SDL versus C equivalence checking

We present a tool that automatically checks the existence of a bisimulation relation between an SDL specification and the corresponding auto-generated C code. The tool has been used to verify part of the C implementation of a WiFi Medium Access Controller (i.e.; IEEE 802.11) that has been derived from its original SDL specification using the Telelogic CAdvanced Code Generator