by Thomas A. Henzinger, Xiaojun Liu, Shaz Qadeer, Sriram K. Rajamani
In Proceedings of the International Conference on Computer-aided Design
http://research.compaq.com/SRC/personal/qadeer/docs/iccad99.vgi.ps
Add To MetaCart
Abstract:
We describe the formal specification and verification of the VGI parallel DSP chip [1], which contains 64 compute processors with 30K gates in each processor. Our effort coincided in time with the "informal " verification stage of the chip. By interacting with the designers, we produced an abstract but executable specification of the design which embodies the programmer's view of the system. Given the size of the design, an automatic check that even one of the 64 processors satisfies its specification is well beyond the scope of current verification tools. However, the check can be decomposed using assume-guarantee reasoning. For VGI, the implementation and specification operate at different time scales: several steps of the implementation correspond to a single step in the specification. We generalized both the assume-guarantee method and our model checker MOCHA to allow compositional verification for such applications. We used our proof rule to decompose the verification problem of the VGI chip into smaller proof obligations that were discharged automatically by MOCHA. Using our formal approach, we uncovered and fixed subtle bugs that were unknown to the designers. 1
Citations
|
1442
|
Model Checking
– Grumberg, Peled
|
|
1027
|
Distributed Algorithm
– Lynch
- 1996
|
|
477
|
Conjoining specifications
– Abadi, Lamport
- 1995
|
|
368
|
The Existence of Refinement Mappings
– Abadi, Lamport
- 1991
|
|
353
|
Computer-Aided Verification of Coordinating Processes
– Kurshan
- 1994
|
|
231
|
T.: Reactive modules
– Alur, Henzinger
- 1996
|
|
217
|
Automatic verification of pipelined microprocessor control
– Burch, Dill
- 1994
|
|
203
|
Model checking and modular verification
– Grumberg, Long
- 1994
|
|
108
|
MOCHA: Modularity in model checking
– Alur, Henzinger, et al.
- 1998
|
|
85
|
VIS: a system for verification and synthesis
– Brayton, Hachtel, et al.
- 1996
|
|
75
|
Verification of an Implementation of Tomasulo's Algorithm by Compositional Model Checking
– McMillan
- 1998
|
|
68
|
A compositional rule for hardware design refinement
– McMillan
- 1997
|
|
68
|
You assume, we guarantee: Methodology and case studies
– Henzinger, Qadeer, et al.
- 1998
|
|
53
|
A Proof Technique for Rely/Guarantee Properties
– Stark
- 1985
|
|
22
|
Verity - a formal verification program for custom CMOS circuits
– Kuehlmann, Srinivasan, et al.
- 1995
|
|
16
|
The formal design of 1M-gate ASICs
– Eiriksson
- 1998
|
|
13
|
Symbolic exploration of transition hierarchies
– Alur, Henzinger, et al.
- 1998
|
|
7
|
Assume-guarantee refinement between different time scales
– Henzinger, Qadeer, et al.
- 1999
|
|
4
|
A parallel DSP with memory and I/O processors
– Srini, Thendean, et al.
- 1998
|
|
4
|
An architecture for web-based image processing
– Srini, Rabaey
- 1997
|
|
4
|
Automatic clock abstraction from sequential circuits
– Jain, Bryant, et al.
- 1995
|
|
4
|
Composing specifications. ACM Transactions on Programming Languages and Systems
– Abadi, Lamport
- 1993
|
|
1
|
riksson, "The formal design of 1M-gate ASICs
– E
- 1998
|
|
1
|
The formal design of 1M-gate asics
– iksson
- 1998
|
|
1
|
Assume guarantee refinement between different time scales
– Henzinger, Qadeer, et al.
|