<< Chapter < Page Chapter >> Page >

So far, we've seen some of the built-in checks performed by SPIN: assertions, deadlock, non-progress, and one notion of fairness.But what about other properties we'd like to check for? We might be interested in properties which the implementors ofour particular tool weren't interested in, or hadn't thought of. Fortunately, SPIN does includea general property-checking mechanism: If we can state our property in a particularformal temporal logic , then SPIN will allow us to check the property.

First, we'll introduce the syntax and semantics of one particular temporal logic, LTL . Then , we'll return we'll return to SPIN and howit uses temporal logic for verification.

First, we reflect that some propertiessafety propertiescan be phrased in terms of ``some particular state is unreachable''.For example, a state where two processes are sending information to the printer simultaneously never occurs.Failed assertions can be viewed as a transition to a fail-state, and we require that this state is unreachable.Deadlock can be viewed as a state with no legal outgoing transition, and not all processes sitting in an end-state.

Similarly we reflect that other propertiesliveness propertiesare about entire traces, not just some state in a trace. For instance, non-progress cycles is a cycle which does not containany states labeled as progress states.

We want a richer language to have a way of talking about traces, but that is precise and not subject to English's vagaries.We'll work towards using logica temporal logic specifically designed to beconducive to expressing concepts which arise in concurrent programming. But before we can even do that, we need a clear model ofconcurrent programs, and more formal definitions of some ideas we've already seen.

Concurrent programs as state space automata

The notions we've seen of states , traces , and state spaces aren't specific to Promela, but are useful in any formalization of concurrent systems.In fact, we are ready to give one precise definition of a ``concurrent system'' in terms states and traces.It is similar to many conventional automata definitions , but includes a way to relate the current state to propositions , which we can later construct formulas out of.

State Space Automaton
A State Space Automaton A is a tuple S s 0 T Prop P where:
  • S is a set of states. As before , a state is an assignment to all program variables (both local an global),including the program counter (line number) for each process.
  • s 0 S is the initial state or start state .
  • T S S is the transition relation . Equivalently, this is the edge relation of the state space .
  • Prop , a set of propositions.
  • P : S 2 Prop is a mapping which, given a state, indicates all the properties that are true in that state.

It is the set Prop which will allow us to talk about our program variables in our logic formulas.The elements of Prop are simple propositions involving program variables. For example,

  • philosopher_2_has_fork
  • ( ctr 3 )
  • (in[].size() == max_buffer_size) (that is, the buffer in[] is full)
Each of these might be true in some states and false in other states; the function P gives a truth assignment to the propositions(a different truth assignment for each state).

Questions & Answers

what is defense mechanism
Chinaza Reply
what is defense mechanisms
Chinaza
I'm interested in biological psychology and cognitive psychology
Tanya Reply
what does preconceived mean
sammie Reply
physiological Psychology
Nwosu Reply
How can I develope my cognitive domain
Amanyire Reply
why is communication effective
Dakolo Reply
Communication is effective because it allows individuals to share ideas, thoughts, and information with others.
effective communication can lead to improved outcomes in various settings, including personal relationships, business environments, and educational settings. By communicating effectively, individuals can negotiate effectively, solve problems collaboratively, and work towards common goals.
it starts up serve and return practice/assessments.it helps find voice talking therapy also assessments through relaxed conversation.
miss
Every time someone flushes a toilet in the apartment building, the person begins to jumb back automatically after hearing the flush, before the water temperature changes. Identify the types of learning, if it is classical conditioning identify the NS, UCS, CS and CR. If it is operant conditioning, identify the type of consequence positive reinforcement, negative reinforcement or punishment
Wekolamo Reply
please i need answer
Wekolamo
because it helps many people around the world to understand how to interact with other people and understand them well, for example at work (job).
Manix Reply
Agreed 👍 There are many parts of our brains and behaviors, we really need to get to know. Blessings for everyone and happy Sunday!
ARC
A child is a member of community not society elucidate ?
JESSY Reply
Isn't practices worldwide, be it psychology, be it science. isn't much just a false belief of control over something the mind cannot truly comprehend?
Simon Reply
compare and contrast skinner's perspective on personality development on freud
namakula Reply
Skinner skipped the whole unconscious phenomenon and rather emphasized on classical conditioning
war
explain how nature and nurture affect the development and later the productivity of an individual.
Amesalu Reply
nature is an hereditary factor while nurture is an environmental factor which constitute an individual personality. so if an individual's parent has a deviant behavior and was also brought up in an deviant environment, observation of the behavior and the inborn trait we make the individual deviant.
Samuel
I am taking this course because I am hoping that I could somehow learn more about my chosen field of interest and due to the fact that being a PsyD really ignites my passion as an individual the more I hope to learn about developing and literally explore the complexity of my critical thinking skills
Zyryn Reply
good👍
Jonathan
and having a good philosophy of the world is like a sandwich and a peanut butter 👍
Jonathan
generally amnesi how long yrs memory loss
Kelu Reply
interpersonal relationships
Abdulfatai Reply
Got questions? Join the online conversation and get instant answers!
Jobilize.com Reply

Get Jobilize Job Search Mobile App in your pocket Now!

Get it on Google Play Download on the App Store Now




Source:  OpenStax, Model checking concurrent programs. OpenStax CNX. Oct 27, 2005 Download for free at http://cnx.org/content/col10294/1.3
Google Play and the Google Play logo are trademarks of Google Inc.

Notification Switch

Would you like to follow the 'Model checking concurrent programs' conversation and receive update notifications?

Ask