Trustworthy Systems

Specifying a realistic file system


Sidney Amani and Toby Murray




We present the most interesting elements of the correctness specification of BilbyFs, a performant Linux flash file system. The BilbyFs specification supports asynchronous writes, a feature that has been overlooked by several file system verification projects, and has been used to verify the correctness of BilbyFs’s fsync() C implementation. It makes use of nondeterminism to be concise and is shallowly-embedded in higher-order logic.

BibTeX Entry

    address          = {Suva, Fiji},
    author           = {Amani, Sidney and Murray, Toby},
    booktitle        = {Workshop on Models for Formal Analysis of Real Systems},
    keywords         = {file system specification functional correctness asynchronous writes},
    month            = nov,
    pages            = {1--9},
    paperurl         = {},
    title            = {Specifying a Realistic File System},
    year             = {2015}