JML's rich, inherited specifications for behavioral subtypes

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4260 LNCS, Issue , 2006, Pages 2-34

  Leavens, Gary T ^a  

^a Iowa State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER HARDWARE DESCRIPTION LANGUAGES; CONSTRAINT THEORY; FEATURE EXTRACTION; LOGIC DESIGN; SEMANTICS;

JAVA MODELING LANGUAGE (JML); MODULAR REASONING; SPECIFICATION INHERITANCE; SUPERTYPE ABSTRACTION;

JAVA PROGRAMMING LANGUAGE;

EID: 33845270192     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11901433_2     Document Type: Article

References (82)

1. W. Ahrendt, T. Baar, B. Beckert, R. Bubel, M. Giese, R. Hähnle, W. Menzel, W. Mostowski, A. Roth, S. Schlager, and P. H. Schmitt. The KeY tool. Software and System Modeling, 4: 32-54, 2005.
2. S. Alagic and S. Kouznetsova. Behavioral compatibility of self-typed theories. In B. Magnusson, editor, ECOOP 2002 - Object-Oriented Programming, 16th European Conference, Máalaga, Spain, Proceedings, volume 2374 of Lecture Notes in Computer Science, pages 585-608, Berlin, June 2002. Springer-Verlag.
3. P. America. Inheritance and subtyping in a parallel object-oriented language. In J. Bezivin et al., editors, ECOOP '87, European Conference on Object-Oriented Programming, Paris, France, pages 234-242, New York, NY, June 1987. Springer-Verlag. Lecture Notes in Computer Science, volume 276.
4. P. America. Designing an object-oriented programming language with behavioural subtyping. In J. W. de Bakker, W. P. de Roever, and G. Rozenberg, editors, Foundations of Object-Oriented Languages, REX School/Workshop, Noordwijkerhout, The Netherlands, May/June 1990, volume 489 of Lecture Notes in Computer Science, pages 60-90. Springer-Verlag, New York, NY, 1991.
5. M. Barnett, R. DeLine, M. Fähndrich, K. R. M. Leino, and W. Schulte. Verification of object-oriented programs with invariants. Journal of Object Technology, 3(6):27-56, 2004. URL http://tinyurl.com/m2a8j.
6. A. Borgida, J. Mylopoulos, and R. Reiter. On the frame problem in procedure specifications. IEEE Transactions on Software Engineering, 21(10):785-798, Oct. 1995.
7. K. Bruce, L. Cardelli, G. Castagna, T. H. O. Group, G. T. Leavens, and B. Pierce. On binary methods. Theory and Practice of Object Systems, 1(3):221-242, 1995.
8. M. Büchi and W. Week. The greybox approach: When blackbox specifications hide too much. Technical Report 297, Turku Center for Computer Science, Aug. 1999. http://www.abo.fi/~mbuechi/publications/TR297.html.
9. L. Burdy, A. Requet, and J.-L. Lanet. Java applet correctness: a developer-oriented approach. In K. Araki, S. Gnesi, and D. Mandrioli, editors, FME 2003: Formal Methods, International Symposium of Formal Methods Europe, volume 2805 of Lecture Notes in Computer Science, pages 422-439. Springer, Sept. 2003.
10. L. Burdy, Y. Cheon, D. R. Cok, M. D. Ernst, J. R. Kiniry, G. T. Leavens, K. R. M. Leino, and E. Poll. An overview of JML tools and applications. International Journal on Software Tools for Technology Transfer (STTT), 7(3):212-232, June 2005.
11. N. Cataño and M. Huisman. Formal specification of Gemplus's electronic purse case study. In L. H. Eriksson and P. A. Lindsay, editors, FME 2002, volume LNCS 2391, pages 272-289. Springer-Verlag, 2002.
12. P. Chalin, J. R. Kiniry, G. T. Leavens, and E. Poll. Beyond assertions: Advanced specification and verification with JML and ESC/Java2. In Formal Methods for Components and Objects (FMCO) 2005, Revised Lectures, Lecture Notes in Computer Science. Springer-Verlag, 2006. URL http://tinyurl.com/o4nxa.
