Semantics of Exceptions

We describe a trace semantics of exceptions and then derive a weakest precondition semantics. A program that contains exceptions terminates in one of two possible ways (if it terminates at all): either it terminates exceptionally or it terminates normally. We will therefore consider weakest preconditions that are functions of two postconditions. As a preparation we study aribitrary functions of two arguments, and their compositions

From Event-B models to Dafny code contracts

International audienceThe constructive approach to software correctness aims at formal modelling and verification of the structure and behaviour of a system in different levels of abstraction. In contrast, the analytical approach to software verification focuses on code level correctness and its verification. Therefore it would seem that the constructive and analytical approaches should complement each other well. To demonstrate this idea we present a case for linking two existing verification methods, Event-B (constructive) and Dafny (analytical). This approach combines the power of Event-B abstraction and its stepwise refinement with the verification capabilities of Dafny. We presented a small case study to demonstrate this approach and outline of the rules for transforming Event-B events to Dafny contracts. Finally, a tool for automatic generation of Dafny contracts from Event-B formal models is presented

Flexible Invariants Through Semantic Collaboration

Modular reasoning about class invariants is challenging in the presence of dependencies among collaborating objects that need to maintain global consistency. This paper presents semantic collaboration: a novel methodology to specify and reason about class invariants of sequential object-oriented programs, which models dependencies between collaborating objects by semantic means. Combined with a simple ownership mechanism and useful default schemes, semantic collaboration achieves the flexibility necessary to reason about complicated inter-object dependencies but requires limited annotation burden when applied to standard specification patterns. The methodology is implemented in AutoProof, our program verifier for the Eiffel programming language (but it is applicable to any language supporting some form of representation invariants). An evaluation on several challenge problems proposed in the literature demonstrates that it can handle a variety of idiomatic collaboration patterns, and is more widely applicable than the existing invariant methodologies.Comment: 22 page

The VerCors tool for verification of concurrent programs

The VerCors tool implements thread-modular static verification of concurrent programs, annotated with functional properties and heap access permissions. The tool supports both generic multithreaded and vector-based programming models. In particular, it can verify multithreaded programs written in Java, specified with JML extended with separation logic. It can also verify parallelizable programs written in a toy language that supports the characteristic features of OpenCL. The tool verifies programs by first encoding the specified program into a much simpler programming language and then applying the Chalice verifier to the simplified program. In this paper we discuss both the implementation of the tool and the features of its specification language

Modulation of Functional Activities of Chicken Heterophils by Recombinant Chicken IFN-γ

The objective of the present studies was to examine the in vitro effects of recombinant chicken interferon-γ (rChIFN-γ) on shape change, phagocytosis, and the oxidative/nonoxidative killing activities of day-old chicken heterophils. Heterophils (4 × 106/ml) were incubated with various concentrations of recombinant ChIFN-γ from both Escherichia coli and transfected Cos cells for 2 h at 39°C. The incubation of the neonatal heterophils with rChIFN-γ resulted in significantly greater numbers of cells with membrane shape change when compared with the mock-treated heterophils. Both Cos cell-derived and E. coli-derived ChIFN-γ significantly increased (p < 0.01) the phagocytosis of opsonized or nonopsonized Salmonella enteritidis by the neonatal heterophils in a concentration-dependent manner. Incubation with ChIFN-γ induced no direct stimulation of the respiratory burst by the chicken heterophils but did prime the heterophils for a significantly strengthened respiratory burst to subsequent stimulation with opsonized zymosan (OZ). Lastly, incubation of the heterophils with ChIFN-γ primed the cells for a significant increase in the release of β-D-glucuronidase following stimulation with OZ. These results show that neonatal avian heterophils can respond to cytokine modulation with enhanced functional competence, suggesting that ChIFN-γ can enhance the immune competence of the innate defenses of chickens during the first week of life

