Formal Verification of Fault-Tolerant Software Design: The CSP ...

3 downloads 18571 Views 312KB Size Report
We call this the fault prevention approach to software reliability. ..... The code implementation may involve interrupt handling routines that need to be considered.
              

         

           

  

                         

                           

     

                          

              



               

                                       Æ                                                                                                 !  "#     $                        %%&''            ()*+                   ,         )

       (-+ .            /          &

                /               0 12          &  /                       3                          

                    4 !  &          !       Æ        !             !          5 6  7 89:1"9:               &  0  (*+              ;       :7 *+!                    "          !         =<                 =<       3            3            =<          ?         =<          &       @     &                               '                                   A            >

           &      *  -       &         &        B             =<          



  

:    =
 

.    

    5   6                  

       3               !  

!



     :                                         3     ;    =<       .  &             ()%! >>! >*+ 3   =<     

       C &    D 

DDE

  







 



   



¾







D



 

     







 ((  ++

 F         !    F!  0F2!       3          !             3    



        0     2 :    

               !                   G       !   /    



    

    .     ¾                       3                   ?

     !    /           : ! 

               !      !      ;          3   



D



            

   

 :  /  !      !       .      0E2                 !         /  D  H

  

 

E

D

 0 2 E   D  

         

E



 0 2

  



 

3 

              3             

 I



        



 

3    

         !         3      



           !              3              3                      



    

                        !

D  

   !





E 





  









             :  /              





         



        3                 3  







  







           :



  

       



!





    

                         !    

      !  ((  ++                  .  

    5 D  6             

@

 

E  E 



D    0 2 

   %     I0  2    H D    I         D   0 2 E       I    H D    I    E   H D    I×ÕÖØ0 2  

 H 





 







9D

 

!     "     



 )D . 0/ 2      



      

.  &          0$
)?



# 





 

# 



¼ 

# 

  

# 

 



 ¼

#        

 $ %      &  

¾

  

¼

£



   



  





%  



(    &     $ %    &  

              

¾ 

       

 $

 





  

'



 

 

  &     $

¾

 

   

%    &     

 





# 



)





¾



 

  $! %          $!

  &

                  



 !  

 AD . &           





 

 





  



   







  

  

   







 D  

   

 *D 4               )@



%  



   &  ! 

%   

   

                 

) #   $ %      %        &     $ %                 &                  

    )  #   ¾        &      $ %                    &             

 

¾ 





¾



K              -+ 

 

# 

 





 

  

# 

# 



¼



¾

  





  

# 

 



  

#      

# 

    

¾

       ¼

 

¾







  

# 

¼



'



% 



                                  

 

   



¾

   



   



¾  

% 



 

    



 

 

  

  



   



 



¾  

      

    

 ¼



   

¼

  



#         

      

¼

£

     

 -D . &               

#

$   !  %  &

                                     (?+            O                                    )%  ()A+ 3     $K       &       5   

)%

  5

     '     %   6

  %     % &

(>@+ 3   ! $K>!

        (          

    #     % )  $*  $ %    6

('+ 3   $K> 

      !       )%      (>@+ 3     0   :MMM ?>&       ; &    &  2!   !   ,              ! )'

;          $K>         0P! >%%@2       $K>             A  ! $K>           &

  

      ()@+

        !    /         " 0  '2 /  !         !                         3       /  

                " D

"









E  

00 

" 2

 0  

" 22

     !   !    3   $K>

           !  

&       $   !

 

           3              &   5 6         !            

 -   &                             !                 0×ÕÖØ½  ×ÕÖØ¾2              :   !   0 &&2          0# 2           =            A!             &         $K> 8                  !    =< & !      $K>       &       &          

+  

            

 =+                    $ 

&  

 .  

         !     !  0  2   &   

          &                    =<         !                  D     

     !       !       /     !

  E   :  !   $K>!        "  "  /  )A

 B         $K>              $K>! &  !       =
   (>?+

 BD .        $K>      9D



)

!          "      "     

  ½



 ¾ 

>

  



 )%D     &   

'

  "      !  " 

 )%       &      $<  :     & !    !     3                       @ M              3  &      



                )*







                   !   

              &   !             0      2   &   K.   !                         G                       0





 2

                

  

3        /            0$KC2    ()?+ $    !  $KC         J                  :  !                                                      0   2       3              3         !              D 

"

E 

" 

E 

"   H





 

D  

  

" ((  ++

I

" 

 5((  ++6       "     '     &       3      5

" 

 

 6     

 

                                                           !       3      $KC           =<   3       0  E ) >2         D 

E  " (( 

      ++

0)2

                       " 0  '2       0  2      0  !

  2

       

   3     &    

 D )-



      





                        

E 





H D  

 I





D  

¾







 I

 H

¾



¾









¾





¾

D  

D  

H D   

 I







H D  

 I

 







 



¾



¾  H

 H







                          



3            D 

"



E

 !

E 





 







 

0>2





 



   ) >



 !

              



3      5

 

6      

!

  &                          



   0      2 3 & 

               0  )%2            0562   =< !                           3                          =<  D         &      !  "

" !     

  

       0 2                   !   " "     @!    0>2  0)2   !   D "



 E  

" (( 





  

  ++



 



" ((        ++



 



   ) >

3         &                  >      !   &      !       $K>             

)B

(

 

!                                      0    2           &               !    !          !          

                 3    

             &           5 6  3   !  !            D                      !                             =*+               0     2 =%

                         

)

   !"    "" "  * +  " " "

=<                  &  (>%+           (B+              .                    =<     (?>+ 3      (?>+                                   .         =<  $K>                     O         (>'+   . 3:. ,  ()'+ 3 $K>                     =<      !         A G   !    &   ()@+ 0        A2                                3                        !  =3918 (?+               &      !    

    -                 =A+      $K>         5 6       !          1  

!    $K>     !     =<    &       0)

!%   "       :  C               3                   Q  K 4                          3           9  "  ! 4 #

&    " ()+ 3 C  M C   :     :G      9G3G , &   - %   . -  ! )@0)2D>'R'B! )B-- (>+  $ C  .  K  .       ='! P1   >%%> (B+ P  4  =.K 4 .                      , ! >D)R)>! )B-* ()%+ = . K 4

,  #     

())+ Q 4O  3    + P %%)

>>

    & ,    

()B+ P G  $             &      :    $  , 2442!   >>-%  0-,   ! >%%> (>%+ P 2D>>%R>?>! P )B*'

 , &

.///    $%

(>>+ .  K 

     $ ,  

?+ .  K 

     $ ,  

@+ .  K    4    =    &=   =<  4  =  )% $   '+ %%)

     $

(>A+ .    3             ! >-D@?RB%! )BB* (>*+ .   

,     &  1  ,    

(>-+  #    /  2D)**R)-'!  1.  )B*- (>B+ P 8 

  $ ,  

P  ! >%%%

6  /  

    #            

(?%+ @-!  >%%?

>?

, * 

       @

Suggest Documents