13. Y. Chen and B. H. C. Cheng. A semantic foundation for specification matching. In G. T. Leavens and M. Sitaraman, editors, Foundations of Component-Based Systems, pages 91-109. Cambridge University Press, New York, NY, 2000.
14. Y. Cheon. A runtime assertion checker for the Java Modeling Language. Technical Report 03-09, Department of Computer Science, Iowa State University, Ames, IA, Apr. 2003. URL ftp://ftp.cs.iastate.edu/pub/techreports/TR03-09/TR. pdf. The author's Ph.D. dissertation.
15. Y. Cheon and G. T. Leavens. A simple and practical approach to unit testing: The JML and JUnit way. In B. Magnusson, editor, ECOOP 2002 - Object-Oriented Programming, I6th European Conference, Máalaga, Spain, Proceedings, volume 2374 of Lecture Notes in Computer Science, pages 231-255, Berlin, June 2002. Springer-Verlag.
16. Y. Cheon and G. T. Leavens. A runtime assertion checker for the Java Modeling Language (JML). In H. R. Arabnia and Y. Mun, editors, Proceedings of the International Conference on Software Engineering Research and Practice (SERP '02), Las Vegas, Nevada, USA, June 24-27, 2002, pages 322-328. CSREA Press, June 2002. URL ftp://ftp.cs.iastate.edu/pub/techreports/TR02-05/TR.pdf.
17. Y. Cheon and G. T. Leavens. The Larch/Smalltalk interface specification language. ACM Transactions on Software Engineering and Methodology, 3(3):221-253, July 1994.
18. Y. Cheon, G. T. Leavens, M. Sitaraman, and S. Edwards. Model variables: Cleanly supporting abstraction in design by contract. Software - Practice and Experience, 35(6):583-599, May 2005.
19. W. R. Cook. Interfaces and specifications for the Smalltalk-80 collection classes. ACM SIGPLAN Notices, 27(10):1-15, Oct. 1992. OOPSLA '92 Proceedings, Andreas Paepcke (editor).
20. K. K. Dhara. Behavioral subtyping in object-oriented languages. Technical Report TR97-09, Department of Computer Science, Iowa State University, 226 Atanasoff Hall, Ames IA 50011-1040, May 1997. The author's Ph.D. dissertation.
21. K. K. Dhara and G. T. Leavens. Preventing cross-type aliasing for more practical reasoning. Technical Report 01-02a, Department of Computer Science, Iowa State University, Ames, Iowa, 50011, Nov. 2001. URL ftp://ftp.cs.iastate. edu/pub/techreports/TR01-02/TR. pdf. Available from archives.cs.iastate.edu.
22. K. K. Dhara and G. T. Leavens. Weak behavioral subtyping for types with mutable objects. In S. Brookes, M. Main, A. Melton, and M. Mislove, editors, Mathematical Foundations of Programming Semantics, Eleventh Annual Conference, volume 1 of Electronic Notes in Theoretical Computer Science. Elsevier, 1995. Available from http://www.sciencedirect.com/science/journal/15710661.
23. K. K. Dhara and G. T. Leavens. Forcing behavioral subtyping through specification inheritance. In Proceedings of the 18th International Conference on Software Engineering, Berlin, Germany, pages 258-267. IEEE Computer Society Press, Mar. 1996. A corrected version is ISU CS TR #95-20c, http://tinyurl.com/ s2krg.
24. W. Dietl and P. Müller. Universes: Lightweight ownership for JML. Journal of Object Technology (JOT), 4(8):5-32, Oct. 2005. URL http://www.jot.fm/issues/issue_2005_10/articlel.pdf.
25. E. W. Dijkstra. A Discipline of Programming. Prentice-Hall, Inc., Englewood Cliffs, N.J., 1976.
26. S. H. Edwards, W. D. Heym, T. J. Long, M. Sitaraman, and B. W. Weide. Part II: Specifying components in RESOLVE. ACM SIGSOFT Software Engineering Notes, 19(4):29-39, Oct 1994.
27. M. Ernst, J. Cockrell, W. G. Griswold, and D. Notkin. Dynamically discovering likely program invariants to support program evolution. IEEE Transactions on Software Engineering, 27(2):99-123, Feb. 2001.
28. R. B. Findler and M. Felleisen. Contract soundness for object-oriented languages. In OOPSLA '01 Conference Proceedings, Object-Oriented Programming, Systems, Languages, and Applications, October 14-18, 2001, Tampa Bay, Florida, USA, pages 1-15, Oct. 2001.
29. C. Flanagan, K. R. M. Leino, M. Lillibridge, G. Nelson, J. B. Saxe, and R. Stata. Extended static checking for Java. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation (PLDI'02), volume 37, 5 of SIGPLAN, pages 234-245, New York, June 17-19 2002. ACM Press.
30. J. V. Guttag, J. J. Horning, S. Garland, K. Jones, A. Modet, and J. Wing. Larch: Languages and Tools for Formal Specification. Springer-Verlag, New York, NY, 1993.
31. C. A. R. Hoare. An axiomatic basis for computer programming. Commun. ACM, 12(10): 576-583, Oct. 1969.
32. C. A. R. Hoare. Proof of correctness of data representations. Acta Informatica, 1(4):271-281, 1972.
33. B. Jacobs and E. Poll. Java program verification at Nijmegen: Developments and perspective. Technical Report NIII-R0318, Computing Science Institute, University of Nijmegen, 2003. URL http://www.cs.kun.nl/research/ reports/full/NIII-R0318.ps.gz.
34. B. Jacobs, J. van den Berg, M. Huisman, M. van Berkum, U. Hensel, and H. Tews. Reasoning about Java classes (preliminary report). In OOPSLA '98 Conference Proceedings, volume 33(10) of ACM SIGPLAN Notices, pages 329-340. ACM, Oct. 1998.
35. C. B. Jones. Systematic Software Development Using VDM. International Series in Computer Science. Prentice Hall, Englewood Cliffs, N.J., second edition, 1990.
36. J. R. Kiniry and D. R. Cok. ESC/Java2: Uniting ESC/Java and JML: Progress and issues in building and using ESC/Java2, including a case study involving the use of the tool to verify portions of an Internet voting tally system. In Construction and Analysis of Safe, Secure, and Interoperable Smart devices (CASSIS), volume 3362 of Lecture Notes in Computer Science, pages 108-128. Springer-Verlag, 2004.
37. W. R. LaLonde, D. A. Thomas, and J. R. Pugh. An exemplar based Smalltalk. ACM SIGPLAN Notices, 21(11):322-330, Nov. 1986.
38. OOPSLA '86 Conference Proceedings, Norman Meyrowitz (editor), September 1986, Portland, Oregon.
39. G. T. Leavens. Verifying object-oriented programs that use subtypes. Technical Report 439, Massachusetts Institute of Technology, Laboratory for Computer Science, Feb. 1989. The author's Ph.D. thesis.
40. G. T. Leavens. An overview of Larch/C++: Behavioral specifications for C++ modules. In H. Kilov and W. Harvey, editors, Specification of Behavioral Semantics in Object-Oriented Information Modeling, chapter 8, pages 121-142. Kluwer Academic Publishers, Boston, 1996. An extended version is TR #96-01d, Department of Computer Science, Iowa State University, Ames, Iowa, 50011.
41. G. T. Leavens and A. L. Baker. Enhancing the pre- and postcondition technique for more expressive specifications. In J. M. Wing, J. Woodcock, and J. Davies, editors, FM'99 - Formal Methods: World Congress on Formal Methods in the Development of Computing Systems, Toulouse, France, September 1999, Proceedings, volume 1709 of Lecture Notes in Computer Science, pages 1087-1106. Springer-Verlag, 1999. URL http://tinyurl.com/qv84o.
42. G. T. Leavens and K. K. Dhara. Concepts of behavioral subtyping and a sketch of their extension to component-based systems. In G. T. Leavens and M. Sitaraman, editors, Foundations of Component-Based Systems, chapter 6, pages 113-135. Cambridge University Press, 2000. URL http://www.cs.iastate.edu/ ~leavens/FoCBS-book/06-leavens-dhara.pdf.
43. G. T. Leavens and D. A. Naumann. Behavioral subtyping, specification inheritance, and modular reasoning. Technical Report 06-20a, Department of Computer Science, Iowa State University, Ames, Iowa, 50011, Aug. 2006. URL ftp://ftp.cs.iastate.edu/pub/techreports/TR06-20/TR.pdf.
