hfill \mbox{\raggedright \rule{0.1in}{0.1in}}}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    49
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    50
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    51
\begin{document}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    52
\renewcommand{\thefootnote}{$\star$}
32
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    53
\footnotetext[1]{This paper is a revised, corrected and expanded version of \cite{ZhangUrbanWu12}.
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    54
Compared with that paper we give an actual implementation of our formalised scheduling 
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    55
algorithm in C and the operating system PINTOS. Our implementation follows closely all results
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    56
we proved about optimisations.}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    57
\renewcommand{\thefootnote}{\arabic{footnote}}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    58
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    59
\title{Priority Inheritance Protocol Proved Correct}
20
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    60
\author{Xingyuan Zhang$^1$, Christian Urban$^2$ and Chunhan Wu$^1$}
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    61
\institute{PLA University of Science and Technology, China \and 
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 17
diff changeset
    62
           King's College London, United Kingdom}
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    63
\maketitle
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    64
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    65
\begin{abstract}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    66
In real-time systems with threads, resource locking and 
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    67
priority sched\-uling, one faces the problem of Priority
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    68
Inversion. This problem can make the behaviour of threads
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    69
unpredictable and the resulting bugs can be hard to find.  The
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    70
Priority Inheritance Protocol is one solution implemented in many
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    71
systems for solving this problem, but the correctness of this solution
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    72
has never been formally verified in a theorem prover. As already
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    73
pointed out in the literature, the original informal investigation of
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    74
the Property Inheritance Protocol presents a correctness ``proof'' for
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    75
an \emph{incorrect} algorithm. In this paper we fix the problem of
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    76
this proof by making all notions precise and implementing a variant of
13
735e36c64a71 added explanation of the code
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 11
diff changeset
    77
a solution proposed earlier. We also generalise the original informal proof to the
8
5ba3d79622da added a paragraph about RAGS
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 7
diff changeset
    78
practically relevant case where critical sections can
5ba3d79622da added a paragraph about RAGS
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 7
diff changeset
    79
overlap. Our formalisation in Isabelle/HOL not just
32
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    80
uncovers facts not mentioned in the literature, but also helps with
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    81
implementing efficiently this protocol. Earlier correct implementations
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    82
were criticised as too inefficient. Our formalisation is based on
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    83
Paulson's inductive approach to verifying protocols; our implementation
32
e861aff29655 made some modifications.
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 27
diff changeset
    84
builds on top of the small PINTOS operating system used for teaching.\medskip
6
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    85
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    86
%{\bf Keywords:} Priority Inheritance Protocol, formal correctness proof, 
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    87
%real-time systems, Isabelle/HOL
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    88
\end{abstract}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    89
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    90
\input{session}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    91
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    92
%\bibliographystyle{plain}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    93
%\bibliography{root}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    94
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    95
\end{document}
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    96
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    97
%%% Local Variables:
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    98
%%% mode: latex
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
    99
%%% TeX-master: t
7f2493296c39 updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff changeset
   100
%%% End: