VeriFast is a prototype verification tool for single-threaded and multithreaded C and Java
programs. In this paper, we first describe the basic symbolic execution approach in some …

We present an overview of Clousot, our current tool to statically check CodeContracts.
CodeContracts enable a compiler and language-independent specification of Contracts …

Several recent projects have shown the feasibility of verifying low-level systems software.
Verifications based on automated theorem-proving have omitted reasoning about first-class …

Auto-active verifiers provide a level of automation intermediate between fully automatic and
interactive: users supply code with annotations as input while benefiting from a high level of …

Compared to coarse-grained external synchronization of operations on data structures
shared between concurrent threads, fine-grained, internal synchronization can offer stronger …

Matching logic is a logic for specifying and reasoning about structure by means of patterns
and pattern matching. This paper makes two contributions. First, it proposes a sound and …

An important, challenging problem in the verification of imperative programs with shared,
mutable state is the frame problem in the presence of data abstraction. That is, one must be …

Security is an important quality aspect of modern open software systems. However, it is
challenging to keep such systems secure because of evolution. Security evolution can only …

Correctness-by-Construction (CbC) is an approach to incrementally create formally correct
programs guided by pre-and postcondition specifications. A program is created using …

Verifying soundness of symbolic execution-based program verifiers is a significant
challenge. This is especially true if the resulting tool needs to be usable outside of the proof …