44. G. T. Leavens and W. E. Weihl. Specification and verification of object-oriented programs using supertype abstraction. Acta Informatica, 32(8):705-778, Nov. 1995.
45. G. T. Leavens, Y. Cheon, C. Clifton, C. Ruby, and D. R. Cok. How the design of JML accommodates both runtime assertion checking and formal verification. Science of Computer Programming, 55(1-3): 185-208, Mar. 2005. URL http://dx.doi.org/10.1016/j.scico.2004.05.015.
46. G. T. Leavens, A. L. Baker, and C. Ruby. Preliminary design of JML: A behavioral interface specification language for Java. ACM SIGSOFT Software Engineering Notes, 31(3): 1-38, Mar. 2006. http://doi.acm.org/10.1145/1127878. 1127884.
47. G. T. Leavens, K. R. M. Leino, and P. Müller. Specification and verification challenges for sequential object-oriented programs. Technical Report 06-14, Department of Computer Science, Iowa State University, Ames, Iowa, May 2006. URL ftp://ftp.cs.iastate.edu/pub/techreports/TR06-14/TR.pdf.
48. G. T. Leavens, E. Poll, C. Clifton, Y. Cheon, C. Ruby, D. R. Cok, P. Müller, J. Kiniry, and P. Chalin. JML reference manual. Department of Computer Science, Iowa State University. Available from http://www.jmlspecs.org, Jan. 2006.
49. K. R. M. Leino. Toward Reliable Modular Programs. PhD thesis, California Institute of Technology, 1995. Available as Technical Report Caltech-CS-TR-95-03.
50. K. R. M. Leino. Data groups: Specifying the modification of extended state. In OOPSLA '98 Conference Proceedings, volume 33(10) of ACM SIGPLAN Notices, pages 144-153. ACM, Oct. 1998.
51. K. R. M. Leino and R. Manohar. Joining specification statements. Theoretical Comput. Sci., 216(1-2):375-394, Mar. 1999.
52. K. R. M. Leino and P. Müller. Object invariants in dynamic contexts. In M. Odersky, editor, European Conference on Object-Oriented Programming (ECOOP), volume 3086 of Lecture Notes in Computer Science, pages 491-516. Springer-Verlag, 2004.
53. K. R. M. Leino and P. Müller. A verification methodology for model fields. In P. Sestoft, editor, European Symposium on Programming (ESOP), volume 3924 of Lecture Notes in Computer Science, pages 115-130. Springer-Verlag, 2006. URL http://tinyurl.com/pzll8.
54. B. Liskov. Data abstraction and hierarchy. ACM SIGPLAN Notices, 23(5): 17-34, May 1988. Revised version of the keynote address given at OOPSLA '87.
55. B. Liskov and J. Guttag. Program Development in Java. The MIT Press, Cambridge, Mass., 2001.
56. B. Liskov and J. Wing. A behavioral notion of subtyping. ACM Trans. Prog. Lang. Syst., 16(6):1811-1841, Nov. 1994.
57. B. Liskov and J. M. Wing. Specifications and their use in defining subtypes. ACM SIGPLAN Notices, 28(10): 16-28, Oct. 1993. OOPSLA '93 Proceedings, Andreas Paepcke (editor).
58. C. Marché, C. Paulin-Mohring, and X. Urbain. The KRAKATOA tool for certification of JAVA/JAVACARD programs annotated in JML. Journal of Logic and Algebraic Programming, 58(1-2):89-106, Jan-Mar. 2004.
59. B. Meyer. Eiffel: The Language. Object-Oriented Series. Prentice Hall, New York, NY, 1992.
60. B. Meyer. Object-oriented Software Construction. Prentice Hall, New York, NY, second edition, 1997.
61. R. Mitchell and J. McKim. Design by Contract by Example. Addison-Wesley, Indianapolis, IN, 2002.
62. C. Morgan. Programming from Specifications: Second Edition. Prentice Hall International, Hempstead, UK, 1994.
63. P. Müller. Modular Specification and Verification of Object-Oriented Programs, volume 2262 of Lecture Notes in Computer Science. Springer-Verlag, 2002. URL http://tinyurl.com/jtwot.
