Testing Library Specifications by Verifying Conformance Tests

Abstract. Formal specifications of standard libraries are necessary when statically verifying software that uses those libraries. Library specifications must be both correct, accurately reflecting library behavior, and useful, describing library behavior in sufficient detail to allow static verification of client programs. Specification and verification researchers regularly face the question of whether the library specifications we use are correct and useful, and we have collectively provided no good answers. Over the past few years we have created and refined a software engineering process, which we call the Formal CTD Process (FCTD), to address this problem. Although FCTD is primarily targeted toward those who write Java libraries (or specifications for existing Java libraries) using the Java Modeling Language (JML), its techniques are broadly applicable. The key to FCTD is its novel usage of library conformance test suites. Rather than executing the conformance tests, FCTD uses them to measure the correctness and utility of specifications through static verification. FCTD is beginning to see significant use within the JML community and is the cornerstone process of the JML Spec-a-thons, meetings that bring JML researchers and practitioners together for intensive specification writing sessions. This article describes the Formal CTD Process, its use in small case studies, and its broad application to the standard Java class library.

Nonexistence of marginally trapped surfaces and geons in 2+1 gravity

We use existence results for Jang's equation and marginally outer trapped surfaces (MOTSs) in 2+1 gravity to obtain nonexistence of geons in 2+1 gravity. In particular, our results show that any 2+1 initial data set, which obeys the dominant energy condition with cosmological constant \Lambda \geq 0 and which satisfies a mild asymptotic condition, must have trivial topology. Moreover, any data set obeying these conditions cannot contain a MOTS. The asymptotic condition involves a cutoff at a finite boundary at which a null mean convexity condition is assumed to hold; this null mean convexity condition is satisfied by all the standard asymptotic boundary conditions. The results presented here strengthen various aspects of previous related results in the literature. These results not only have implications for classical 2+1 gravity but also apply to quantum 2+1 gravity when formulated using Witten's solution space quantization.Comment: v3: Elements from the original two proofs of the main result have been combined to give a single proof, thereby circumventing an issue with the second proof associated with potential blow-ups of solutions to Jang's equation. To appear in Commun. Math. Phy

Practically Applicable Formal Methods

Abstract. Formal methods are considered to be highly expensive. There-fore, they are currently applied almost only in high risk software develop-ment. In this paper, we show that formal techniques can be also efficiently used in standard large-scale applications. We focus on the generation of specifications which state the termination condition of for loops in Java code (expressed as so called Java Modeling Language decreases clauses). We demonstrate that with help of relatively simple techniques it is pos-sible to successfully generate the clauses for almost 80 % of the loops in a number of widely deployed applications. Moreover, it turns out that the remaining 20 % cases contain loops which should be carefully reviewed by software quality assurance personnel. The results show that our tech-nique might be helpful in spreading the usage of formal methods onto typical business software

The extremal limits of the C-metric: Nariai, Bertotti-Robinson and anti-Nariai C-metrics

In two previous papers we have analyzed the C-metric in a background with a cosmological constant, namely the de Sitter (dS) C-metric, and the anti-de Sitter (AdS) C-metric, following the work of Kinnersley and Walker for the flat C-metric. These exact solutions describe a pair of accelerated black holes in the flat or cosmological constant background, with the acceleration A being provided by a strut in-between that pushes away the two black holes. In this paper we analyze the extremal limits of the C-metric in a background with generic cosmological constant. We follow a procedure first introduced by Ginsparg and Perry in which the Nariai solution, a spacetime which is the direct topological product of the 2-dimensional dS and a 2-sphere, is generated from the four-dimensional dS-Schwarzschild solution by taking an appropriate limit, where the black hole event horizon approaches the cosmological horizon. Similarly, one can generate the Bertotti-Robinson metric from the Reissner-Nordstrom metric by taking the limit of the Cauchy horizon going into the event horizon of the black hole, as well as the anti-Nariai by taking an appropriate solution and limit. Using these methods we generate the C-metric counterparts of the Nariai, Bertotti-Robinson and anti-Nariai solutions, among others. One expects that the solutions found in this paper are unstable and decay into a slightly non-extreme black hole pair accelerated by a strut or by strings. Moreover, the Euclidean version of these solutions mediate the quantum process of black hole pair creation, that accompanies the decay of the dS and AdS spaces

Production and Decay of D_1(2420)^0 and D_2^*(2460)^0

We have investigated $D^{+}\pi^{-}$ and $D^{*+}\pi^{-}$ final states and observed the two established $L=1$ charmed mesons, the $D_1(2420)^0$ with mass $2421^{+1+2}_{-2-2}$ MeV/c$^{2}$ and width $20^{+6+3}_{-5-3}$ MeV/c$^{2}$ and the $D_2^*(2460)^0$ with mass $2465 \pm 3 \pm 3$ MeV/c$^{2}$ and width $28^{+8+6}_{-7-6}$ MeV/c$^{2}$. Properties of these final states, including their decay angular distributions and spin-parity assignments, have been studied. We identify these two mesons as the $j_{light}=3/2$ doublet predicted by HQET. We also obtain constraints on {\footnotesize $\Gamma_S/(\Gamma_S + \Gamma_D)$} as a function of the cosine of the relative phase of the two amplitudes in the $D_1(2420)^0$ decay.Comment: 15 pages in REVTEX format. hardcopies with figures can be obtained by sending mail to: [email protected]

Measurement of the branching fraction for Υ(1S)→τ+τ−\Upsilon (1S) \to \tau^+ \tau^-

We have studied the leptonic decay of the $\Upsilon (1S)$ resonance into tau pairs using the CLEO II detector. A clean sample of tau pair events is identified via events containing two charged particles where exactly one of the particles is an identified electron. We find $B(\Upsilon(1S) \to \tau^+ \tau^-) = (2.61~\pm~0.12~{+0.09\atop{-0.13}})$. The result is consistent with expectations from lepton universality.Comment: 9 pages, RevTeX, two Postscript figures available upon request, CLNS 94/1297, CLEO 94-20 (submitted to Physics Letters B