Trustworthy Systems

Specifying a realistic file system


Sidney Amani and Toby Murray




We present the most interesting elements of the correctness specification of BilbyFs, a performant Linux flash file system. The BilbyFs specification supports asynchronous writes, a feature that has been overlooked by several file system verification projects, and has been used to verify the correctness of BilbyFs’s fsync() C implementation. It makes use of nondeterminism to be concise and is shallowly-embedded in higher-order logic.

BibTeX Entry

    month            = nov,
    keywords         = {file system specification functional correctness asynchronous writes},
    paperurl         = {},
    booktitle        = {Workshop on Models for Formal Analysis of Real Systems},
    author           = {Amani, Sidney and Murray, Toby},
    year             = {2015},
    pages            = {1--9},
    title            = {Specifying a Realistic File System},
    address          = {Suva, Fiji}