64. P. Müller, A. Poetzsch-Heffter, and G. T. Leavens. Modular invariants for layered object structures. Sci. Comput. Programming, 62(3):253-286, Oct. 2006. URL http://dx.doi.org/10.1016/j.scico.2006.03.001.
65. D. A. Naumann. Calculating sharp adaptation rules. Inf. Process. Lett., 77:201-208, 2001.
66. D. A. Naumann and M. Barnett. Towards imperative modules: Reasoning about invariants and sharing of mutable state. Theoretical Comput. Sci., 2006. To appear.
67. J. Noble, J. Vitek, and J. Potter. Flexible alias protection. In E. Jul, editor, ECOOP '98 - Object-Oriented Programming, 12th European Conference, Brussels, Belgium, volume 1445 of Lecture Notes in Computer Science, pages 158-185. Springer-Verlag, July 1998.
68. W. F. Ogden, M. Sitaraman, B. W. Weide, and S. H. Zweben. Part I: The RESOLVE framework and discipline - a research synopsis. ACM SIGSOFT Software Engineering Notes, 19(4):23-28, Oct. 1994.
69. E. Olderog. On the notion of expressiveness and the rule of adaptation. Theoretical Comput. Sci., 24:337-347, 1983.
70. M. J. Parkinson. Local reasoning for Java. Technical Report 654, University of Cambridge Computer Laboratory, Nov. 2005. URL http://www.cl.cam. ac.uk/ TechReports/UCAM-CL-TR-654.pdf. The author's Ph.D. dissertation.
71. C. Pierik. Validation Techniques for Object-Oriented Proof Outlines. PhD thesis, Universiteit Utrecht, 2006. URL http://igitur-archive.library.uu.nl/ dissertations/2006-0502-200341/index.htm.
72. A. Poetzsch-Heffter. Specification and verification of object-oriented programs. Habilitation thesis, Technical University of Munich, January 1997. URL http://tinyurl.com/g7xgm.
73. A. Poetzsch-Heffter and P. Müller. A programming logic for sequential Java. In S. D. Swierstra, editor, European Symosium un Programming (ESOP '99), volume 1576 of Lecture Notes in Computer Science, pages 162-176. Springer-Verlag, 1999. URL http://tinyurl.com/krjle.
74. A. Poetzsch-Heffter, P. Müller, and J. Schäfer. The Jive tool, http://softech. informatik.uni-kl.de/twiki/bin/view/Homepage/Jive, Apr. 2006. Checked August 2, 2006.
75. E. Poll. A coalgebraic semantics of subtyping. In H. Reichel, editor, Coalgebraic Methods in Computer Science (CMCS), number 33 in Electronic Notes in Theoretical Computer Science. Elsevier, Amsterdam, 2000.
76. A. D. Raghavan and G. T. Leavens. Desugaring JML method specifications. Technical Report 00-03e, Iowa State University, Department of Computer Science, May 2005. URL ftp://ftp.cs.iastate.edu/pub/techreports/TR00-03/TR. pdf.
77. Robby, M. B. Dwyer, and J. Hatcliff. Bogor: An extensible and highly-modular model checking framework. In Proceedings of the 9th European Software Engineering Conference held jointly with the 11th ACM SIGSOFT Symposium on the Foundations of Software Engineering, volume 28 number 5 of SIGSOFT Softw. Eng. Notes, pages 267-276. ACM, 2003.
78. Robby, E. Rodríguez, M. Dwyer, and J. Hatcliff. Checking strong specifications using an extensible software model checking framework. In Proceedings of the 10th International Conference on Tools and Algorithms for the Construction and Analysis of Systems, volume 2988 of Lecture Notes in Computer Science, pages 404-420. Springer-Verlag, 2004. ISBN 3-540-21299-X.
79. S. Stepney, R. Barden, and D. Cooper, editors. Object Orientation in Z. Workshops in Computing. Springer-Verlag, Cambridge CB2 1LQ, UK, 1992.
80. Specification in Fresco. In Stepney et al. [78], chapter 11, pages 127-135.
81. J. M. Wing. A two-tiered approach to specifying programs. Technical Report TR-299, Massachusetts Institute of Technology, Laboratory for Computer Science, 1983.
82. J. M. Wing. Writing Larch interface language specifications. ACM Trans. Prog. Lang. Syst., 9(1): 1-24, Jan. 1987.