Title
Specifying and verifying the correctness of dynamic software updates
Abstract
Dynamic software updating (DSU) systems allow running programs to be patched on-the-fly to add features or fix bugs. While dynamic updates can be tricky to write, techniques for establishing their correctness have received little attention. In this paper, we present the first methodology for automatically verifying the correctness of dynamic updates. Programmers express the desired properties of an updated execution using client-oriented specifications (CO-specs), which can describe a wide range of client-visible behaviors. We verify CO-specs automatically by using off-the-shelf tools to analyze a merged program, which is a combination of the old and new versions of a program. We formalize the merging transformation and prove it correct. We have implemented a program merger for C, and applied it to updates for the Redis key-value store and several synthetic programs. Using Thor, a verification tool, we could verify many of the synthetic programs; using Otter, a symbolic executor, we could analyze every program, often in less than a minute. Both tools were able to detect faulty patches and incurred only a factor-of-four slowdown, on average, compared to single version programs.
Year
DOI
Venue
2012
10.1007/978-3-642-27705-4_22
VSTTE
Keywords
Field
DocType
program merger,merged program,single version program,factor-of-four slowdown,client-visible behavior,dynamic software updates,client-oriented specification,dynamic updates,redis key-value store,synthetic program,dynamic software,technical report,verification
Executor,Programming language,Computer science,Dynamic software updating,Correctness,Client server systems,Software,Merge (version control),Type safety,Technical report
Conference
Volume
ISSN
Citations 
7152
0302-9743
33
PageRank 
References 
Authors
1.08
21
5
Name
Order
Citations
PageRank
Christopher M. Hayden11075.22
Stephen Magill2833.54
Michael Hicks361232.24
J. Nathan Foster42074110.56
Jeffrey S. Foster52035174.45