Carvedilol Protects against Doxorubicin-Induced Mitochondrial Cardiomyopathy

Several cytopathic mechanisms have been suggested to mediate the dose-limiting cumulative and irreversible cardiomyopathy caused by doxorubicin. Recent evidence indicates that oxidative stress and mitochondrial dysfunction are key factors in the pathogenic process. The objective of this investigation was to test the hypothesis that carvedilol, a nonselective [beta]-adrenergic receptor antagonist with potent antioxidant properties, protects against the cardiac and hepatic mitochondrial bioenergetic dysfunction associated with subchronic doxorubicin toxicity. Heart and liver mitochondria were isolated from rats treated for 7 weeks with doxorubicin (2 mg/kg sc/week), carvedilol (1 mg/kg ip/week), or the combination of the two drugs. Heart mitochondria isolated from doxorubicin-treated rats exhibited depressed rates for state 3 respiration (336 ± 26 versus 425 ± 53 natom O/min/mg protein) and a lower respiratory control ratio (RCR) (4.3 ± 0.6 versus 5.8 ± 0.4) compared with cardiac mitochondria isolated from saline-treated rats. Mitochondrial calcium-loading capacity and the activity of NADH-dehydrogenase were also suppressed in cardiac mitochondria from doxorubicin-treated rats. Doxorubicin treatment also caused a decrease in RCR for liver mitochondria (3.9 ± 0.9 versus 5.6 ± 0.7 for control rats) and inhibition of hepatic cytochrome oxidase activity. Coadministration of carvedilol decreased the extent of cellular vacuolization in cardiac myocytes and prevented the inhibitory effect of doxorubicin on mitochondrial respiration in both heart and liver. Carvedilol also prevented the decrease in mitochondrial Ca2+ loading capacity and the inhibition of the respiratory complexes of heart mitochondria caused by doxorubicin. Carvedilol by itself did not affect any of the parameters measured for heart or liver mitochondria. It is concluded that this protection by carvedilol against both the structural and functional cardiac tissue damage may afford significant clinical advantage in minimizing the dose-limiting mitochondrial dysfunction and cardiomyopathy that accompanies long-term doxorubicin therapy in cancer patients.http://www.sciencedirect.com/science/article/B6WXH-47G34FR-7/1/591ea3d1072dcf2971b640191c05679

GPUVerify: A Verifier for GPU Kernels

We present a technique for verifying race- and divergence-freedom of GPU kernels that are written in mainstream ker-nel programming languages such as OpenCL and CUDA. Our approach is founded on a novel formal operational se-mantics for GPU programming termed synchronous, delayed visibility (SDV) semantics. The SDV semantics provides a precise definition of barrier divergence in GPU kernels and allows kernel verification to be reduced to analysis of a sequential program, thereby completely avoiding the need to reason about thread interleavings, and allowing existing modular techniques for program verification to be leveraged. We describe an efficient encoding for data race detection and propose a method for automatically inferring loop invari-ants required for verification. We have implemented these techniques as a practical verification tool, GPUVerify, which can be applied directly to OpenCL and CUDA source code. We evaluate GPUVerify with respect to a set of 163 kernels drawn from public and commercial sources. Our evaluation demonstrates that GPUVerify is capable of efficient, auto-matic verification of a large number of real-world kernels

Cross-sectional area of the paraspinal muscles and its association with muscle strength among fighter pilots : A 5-year follow-up

Background: A small cross sectional area (CSA) of the paraspinal muscles may be related to low back pain among military aviators but previous studies have mainly concentrated on spinal disc degeneration. Therefore, the primary aim of the study was to investigate the changes in muscle CSA and composition of the psoas and paraspinal muscles during a 5-year follow up among Finnish Air Force (FINAF) fighter pilots. Methods: Study population consisted of 26 volunteered FINAF male fighter pilots (age: 20.6 (±0.6) at the baseline). The magnetic resonance imaging (MRI) examinations were collected at baseline and after 5 years of follow-up. CSA and composition of the paraspinal and psoas muscles were obtained at the levels of 3-4 and 4-5 lumbar spine. Maximal isometric strength tests were only performed on one occasion at baseline. Results: The follow-up comparisons indicated that the mean CSA of the paraspinal muscles increased (p <0.01) by 8% at L3-4 level and 7% at L4-5 level during the 5-year period. There was no change in muscle composition during the follow-up period. The paraspinal and psoas muscles' CSA was positively related to overall maximal isometric strength at the baseline. However, there was no association between LBP and muscle composition or CSA. Conclusions: The paraspinal muscles' CSA increased among FINAF fighter pilots during the first 5 years of service. This might be explained by physically demanding work and regular physical activity. However, no associations between muscle composition or CSA and low back pain (LBP) experienced were observed after the five-year follow-up. © 2019 The Author(s).Peer reviewe