Finding All Potential Run-Time Errors and Data Races in Automotive Software 2017-01-0054
Safety-critical embedded software has to satisfy stringent quality requirements. All contemporary safety standards require evidence that no data races and no critical run-time errors occur, such as invalid pointer accesses, buffer overflows, or arithmetic overflows. Such errors can cause software crashes, invalidate separation mechanisms in mixed-criticality software, and are a frequent cause of errors in concurrent and multi-core applications. The static analyzer Astrée has been extended to soundly and automatically analyze concurrent software. This novel extension employs a scalable abstraction which covers all possible thread interleavings, and reports all potential run-time errors, data races, deadlocks, and lock/unlock problems. When the analyzer does not report any alarm, the program is proven free from those classes of errors. Dedicated support for ARINC 653 and OSEK/AUTOSAR enables a fully automatic OS-aware analysis. In this article we give an overview of the key concepts of the concurrency analysis and report on experimental results obtained on concurrent automotive software. The experiments confirm that the novel analysis can be successfully applied to real automotive software projects.
Citation: Kaestner, D., Miné, A., Schmidt, A., Hille, H. et al., "Finding All Potential Run-Time Errors and Data Races in Automotive Software," SAE Technical Paper 2017-01-0054, 2017, https://doi.org/10.4271/2017-01-0054. Download Citation
Author(s):
Daniel Kaestner, Antoine Miné, André Schmidt, Heinz Hille, Laurent Mauborgne, Stephan Wilhelm, Xavier Rival, Jérôme Feret, Patrick Cousot, Christian Ferdinand
Affiliated:
Absint Angewandte Informatik GmbH, University Pierre and Marie Curie, Daimler AG, INRIA/ENS, New York University
Pages: 9
Event:
WCX™ 17: SAE World Congress Experience
ISSN:
0148-7191
e-ISSN:
2688-3627
Related Topics:
Embedded software
Computer software and hardware
Safety critical systems
Technical review
SAE MOBILUS
Subscribers can view annotate, and download all of SAE's content.
Learn More »