~/talk

Linear types for large-scale systems verification

Talkat OOPSLA 2022 · 2022-12-05..12-10
name:JIALIN LI
links:none on file
name:Yi Zhou
links:none on file
links:none on file
links:none on file
links:none on file
slides:none on file

Integrates linear Dafny with Dafny's SMT backend to push memory reasoning into the type system while keeping SMT for heap invariants; implements borrowing/inout updates, linear regions and ref_cell-backed heaps to hide modifies clauses. Converts a 24K-line verified storage system (very better KV) so 91% of code uses linear types and 9% uses SMT heap reasoning, cutting proof lines by 28% and total verification time by 30%.

AI-written summary · about

  1. 0:00Start
  2. 1:33Challenges in SMT memory reasoning with dynamic frames (Dafny)
  3. 4:59Dynamic frames address potential aliasing
  4. 7:07Linear Dafny
  5. 7:55Variable usages
  6. 13:12Non-linear data inside linear data
  7. 17:56Linear data inside non-linear data
  8. 18:53Formalization and soundness proof
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.