Lecture: Boogie & Dafny

Date: 1/30/17

Reading

• Required reading: Dafny: An Automatic Program Verifier for Functional Correctness, Rustan Leino, LPAR-16, 2010.

No summaries are necessary for this class.

Preparation

• Download, build, and install Dafny following the instructions on the Wiki. To stay in sync with the class, please use Dafny commit b1e7182d1632cdc8237dff3f039468c57f93f953. In other words, after you clone the Dafny repository, do:

  $ cd dafny
  $ git checkout b1e7182d1632cdc8237dff3f039468c57f93f953 

• If you get stuck trying to compile everything, you can fall back on the pre-compiled binaries. These should give you similar functionality, but there may be some bug fixes missing, and the behavior may be slightly different from the most recent version.

• I strongly recommend installing Dafny’s IDE support for your favorite editor: Emacs, vim, or, if you are using Windows, for Visual Studio via the Visual Studio plugin. The latter can be installed by compiling “dafny/Source/DafnyExtension.sln” and then double clicking the resulting DafnyLanguageService.vsix file in dafny/Binaries/.

• Start looking through the online guide at http://rise4fun.com/Dafny/tutorial/guide. At the end of the guide are links to additional tutorials. I recommend completing all of them except “Modules” can be considered optional for class purposes.

• You can find lots of details (probably far more than you ever wanted) about Dafny’s internals in the reference manual in Dafny’s source code.

Class notes

• Administrative
  • Everyone signed up for two papers?
    • Still some open lectures at the end of the semester
  • How was the first assignment?
  • New assignment for this Friday
• Dafny slides
  • Duplicate Array example

• Questions about the Dafny paper?

• Next class
  • More Dafny discussion
  • Early attempts to create a high-assurance OS
    • Lots of good stuff
    • Focus on the verification-related bits
    • This will be a good point of comparison for next week’s readings