Skip to Main content Skip to Navigation
Journal articles

Sthread: In-Vivo Model Checking of Multithreaded Programs

Abstract : This work strives to make formal verification of POSIX multithreaded programs easily accessible to general programmers. Sthread operates directly on multithreaded C/C++ programs, without the need for an intermediate formal model. Sthread is in-vivo in that it provides a drop-in replacement for the pthread library, and operates directly on the compiled target executable and application libraries. There is no compiler-generated intermediate representation. The system calls in the application remain unaltered. Optionally, the programmer can add a small amount of additional native C code to include assertions based on the user's algorithm, declarations of shared memory regions, and progress/liveness conditions. The work has two important motivations: (i) It can be used to verify correctness of a concurrent algorithm being implemented with multithreading; and (ii) it can also be used pedagogically to provide immediate feedback to students learning either to employ POSIX threads system calls or to implement multithreaded algorithms. This work represents the first example of in-vivo model checking operating directly on the standard mul-tithreaded executable and its libraries, without the aid of a compiler-generated intermediate representation. Sthread leverages the open-source SimGrid libraries, and will eventually be integrated into SimGrid. Sthread employs a non-preemptive model in which thread context switches occur only at multithreaded system calls (e.g., mutex, semaphore) or before accesses to shared memory regions. The emphasis is on finding "algo-rithmic bugs" (bugs in an original algorithm, implemented as POSIX threads and shared memory regions. This work is in contrast to Context-Bounded Analysis (CBA), which assumes a preemptive model for threads, and emphasizes implementation bugs such as buffer overruns and write-after-free for memory allocation. In particular, the Sthread in-vivo approach has strong future potential for pedagogy, by providing immediate feedback to students who are first learning the correct use of Pthreads system calls in implementation of concurrent algorithms based on multithreading.
Complete list of metadatas

Cited literature [3 references]  Display  Hide  Download
Contributor : Martin Quinson <>
Submitted on : Wednesday, January 22, 2020 - 4:22:19 PM
Last modification on : Wednesday, October 28, 2020 - 10:01:47 AM
Long-term archiving on: : Thursday, April 23, 2020 - 5:41:27 PM


Files produced by the author(s)



Gene Cooperman, Martin Quinson. Sthread: In-Vivo Model Checking of Multithreaded Programs. The Art, Science, and Engineering of Programming, aosa, Inc., In press, ⟨10.22152/⟩. ⟨hal-02449080⟩



Record views


Files downloads