| author | urbanc |
| Fri, 10 Feb 2012 21:01:03 +0000 | |
| changeset 291 | 5ef9f6ebe827 |
| parent 284 | d296cb127fcb |
| child 298 | f2e0d031a395 |
| permissions | -rwxr-xr-x |
| 262 | 1 |
\documentclass[runningheads]{llncs}
|
2 |
\usepackage{isabelle}
|
|
3 |
\usepackage{isabellesym}
|
|
4 |
\usepackage{amsmath}
|
|
5 |
\usepackage{amssymb}
|
|
| 284 | 6 |
\usepackage{mathpartir}
|
|
291
5ef9f6ebe827
more on paper; modified schs functions; it is still compatible with the old definition
urbanc
parents:
284
diff
changeset
|
7 |
\usepackage{tikz}
|
|
5ef9f6ebe827
more on paper; modified schs functions; it is still compatible with the old definition
urbanc
parents:
284
diff
changeset
|
8 |
\usepackage{pgf}
|
| 262 | 9 |
%\usetikzlibrary{arrows,automata,decorations,fit,calc}
|
10 |
%\usetikzlibrary{shapes,shapes.arrows,snakes,positioning}
|
|
11 |
%\usepgflibrary{shapes.misc} % LATEX and plain TEX and pure pgf
|
|
12 |
%\usetikzlibrary{matrix}
|
|
13 |
\usepackage{pdfsetup}
|
|
14 |
\usepackage{ot1patch}
|
|
15 |
\usepackage{times}
|
|
16 |
%%\usepackage{proof}
|
|
17 |
%%\usepackage{mathabx}
|
|
18 |
\usepackage{stmaryrd}
|
|
19 |
\usepackage{url}
|
|
20 |
||
| 268 | 21 |
\titlerunning{Proving the Priority Inheritance Protocol Correct}
|
| 262 | 22 |
|
23 |
||
24 |
\urlstyle{rm}
|
|
25 |
\isabellestyle{it}
|
|
26 |
\renewcommand{\isastyleminor}{\it}%
|
|
27 |
\renewcommand{\isastyle}{\normalsize\it}%
|
|
28 |
||
29 |
||
30 |
\def\dn{\,\stackrel{\mbox{\scriptsize def}}{=}\,}
|
|
31 |
\renewcommand{\isasymequiv}{$\dn$}
|
|
32 |
\renewcommand{\isasymemptyset}{$\varnothing$}
|
|
33 |
\renewcommand{\isacharunderscore}{\mbox{$\_\!\_$}}
|
|
34 |
||
35 |
\newcommand{\isasymcalL}{\ensuremath{\cal{L}}}
|
|
36 |
\newcommand{\isasymbigplus}{\ensuremath{\bigplus}}
|
|
|
291
5ef9f6ebe827
more on paper; modified schs functions; it is still compatible with the old definition
urbanc
parents:
284
diff
changeset
|
37 |
\renewcommand{\isasymiota}{}
|
| 262 | 38 |
|
39 |
\newcommand{\bigplus}{\mbox{\Large\bf$+$}}
|
|
40 |
\begin{document}
|
|
41 |
||
| 277 | 42 |
\title{Priority Inheritance Protocol Proved Correct}
|
| 262 | 43 |
\author{Xingyuan Zhang\inst{1} \and Christian Urban\inst{2} \and Chunhan Wu\inst{1}}
|
44 |
\institute{PLA University of Science and Technology, China \and
|
|
| 265 | 45 |
King's College London, United Kingdom} |
| 262 | 46 |
\maketitle |
47 |
||
48 |
\begin{abstract}
|
|
| 284 | 49 |
In real-time systems with threads, resource locking and |
50 |
priority sched\-uling, one faces the problem of Priority |
|
51 |
Inversion. This problem can make the behaviour of threads |
|
| 267 | 52 |
unpredictable and the resulting bugs can be hard to find. The |
53 |
Priority Inheritance Protocol is one solution implemented in many |
|
54 |
systems for solving this problem, but the correctness of this solution |
|
55 |
has never been formally verified in a theorem prover. As already |
|
| 268 | 56 |
pointed out in the literature, the original informal investigation of |
57 |
the Property Inheritance Protocol presents a correctness ``proof'' for |
|
| 269 | 58 |
an \emph{incorrect} algorithm. In this paper we fix the problem of
|
59 |
this proof by making all notions precise and implementing a variant of |
|
60 |
a solution proposed earlier. Our formalisation in Isabelle/HOL |
|
| 277 | 61 |
uncovers facts not mentioned in the literature, but also shows how to |
| 269 | 62 |
efficiently implement this protocol. Earlier correct implementations |
63 |
were criticised as too inefficient. Our formalisation is based on |
|
64 |
Paulson's inductive approach to verifying protocols.\medskip |
|
| 265 | 65 |
|
66 |
{\bf Keywords:} Priority Inheritance Protocol, formal connectness proof,
|
|
| 284 | 67 |
real-time systems, Isabelle/HOL |
| 262 | 68 |
\end{abstract}
|
69 |
||
70 |
\input{session}
|
|
71 |
||
72 |
\bibliographystyle{plain}
|
|
73 |
\bibliography{root}
|
|
74 |
||
75 |
\end{document}
|
|
76 |
||
77 |
%%% Local Variables: |
|
78 |
%%% mode: latex |
|
79 |
%%% TeX-master: t |
|
80 |
%%% End: |