A proof system for invariants in layered OO designs

Although invariants have a long history, their meaning in OO designs is still under discussion. OO designs often include functionality that is used by different otherwise unrelated objects (shared functionality). We identify a problem with current interpretations of invariants in such designs. OO designs are often layered, where a layer uses functionality of a lower layer (in particular, shared functionality) but has little or no involvement with higher layers. As a result, higher layers can rely on lower layer invariants and lower layers do not rely on higher layer invariants. This is not reflected by current interpretations of invariants. We propose to make layers explicit in specifications and introduce a new interpretation of invariants that exploits these layers. Furthermore, we present a sound, modular verification technique that ensures the new interpretation is satisfied

Towards verified Java code generation from concurrent state machines

We present work in progress on, verified, transformation of a modeling language based on communicating concurrent state machines, SLCO, to Java. Some concurrency related challenges, related to atomicity and non-standard fairness issues, are pointed out. We discuss solutions based on Java synchronization concepts

Verifying Class Invariants in Concurrent Programs

Class invariants are a highly useful feature for the verification of object-oriented programs, because they can be used to capture all valid object states. In a sequential program setting, the validity of class invariants is typically described in terms of a visible state semantics, i.e., invariants only have to hold whenever a method begins or ends execution, and they may be broken inside a method body. However, in a concurrent setting, this restriction is no longer usable, because due to thread interleavings, any program state is potentially a visible state. In this paper we present a new approach for reasoning about class invariants in multithreaded programs. We allow a thread to explicitly break an invariant at specific program locations, while ensuring that no other thread can observe the broken invariant. We develop our technique in a permission-based separation logic environment. However, we deviate from separation logic's standard rules and allow a class invariant to express properties over shared memory locations (the invariant footprint), independently of the permissions on these locations. In this way, a thread may break or reestablish an invariant without holding permissions to all locations in its footprint. To enable modular verification, we adopt the restrictions of Muller's ownership-based type system

Intravenous immune globulin in hereditary inclusion body myopathy: a pilot study

BACKGROUND: Hereditary Inclusion Body Myopathy (HIBM) is an autosomal recessive, adult onset, non-inflammatory neuromuscular disorder with no effective treatment. The causative gene, GNE, codes for UDP-N-acetylglucosamine 2-epimerase/N-acetylmannosamine kinase, which catalyzes the first two reactions in the synthesis of sialic acid. Reduced sialylation of muscle glycoproteins, such as α-dystroglycan and neural cell adhesion molecule (NCAM), has been reported in HIBM. METHODS: We treated 4 HIBM patients with intravenous immune globulin (IVIG), in order to provide sialic acid, because IgG contains 8 μmol of sialic acid/g. IVIG was infused as a loading dose of 1 g/kg on two consecutive days followed by 3 doses of 400 mg/kg at weekly intervals. RESULTS: For all four patients, mean quadriceps strength improved from 19.0 kg at baseline to 23.2 kg (+22%) directly after IVIG loading to 25.6 kg (+35%) at the end of the study. Mean shoulder strength improved from 4.1 kg at baseline to 5.9 kg (+44%) directly after IVIG loading to 6.0 kg (+46%) at the end of the study. The composite improvement for 8 other muscle groups was 5% after the initial loading and 19% by the end of the study. Esophageal motility and lingual strength improved in the patients with abnormal barium swallows. Objective measures of functional improvement gave variable results, but the patients experienced improvements in daily activities that they considered clinically significant. Immunohistochemical staining and immunoblotting of muscle biopsies for α-dystroglycan and NCAM did not provide consistent evidence for increased sialylation after IVIG treatment. Side effects were limited to transient headaches and vomiting. CONCLUSION: The mild benefits in muscle strength experienced by HIBM patients after IVIG treatment may be related to the provision of sialic acid supplied by IVIG. Other sources of sialic acid are being explored as treatment options for HIBM