Using model checking to find serious file system errors

ACM Transactions on Computer Systems

Volumn 24, Issue 4, 2006, Pages 393-423

  Yang, Junfeng ^a   Twohey, Paul ^a   Engler, Dawson ^a   Musuvathi, Madanlal ^b  

^a STANFORD UNIVERSITY   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

Crash; File system; Journaling; Model checking; Recovery

Indexed keywords

FILE SYSTEM; JOURNALING; MODEL CHECKING;

COMPUTER SYSTEM RECOVERY; DATA STRUCTURES; ERRORS; METADATA; SECURITY OF DATA;

FILE ORGANIZATION;

EID: 33847328383     PISSN: 07342071     EISSN: 15577333     Source Type: Journal    
DOI: 10.1145/1189256.1189259     Document Type: Article

References (34)

1. ARKOUDAS, K., ZEE, K., KUNCAK, V., AND RINARD, M. 2004. On verifying a file system implementation. Tech. Rep. 946, MIT CSAIL. May.
2. BALL, T. AND RAJAMANI, S. 2001. Automatically validating temporal safety properties of interfaces. In SPIN 2001 Workshop on Model Checking of Software.
3. BOEHM, H.-J. 1996. Simple garbage-collector-safety. In Proceedings of the SIGPLAN '96 Conference on Programming Language Design and Implementation.
4. BRAT, G., HAVELUND, K., PARK, S., AND VISSER, W. 2000. Model checking programs. In IEEE International Conference on Automated Software Engineering (ASE).
5. BUSH, W., PINCUS, J., AND SIELAFF, D. 2000. A static analyzer for finding dynamic programming errors. Software: Practice and Experience 30, 7, 775-802.
6. CLARKE, E., GRUMBERG, O., AND PELED, D. 1999. Model Checking. MIT Press.
7. CORBETT, J., DWYER, M., HATCLIFF, J., LAUBACH, S., PASAREANU, C., ROBBY, AND ZHENG, H. 2000. Bandera: Extracting finite-state models from Java source code. In ICSE 2000.
8. Coverity. http://coverity.com. SWAT: the Coverity software analysis toolset.
9. DAS, M., LERNER, S., AND SEIGLE, M. 2002. Path-sensitive program verification in polynomial time. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation. Berlin, Germany.
10. DELINE, R. AND FÄHNDRICH, M. 2001. Enforcing high-level protocols in low-level software. In Proceedings of the ACM SIGPLAN 2001 Conference on Programming Language Design and Implementation.
11. DILL, D. L., DREXLER, A. J., HU, A. J., AND YANG, C. H. 1992. Protocol verification as a hardware design aid. In Proceedings of the 1991 IEEE International Conference on Computer Design on VLSI in Computer & Processors. IEEE Computer Society, 522-525.
12. ENGLER, D., CHELF, B., CHOU, A., AND HALLEM, S. 2000. Checking system rules using system-specific, programmer-written compiler extensions. In Proceedings of Operating Systems Design and Implementation (OSDI).
13. ENGLER, D. AND MUSUVATHI, M. 2004. Static analysis versus software model checking for bug finding. In Invited paper: Fifth International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI04). 191-210. ext2/ext3. http://e2fsprogs.sourceforge. net. The ext2/ext3 file system.
14. FLANAGAN, C. AND FREUND, S. N. 2000. Type-based race detection for Java. In SIGPLAN Conference on Programming Language Design and Implementation. 219-232.
15. FLANAGAN, C., LEINO, K., LILLIBRIDGE, M., NELSON, G., SAXE, J., AND STATA, R. 2002. Extended static checking for Java. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation. ACM Press, 234-245.
16. FOSTER, J., TEHAUCHI, T., AND AIKEN, A. 2002. Flow-sensitive type qualifiers. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation.
17. GANGER, G. R. AND PATT., Y. N. 1995. Soft updates: A solution to the metadata update problem in file systems. Tech. rep., University of Michigan.
18. GODEFROID, P. 1997. Model Checking for Programming Languages using VeriSoft. In Proceedings of the 24th ACM Symposium on Principles of Programming Languages.
19. HOLZMANN, G. J. 1997. The model checker SPIN. Software Engineering 23, 5, 279-295.
20. HOLZMANN, G. J. 2001. From code to models. In Proceedings of the 2nd International Conference on Applications of Concurrency to System Design, 3-10.
21. JFS. http://www-124.ibm.com/jfs. The IBM journaling file system for linux.
22. K., M. 1993. Symbolic Model Checking. Kluwer Academic Publishers.
23. LOMET, D. AND TUTTLE, M. 2003. A theory of redo recovery. In SIGMOD '03: Proceedings of the 2003 ACM SIGMOD International Conference on Management of Data. ACM Press, New York, NY, USA, 397-406.
24. LOMET, D. B. AND TUTTLE, M. R. 1995. Redo recovery after system crashes. In VLDB '95: Proceedings of the 21th International Conference on Very Large Data. Bases. Morgan Kaufmann Publishers Inc., San Francisco, CA, USA, 457-468.
25. LTP. http://ltp.sourceforge.net. The linux test project.
26. MUSUVATHI, M. AND ENGLER, D. R. 2004. Model checking large network protocol implementations. In Proceedings of the First Symposium on Networked Systems Design and Implementation.
27. MUSUVATHI, M., PARK, D. Y., CHOU, A., ENGLER, D. R., AND DILL, D. L. 2002. CMC: A pragmatic approach to model checking real code. In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation.
28. PRABHAKARAN, V., BAIRAVASUNDARAM, L. N., AGRAWAL, N., GUNAWI, H. S., ARPACI-DUSSEAU, A. C., AND ARPACI-DUSSEAU, R. H. 2005. Iron file systems. In SOSP '05: Proceedings of the Twentieth ACM Symposium on Operating Systems Principles. ACM Press, New York, NY, 206-220.
29. ReiserFS. http://www.namesys.com. The ReiserFS file system.
30. SANDBERG, R., GOLDBERG, D., KLEIMAN, S., WALSH, AND LYON, B. 1985. Design and implementation of the Sun network file system. In Proceedings of the Summer USENIX Conference (Sum). 119-130.
31. SIVATHANU, M., PRABHAKARAN, V., POPOVICI, F. I., DENEHY, T. E., ARPACI-DUSSEAU, A. C., AND ARPACI-DUSSEAU, R. H. 2003. Semantically-smart disk systems. In Second USENIX Conference on File and Storage Technologies. stress. http://weather.ou.edu/~apw/projects/stress. A file system stress testing tool.
32. WALDSPURGER, C. A. 2002. Memory resource management in VMware ESX server. In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation.
33. XFS. http://oss.sgi.com/projects/xfs. A high-performance journaling filesystem.
34. YANG, J., SAR, C., AND ENGLER, D. 2006. Explode: A lightweight, general system for finding serious errors in storage systems. In Proceedings of the Seventh Symposium on Operating Systems Design and Implementation.