Skip to main content
Springer Nature Link
Log in

Creusot: A Foundry for the Deductive Verification of Rust Programs

  • Conference paper
  • First Online:
Formal Methods and Software Engineering (ICFEM 2022)

Part of the book series: Lecture Notes in Computer Science ((LNCS,volume 13478))

Included in the following conference series:

Abstract

Rust is a fairly recent programming language for system programming, bringing static guarantees of memory safety through a strict ownership policy. The strong guarantees brought by this feature opens promising progress for deductive verification, which aims at proving the conformity of Rust code with respect to a specification of its intended behavior. We present the foundations of Creusot, a tool for the formal specification and deductive verification of Rust code. A first originality comes from Creusot’s specification language, which features a notion of prophecy to reason about memory mutation, working in harmony with Rust’s ownership system. A second originality is how Creusot builds upon Rust trait system to provide several advanced abstraction features.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    Le Creusot is an industrial town in the eastern France, whose economy is dominated by metallurgical companies, cf. https://en.wikipedia.org/wiki/Le_Creusot.

  2. 2.

    Pearlite is a structure occurring in common grades of steels, cf https://en.wikipedia.org/wiki/Pearlite.

References

  1. Astrauskas, V., Müller, P., Poli, F., Summers, A.J.: Leveraging rust types for modular specification and verification. Proc. ACM Program. Lang. 3, 147:1–147:30 (2019). https://doi.org/10.1145/3360573

  2. Barrett, C., et al.: CVC4. In: Gopalakrishnan, G., Qadeer, S. (eds.) CAV 2011. LNCS, vol. 6806, pp. 171–177. Springer, Heidelberg (2011). https://doi.org/10.1007/978-3-642-22110-1_14

    Chapter  Google Scholar 

  3. Baudin, P., et al.: ACSL: ANSI/ISO C Specification Language, version 1.16 (2020), https://frama-c.com/html/acsl.html

  4. Bobot, F., Filliâtre, J.-C., Marché, C., Paskevich, A.: Let’s verify this with Why3. Int. J. Softw. Tools Technol. Transfer 17(6), 709–727 (2014). https://doi.org/10.1007/s10009-014-0314-5

    Article  Google Scholar 

  5. Cok, D.R.: OpenJML: software verification for java 7 using JML, OpenJDK, and Eclipse. Formal Integr. Dev. Env. 149, 79–92 (2014). https://doi.org/10.4204/EPTCS.149.8

    Article  Google Scholar 

  6. Conchon, S., Coquereau, A., Iguernlala, M., Mebsout, A.: Alt-Ergo 2.2. In: Satisfiability Modulo Theories (2018). https://hal.inria.fr/hal-01960203

  7. Dailler, S., Marché, C., Moy, Y.: Lightweight interactive proving inside an automatic program verifier. In: Formal Integrated Development Environment (2018). https://doi.org/10.4204/EPTCS.284.1

  8. Denis, X., Jourdan, J.H., Marché, C.: The Creusot environment for the deductive verification of rust programs. Research report 9448, Inria Saclay - Île de France (2021). https://hal.inria.fr/hal-03526634

  9. Filliâtre, J.C., Gondelman, L., Paskevich, A.: A pragmatic type system for deductive verification. Research report, Université Paris Sud (2016). https://hal.archives-ouvertes.fr/hal-01256434v3

  10. Hatcliff, J., Leavens, G.T., Leino, K.R.M., Müller, P., Parkinson, M.: Behavioral interface specification languages. ACM Comput. Surv. 44(3), 1–58 (2012). https://doi.org/10.1145/2187671.2187678

    Article  MATH  Google Scholar 

  11. Ho, S., Protzenko, J.: Aeneas: rust verification by functional translation (2022). https://doi.org/10.48550/ARXIV.2206.07185

  12. Hubert, T., Marché, C.: Separation analysis for deductive verification. In: Heap Analysis and Verification, pp. 81–93 (2007). https://hal.inria.fr/hal-03630177

  13. Jaloyan, G.-A., Dross, C., Maalej, M., Moy, Y., Paskevich, A.: Verification of programs with pointers in SPARK. In: Lin, S.-W., Hou, Z., Mahony, B. (eds.) ICFEM 2020. LNCS, vol. 12531, pp. 55–72. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-63406-3_4

    Chapter  Google Scholar 

  14. Leino, K.R.M., Moskal, M.: VACID-0: verification of ample correctness of invariants of data-structures, edition 0. In: Verified Software, Tools, Techniques and Experiments (2010)

    Google Scholar 

  15. Matsushita, Y., Denis, X., Jacques-Henri, J., Dreyer, D.: RustHornBelt: a semantic foundation for functional verification of rust programs with unsafe code. In: Programming Language Design and Implementation (2022). https://doi.org/10.1145/3519939.3523704

  16. Matsushita, Y., Tsukada, T., Kobayashi, N.: RustHorn: CHC-based verification for rust programs. ACM Trans. Progr. Lang. Syst. 43(4), 15:1–15:54 (2021). https://doi.org/10.1145/3462205

  17. McCormick, J.W., Chapin, P.C.: Building High Integrity Applications with SPARK. Cambridge University Press, Cambridge (2015)

    Book  MATH  Google Scholar 

  18. Mol, M., other contributors: The Rosetta Code chrestomathy of programs, https://rosettacode.org

  19. de Moura, L., Bjørner, N.: Z3: an efficient SMT solver. In: Ramakrishnan, C.R., Rehof, J. (eds.) TACAS 2008. LNCS, vol. 4963, pp. 337–340. Springer, Heidelberg (2008). https://doi.org/10.1007/978-3-540-78800-3_24

    Chapter  Google Scholar 

  20. Smans, J., Jacobs, B., Piessens, F.: Implicit dynamic frames: combining dynamic frames and separation logic. In: Drossopoulou, S. (ed.) ECOOP 2009. LNCS, vol. 5653, pp. 148–172. Springer, Heidelberg (2009). https://doi.org/10.1007/978-3-642-03013-0_8

    Chapter  Google Scholar 

  21. The rust community: The std::cmp::Ord trait of Rust. https://doc.rust-lang.org/std/cmp/trait.Ord.html

Download references

Author information

Authors and Affiliations

  1. Université Paris-Saclay, CNRS, ENS Paris-Saclay, INRIA, Laboratoire Méthodes Formelles, 91405, Gif-sur-Yvette, France

    Xavier Denis & Claude Marché

  2. Université Paris-Saclay, CNRS, ENS Paris-Saclay, Laboratoire Méthodes Formelles, 91405, Gif-sur-Yvette, France

    Jacques-Henri Jourdan

Authors
  1. Xavier Denis
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Jacques-Henri Jourdan
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Claude Marché
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Claude Marché .

Editor information

Editors and Affiliations

  1. Complutense University of Madrid, Madrid, Spain

    Adrian Riesco

  2. East China University of Science and Technology, Shanghai, China

    Min Zhang

Rights and permissions

Reprints and permissions

Copyright information

© 2022 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Denis, X., Jourdan, JH., Marché, C. (2022). Creusot: A Foundry for the Deductive Verification of Rust Programs. In: Riesco, A., Zhang, M. (eds) Formal Methods and Software Engineering. ICFEM 2022. Lecture Notes in Computer Science, vol 13478. Springer, Cham. https://doi.org/10.1007/978-3-031-17244-1_6

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-17244-1_6

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-17243-4

  • Online ISBN: 978-3-031-17244-1

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics