A trusted mechanised JavaSript specification

Conference Record of the Annual ACM Symposium on Principles of Programming Languages

Volumn , Issue , 2014, Pages 87-100

  Bodin, Martin ^a   Charguéraud, Arthur ^b   Filaretti, Daniele ^c   Gardner, Philippa ^c   Maffeis, Sergio ^c   Naudžiuniene, Daiva ^c   Schmitt, Alan ^b   Smith, Gareth ^c  

^a UNIVERSITÉ DE LYON   (France)

^b INRIA   (France)

^c IMPERIAL COLLEGE LONDON   (United Kingdom)

Author keywords

coq; javascript; mechanised semantics

Indexed keywords

CLIENT-SIDE APPLICATION; COQ; COQ PROOF ASSISTANT; FORMALISATION; JAVASCRIPT; LANGUAGE PROPERTY; MODERN TECHNIQUES; WEB LANGUAGES;

HIGH LEVEL LANGUAGES; SEMANTICS; SPECIFICATIONS; THEOREM PROVING;

JAVA PROGRAMMING LANGUAGE;

EID: 84893478271     PISSN: 07308566     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2535838.2535876     Document Type: Conference Paper

References (61)

1. J. Alglave, L. Maranget, S. Sarkar, and P. Sewell. Fences in weak memory models. In Proc. CAV: 22nd International Conference on Computer Aided Verification, LNCS 6174, pages 258-272, 2010.
2. C. Anderson, P. Giannini, and S. Drossopoulou. Towards type inference for JavaScript. In ECOOP'05, pages 428-452. Springer, 2005.
3. A. W. Appel. Verified software toolchain - (invited talk). In ESOP, pages 1-17, 2011.
4. M. Batty, S. Owens, S. Sarkar, P. Sewell, and T. Weber. Mathematizing C++ concurrency. In POPL, pages 55-66, 2011.
5. M. Batty, M. Dodds, and A. Gotsman. Library abstraction for C/C++ concurrency. In POPL, 2013.
6. K. Bhargavan, A. Delignat-Lavaud, and S. Maffeis. Language-based defenses against untrusted browser origins. In USENIX Security Symposium, 2013.
7. S. Bishop, M. Fairbairn, M. Norrish, P. Sewell, M. Smith, and K. Wansbrough. Engineering with logic: HOL specification and symbolic-evaluation testing for TCP implementations. In POPL, pages 55-66, 2006.
8. S. Blazy and X. Leroy. Mechanized semantics for the Clight subset of the C language. J. Autom. Reasoning, 43(3):263-288, 2009.
9. E. Börger, N. G. Fruja, V. Gervasi, and R. F. Stärk. A high-level modular definition of the semantics of C#. Theor. Comput. Sci., 336 (2-3):235-284, 2005.
10. C11. ISO/IEC 9899:2011. http://www.iso.org/iso/iso-catalogue/catalogue- tc/catalogue-detail.htm?csnumber=57853, 2011.
11. A. Charguéraud. Pretty-big-step semantics. In ESOP, pages 41-60, 2013.
12. R. Chugh and R. Jhala. Dependent types for JavaScript. CoRR, abs/1112.4106, 2011.
13. R. Chugh, J. A. Meister, R. Jhala, and S. Lerner. Staged information flow for JavaScript. In PLDI'09, pages 50-62. ACM, 2009.
14. X. Clerc. Bisect. http://bisect.x9c.fr/, 2012.
15. Compcert Team. Compcert. http://compcert.inria.fr/, 2013.
16. D. Crockford. ADSafe: Making JavaScript safe for advertising. http://adsafe.org/, 2007.
17. S. Drossopoulou and S. Eisenbach. Is the Java type system sound? In FOOL4, 1997.
18. ECMA International. Test262. http://test262.ecmascript.org/, 2010.
19. C. Ellison and G. Rosu. An executable formal semantics of C with applications. In POPL, pages 533-544, 2012.
20. A. Farzan, F. Chen, J. Meseguer, and G. Rosu. Formal analysis of Java programs in JavaFAN. In CAV, pages 501-505, 2004.
21. C. Fournet, N. Swamy, J. Chen, P.-É. Dagand, P.-Y. Strub, and B. Livshits. Fully abstract compilation to JavaScript. In POPL, pages 371-384, 2013.
22. Free Software Foundation. C language testsuites: "C-torture" version 4.4.2. http://gcc.gnu.org/onlinedocs/gccint/C-Tests. html, 2010.
23. D. Fugate. Test262 bug 56. https://bugs.ecmascript.org/show-bug.cgi?id= 56, 2011.
24. P. Gardner, S. Maffeis, and G. D. Smith. Towards a program logic for JavaScript. In POPL'12, pages 31-44. ACM, 2012.
25. Google Inc. The Closure Compiler. https://developers.google.com/closure/ compiler/, 2009.
26. S. Guarnieri and V. B. Livshits. GATEKEEPER: Mostly static enforcement of security and reliability policies for JavaScript code. In USENIX Security Symposium, pages 151-168, 2009.
27. S. Guarnieri, M. Pistoia, O. Tripp, J. Dolby, S. Teilhet, and R. Berg. Saving the world wide web from vulnerable JavaScript. In ISSTA, pages 177-187, 2011.
28. A. Guha, C. Saftoiu, and S. Krishnamurthi. The essence of JavaScript. ECOOP 2010, pages 126-150, 2010.
29. Y. Gurevich. Evolving algebras. In IFIP Congress (1), pages 423-427, 1994.
30. D. Hedin and A. Sabelfeld. Information-flow security for a core of JavaScript. In CSF'12, pages 3-18. IEEE, 2012.
