{"doi":"10.1145/3519939.3523434","language":[{"iso":"eng"}],"year":"2022","publication":"Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation","date_published":"2022-06-09T00:00:00Z","scopus_import":"1","month":"06","main_file_link":[{"url":"https://doi.org/10.1145/3519939.3523434","open_access":"1"}],"status":"public","quality_controlled":"1","day":"09","user_id":"317138e5-6ab7-11ef-aa6d-ffef3953e345","date_created":"2024-09-05T08:29:08Z","author":[{"first_name":"Michael Joachim","full_name":"Sammler, Michael Joachim","id":"510d3901-2a03-11ee-914d-d9ae9011f0a7","last_name":"Sammler"},{"first_name":"Angus","full_name":"Hammond, Angus","last_name":"Hammond"},{"last_name":"Lepigre","first_name":"Rodolphe","full_name":"Lepigre, Rodolphe"},{"full_name":"Campbell, Brian","first_name":"Brian","last_name":"Campbell"},{"first_name":"Jean","full_name":"Pichon-Pharabod, Jean","last_name":"Pichon-Pharabod"},{"last_name":"Dreyer","first_name":"Derek","full_name":"Dreyer, Derek"},{"last_name":"Garg","first_name":"Deepak","full_name":"Garg, Deepak"},{"last_name":"Sewell","full_name":"Sewell, Peter","first_name":"Peter"}],"page":"825-840","oa":1,"conference":{"end_date":"2022-06-17","start_date":"2022-06-13","location":"San Diego, CA, United States","name":"PLDI: Conference on Programming Language Design and Implementation"},"title":"Islaris: Verification of machine code against authoritative ISA semantics","extern":"1","_id":"17502","article_processing_charge":"No","oa_version":"Published Version","date_updated":"2024-09-10T11:08:03Z","citation":{"mla":"Sammler, Michael Joachim, et al. “Islaris: Verification of Machine Code against Authoritative ISA Semantics.” <i>Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation</i>, Association for Computing Machinery, 2022, pp. 825–40, doi:<a href=\"https://doi.org/10.1145/3519939.3523434\">10.1145/3519939.3523434</a>.","apa":"Sammler, M. J., Hammond, A., Lepigre, R., Campbell, B., Pichon-Pharabod, J., Dreyer, D., … Sewell, P. (2022). Islaris: Verification of machine code against authoritative ISA semantics. In <i>Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation</i> (pp. 825–840). San Diego, CA, United States: Association for Computing Machinery. <a href=\"https://doi.org/10.1145/3519939.3523434\">https://doi.org/10.1145/3519939.3523434</a>","ama":"Sammler MJ, Hammond A, Lepigre R, et al. Islaris: Verification of machine code against authoritative ISA semantics. In: <i>Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation</i>. Association for Computing Machinery; 2022:825-840. doi:<a href=\"https://doi.org/10.1145/3519939.3523434\">10.1145/3519939.3523434</a>","chicago":"Sammler, Michael Joachim, Angus Hammond, Rodolphe Lepigre, Brian Campbell, Jean Pichon-Pharabod, Derek Dreyer, Deepak Garg, and Peter Sewell. “Islaris: Verification of Machine Code against Authoritative ISA Semantics.” In <i>Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation</i>, 825–40. Association for Computing Machinery, 2022. <a href=\"https://doi.org/10.1145/3519939.3523434\">https://doi.org/10.1145/3519939.3523434</a>.","short":"M.J. Sammler, A. Hammond, R. Lepigre, B. Campbell, J. Pichon-Pharabod, D. Dreyer, D. Garg, P. Sewell, in:, Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation, Association for Computing Machinery, 2022, pp. 825–840.","ieee":"M. J. Sammler <i>et al.</i>, “Islaris: Verification of machine code against authoritative ISA semantics,” in <i>Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation</i>, San Diego, CA, United States, 2022, pp. 825–840.","ista":"Sammler MJ, Hammond A, Lepigre R, Campbell B, Pichon-Pharabod J, Dreyer D, Garg D, Sewell P. 2022. Islaris: Verification of machine code against authoritative ISA semantics. Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation. PLDI: Conference on Programming Language Design and Implementation, 825–840."},"type":"conference","publisher":"Association for Computing Machinery","publication_status":"published","abstract":[{"text":"Recent years have seen great advances towards verifying large-scale systems code. However, these verifications are usually based on hand-written assembly or machine-code semantics for the underlying architecture that only cover a small part of the instruction set architecture (ISA). In contrast, other recent work has used Sail to establish formal models for large real-world architectures, including Armv8-A and RISC-V, that are comprehensive (complete enough to boot an operating system or hypervisor) and authoritative (automatically derived from the Arm internal model and validated against the Arm validation suite, and adopted as the official formal specification by RISC-V International, respectively). But the scale and complexity of these models makes them challenging to use as a basis for verification.\r\nIn this paper, we propose Islaris, the first system to support verification of machine code above these complete and authoritative real-world ISA specifications. Islaris uses a novel combination of SMT-solver-based symbolic execution (the Isla symbolic executor) and automated reasoning in a foundational program logic (a new separation logic we derive using Iris in Coq). We show that this approach can handle Armv8-A and RISC-V machine code exercising a wide range of systems features, including installing and calling exception vectors, code parametric on a relocation address offset (from the production pKVM hypervisor); unaligned access faults; memory-mapped IO; and compiled C code using inline assembly and function pointers.","lang":"eng"}]}