Service interruption on Monday 11 July from 12:30 to 13:00: all the sites of the CCSD (HAL, EpiSciences, SciencesConf, AureHAL) will be inaccessible (network hardware connection).
Skip to Main content Skip to Navigation
Conference papers

ARMv8-A system semantics: instruction fetch in relaxed architectures

Abstract : Computing relies on architecture specifications to decouple hardware and software development. Historically these have been prose documents, with all the problems that entails, but research over the last ten years has developed rigorous and executable-as-test-oracle specifications of mainstream architecture instruction sets and "user-mode" concurrency, clarifying architectures and bringing them into the scope of programming-language semantics and verification. However, the system semantics, of instruction-fetch and cache maintenance, exceptions and interrupts, and address translation, remains obscure, leaving us without a solid foundation for verification of security-critical systems software. In this paper we establish a robust model for one aspect of system semantics: instruction fetch and cache maintenance for ARMv8-A. Systems code relies on executing instructions that were written by data writes, e.g. in program loading, dynamic linking, JIT compilation, de-bugging, and OS configuration, but hardware implementations are often highly optimised, e.g. with instruction caches, linefill buffers, out-of-order fetching, branch prediction, and instruction prefetching, which can affect programmer-observable behaviour. It is essential, both for programming and verification, to abstract from such microarchitectural details as much as possible, but no more. We explore the key architecture design questions with a series of examples, discussed in detail with senior Arm staff; capture the architectural intent in operational and axiomatic semantic models, extending previous work on "user-mode" concurrency; make these models executable as test oracles for small examples; and experimentally validate them against hardware behaviour (finding a bug in one hardware device). We thereby bring these subtle issues into the mathematical domain, clarifying the architecture and enabling future work on system software verification.
Complete list of metadata

Cited literature [57 references]  Display  Hide  Download
Contributor : Luc Maranget Connect in order to contact the contributor
Submitted on : Tuesday, March 17, 2020 - 12:10:47 PM
Last modification on : Wednesday, June 8, 2022 - 12:50:07 PM
Long-term archiving on: : Thursday, June 18, 2020 - 2:32:15 PM


Files produced by the author(s)


  • HAL Id : hal-02509910, version 1



Ben Simner, Shaked Flur, Christopher Pulte, Alasdair Armstrong, Jean Pichon-Pharabod, et al.. ARMv8-A system semantics: instruction fetch in relaxed architectures. ESOP 2020 - 29th European Symposium on Programming, Mar 2020, Dublin, Ireland. ⟨hal-02509910⟩



Record views


Files downloads