31. D. Herman and C. Flanagan. Status report: specifying JavaScript with ML. In ML, pages 47-52, 2007.
32. D. Jang and K. Choe. Points-to analysis for JavaScript. Proc. of SAC '09, page 1930, 2009.
33. S. H. Jensen, A. Møller, and P. Thiemann. Type analysis for JavaScript. In SAS '09. Springer, 2009.
34. D. K. Lee, K. Crary, and R. Harper. Towards a mechanized metatheory of Standard ML. In POPL, pages 173-184, 2007.
35. S. Maffeis and A. Taly. Language-based isolation of untrusted JavaScript. In CSF'09. IEEE, 2009.
36. S. Maffeis, J. Mitchell, and A. Taly. ECMA 262-3 operational semantics. http://jssec.net/semantics/, 2007.
37. S. Maffeis, J. Mitchell, and A. Taly. An operational semantics for JavaScript. In APLAS'08, pages 307-325. Springer, 2008.
38. S. Maffeis, J. Mitchell, and A. Taly. Isolating JavaScript with filters, rewriting, and wrappers. In ESORICS'09. Springer, 2009.
39. S. Maffeis, J. C. Mitchell, and A. Taly. Object capabilities and isolation of untrusted web applications. In Security and Privacy (SP), pages 125-140. IEEE, 2010.
40. G. Melquiond. Floats for Coq 2.1.0. http://flocq.gforge.inria.fr/, 2012.
41. R. Milner, M. Tofte, and D. Macqueen. The Definition of Standard ML. MIT Press, Cambridge, MA, USA, 1997. ISBN 0262631814.
42. Mozilla. Mozilla automated JavaScript tests. https://developer.mozilla. org/en-US/docs/SpiderMonkey/Running-Automated-JavaScript-Tests, 2013.
43. T. Nipkow, L. C. Paulson, and M. Wenzel. Isabelle/HOL - A Proof Assistant for Higher-Order Logic, volume 2283 of Lecture Notes in Computer Science. Springer, 2002.
44. M. Norrish. Formalising C in HOL. PhD thesis, Computer Lab., University of Cambridge, 1998.
45. D. S. P. Phung and A. Chudnov. Lightweight self protecting JavaScript. In ASIACCS 2009. ACM Press, 2009.
46. C. Park, H. Lee, and S. Ryu. An empirical study on the rewritability of the with statement in JavaScript. In FOOL, 2011.
47. C. Park, H. Lee, and S. Ryu. SAFE: Formal specification and implementation of a scalable analysis framewrok for ECMAscript. In FOOL, 2012.
48. F. Pfenning and C. Schürmann. System description: Twelf - a metalogical framework for deductive systems. In CADE, pages 202-206, 1999.
49. J. G. Politz, S. A. Eliopoulos, A. Guha, and S. Krishnamurthi. AD-safety: Type-based verification of JavaScript sandboxing. In USENIX Security Symposium, 2011.
50. J. G. Politz, M. J. Carroll, B. S. Lerner, J. Pombrio, and S. Krishnamurthi. A tested semantics for getters, setters, and eval in JavaScript. SIGPLAN Not., 48(2):1-16, Oct. 2012.
51. JS. http://blog.brownplt.org/2012/06/04/lambdajs-coq.html, 2012.
52. G. Richards, C. Hammer, B. Burg, and J. Vitek. The eval that men do - A large-scale study of the use of eval in JavaScript applications. In ECOOP'11, pages 52-78. Springer, 2011.
53. G. Roşu and T. F. Şerbǎnuţǎ. An overview of the K semantic framework. Journal of Logic and Algebraic Programming, 79(6):397-434, 2010.
54. T. Schneidereit. Convert some array extras to self-hosted js implementations. https://hg.mozilla.org/mozilla-central/rev/5593cd83590e, 2012.
55. P. Sewell, F. Z. Nardelli, S. Owens, G. Peskine, T. Ridge, S. Sarkar, and R. Strnisa. Ott: Effective tool support for the working semanticist. J. Funct. Program., 20(1):71-122, 2010.
56. D. Syme. Proving Java type soundness. In Formal Syntax and Semantics of Java, pages 83-118, 1999.
57. A. Taly, Ú. Erlingsson, J. C. Mitchell, M. S. Miller, and J. Nagra. Automated analysis of security-critical JavaScript APIs. In IEEE Symposium on Security and Privacy, pages 363-378, 2011.
58. The JSCert Team. Mozilla Bug 862771, V8 Issue 2529, ES6 Bugs 1442-1444, Test262 Bug 1445, 1450, 1600. https://bugzilla.mozilla.org/show-bug.cgi?id= 862771, http://code.google.com/p/v8/issues/detail?id=2529, https://bugs. ecmascript.org/show-bug.cgi?id={1442-1445,1450,1600}, 2013.
59. P. Thiemann. Towards a type system for analyzing JavaScript programs. In ESOP'05, pages 140-140. Springer, 2005.
60. Various developers. Bugs in ES6, Test262 and browsers. https://bugs.webkit.org/show-bug.cgi?id={38970,104309} http://code.google.com/p/ v8/issues/detail?id={705,2446} https://bugzilla.mozilla.org/show-bug.cgi?id= 819125, 2010-2012.
61. J. Ševčík, V. Vafeiadis, F. Zappa Nardelli, S. Jagannathan, and P. Sewell. Relaxed-memory concurrency and verified compilation. In Proc. POPL, 2011.