Title
The ramifications of sharing in data structures
Abstract
Programs manipulating mutable data structures with intrinsic sharing present a challenge for modular verification. Deep aliasing inside data structures dramatically complicates reasoning in isolation over parts of these objects because changes to one part of the structure (say, the left child of a dag node) can affect other parts (the right child or some of its descendants) that may point into it. The result is that finding intuitive and compositional proofs of correctness is usually a struggle. We propose a compositional proof system that enables local reasoning in the presence of sharing. While the AI "frame problem" elegantly captures the reasoning required to verify programs without sharing, we contend that natural reasoning about programs with sharing instead requires an answer to a different and more challenging AI problem, the "ramification problem": reasoning about the indirect consequences of actions. Accordingly, we present a RAMIFY proof rule that attacks the ramification problem head-on and show how to reason with it. Our framework is valid in any separation logic and permits sound compositional and local reasoning in the context of both specified and unspecified sharing. We verify the correctness of a number of examples, including programs that manipulate dags, graphs, and overlaid data structures in nontrivial ways.
Year
DOI
Venue
2013
10.1145/2429069.2429131
POPL
Keywords
Field
DocType
data structure,modularity,theory,separation logic,aliasing
Data structure,Separation logic,Programming language,Ramification problem,Computer science,Correctness,Theoretical computer science,Mathematical proof,Modular design,Modularity,Frame problem
Conference
Volume
Issue
ISSN
48
1
0362-1340
Citations 
PageRank 
References 
21
0.75
25
Authors
2
Name
Order
Citations
PageRank
Aquinas Hobor124317.42
Jules Villard2664.62