B. A. Carr'e, T. J. Jennings, F. J. Maclennan, P. F. Farrow and J. R. Garnsworthy, SPARK -- The SPADE Ada Kernel. HMSO London (1988).  Home/Search   Document Not in Database   Summary   Related Articles   Check

....to large scale industrial problems, where safety is a major concern. More precisely, we have been concerned with machine assisted refinement of formal specifications written in the Z language [1] to implementations in Ada [2] In particular, we have concentrated on the subset of Ada known as SPARK [3]. The tools currently in existence are certainly not production quality and are not yet usable on large projects. We do however hope that they will be applied to reasonably realistic case studies while improvements continue to be made. They clearly demonstrate the underlying technology of AEeta ....

B. A. Carr'e, T. J. Jennings, F. J. Maclennan, P. F. Farrow and J. R. Garnsworthy, SPARK -- The SPADE Ada Kernel. HMSO London (1988).

....to large scale industrial problems, where safety is a major concern. More precisely, we have been concerned with machine assisted refinement of formal specifications written in the Z language to implementations in Ada. In particular, we have concentrated on the subset of Ada known as SPARK [4]. The tools currently in existence are not yet industrial quality so are not yet usable on large projects. However, they are sufficiently mature that they can be applied to reasonably realistic case studies while improvements continue to be made. Application to case studies should not only act as ....

B. A. Carr'e, T. J. Jennings, F. J. Maclennan, P. F. Farrow and J. R. Garnsworthy, SPARK -- The SPADE Ada Kernel. HMSO London (1988).

....allocation as long as compile time known values are involved. It can even solve certain simple problems of concurrent programming and synchronization of concurrent processes at compile time. 8. In (Chapman et al. 1996) WCET analysis and program proof are combined for the SPARK Ada subset (cf. (Carr e et al. 1992)) It is based on a slight generalization of (Tarjan, 1981b) The method allows WCET analysis depending on the program s input data, but not in such a general manner as described in this paper. In dfwcetklu.tex; 14 04 2000; 9:10; p.3 4 Johann Blieberger particular, the modes introduced in ....

Carr'e, B., T. Jennings, F. Maclennan, P. Farrow, and J. Garnsworthy: 1992, `SPARK: The SPADE Ada Kernel'. Program Validation Ltd., 3.1 edition.

....of C code are transferred to C . In addition, compiler vendors are at a disadvantage compared to Ada in not having an internationally agreed and comprehensive validation suite for the language. The insecurities may be avoided by suitably chosen subsets of Ada, such as that provided by SPARK [Carr 88] The same subset could be used for Ada 83 and Ada 95, and may be exploited by the compiler through the pragma Restrictions described below. Note that the use of such subsets is not in conflict with Ada s traditional no subsets, no supersets policy, since for compiler validation purposes there ....

....which is based on language defined parameters to the Restrictions pragma. H 14 Safety and Security Ada 95 Rationale: Annexes The set of restrictions identified in the Safety and Security Annex is a representative set, but a compiler implementation may extend it. For example, in the SPARK system [Carr 88] the requirement is to use only those language features to which formal proof tools can be applied. Hence features such as generics are excluded, even though the implementation issues are straightforward. Other analysis tools [Rex 88] impose similar restrictions on the source language. A vendor ....

B. A. Carré and T. J. Jennings. SPARK --- The SPADE Ada Kernel. Technical Report, University of Southampton, March, 1988.

No context found.

Carré, B.A., et al., SPARK: the SPADE Ada Kernel (edition 3.1). 1992, Program Validation Ltd.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC