Trustworthy Systems

Sequoll: A framework for model checking binaries


Bernard Blackham and Gernot Heiser



Best Paper Award


Multi-criticality real-time systems require protected-mode operating systems with bounded interrupt latencies and guaranteed isolation between components. A tight WCET analysis of such systems requires trustworthy information about loop bounds and infeasible paths.

We propose sequoll, a framework for employing model checking of binary code to determine loop counts and infeasible paths, as well as validating manual infeasible path annotations which are often error-prone. We show that sequoll automatically determines the majority of loop counts in the Mälardalen WCET benchmarks. We also show that sequoll computes loop bounds and validates several infeasible path annotations used to reduce the computed WCET bound of seL4, a high-assurance protected microkernel for multi-criticality systems.

BibTeX Entry

    address          = {Philadelphia, USA},
    author           = {Blackham, Bernard and Heiser, Gernot},
    booktitle        = {IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS)},
    editor           = {{Eduardo Tovar}},
    isbn             = {978-1-4799-0184-5},
    keywords         = {verification, trustworthy systems},
    month            = apr,
    pages            = {97--106},
    paperurl         = {},
    slides           = {},
    title            = {Sequoll: a framework for model checking binaries},
    year             = {2013}