~/talk

Proving the Correctness of GNAT Light Runtime Library

Talkat FOSDEM 2022 · on Sunday, 2022-02-06· at 16:25· D.ada· [embedded-and-hardware]

Covers the use of SPARK (a formally analyzable Ada subset) to prove correctness properties of GNAT's light runtime library — the small Ada runtime used for embedded and certified systems (bare-metal or with an OS). Describes applying proof to about 30 of the ~180 runtime units (I/O, numerics, text, memory), what was proven (absence of runtime errors and conformance to functional specs), and bugs found/fixed during that effort.

AI-written summary · about

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.