Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Branch: master
Fetching contributors…

Cannot retrieve contributors at this time

60 lines (47 sloc) 2.352 kB

STOP! The official Copilot repos are now at https://github.com/Copilot-Language/.

Overview

copilot-cbmc A tool to generate a driver using CBMC, a third-party tool (see Dependencies below) that proves that the code generated by different C back-ends is equivalent. Currently, this includes the C99 back-end and the SBV back-end.

Copilot is a stream (i.e., infinite lists) domain-specific language (DSL) in Haskell that compiles into embedded C. Copilot is similar in spirit to languages like Lustre. Copilot contains an interpreter, multiple back-end compilers, and other verification tools.

Examples

Please see the files under the Examples directory in the Copilot for a number of examples showing the syntax, use of libraries, and use of the interpreter and back-ends. The examples is the best way to start.

Installation

The Copilot library is cabalized. Assuming you have cabal and the GHC compiler installed (the Haskell Platform is the easiest way to obtain these), it should merely be a matter of running

     cabal install copilot-cbmc

However, we strongly recommend you install Copilot, which installs copilot-c99 and other packages automatically. Execute

     cabal install copilot

Dependencies

copilot-cbmc depends on the C model-checker, CBMC. CBMC is a bounded model-checker for C code. We use CBMC to prove that two back-ends generating C generate semantically equivalent C, to help detect bugs in C back-ends.

Resources

copilot-cbmc is available on Hackage.

Sources for each package are available on Github as well. Just go to Github and search for the package of interest. Feel free to fork!

Copyright, License

Copilot is distributed with the BSD3 license. The license file contains the BSD3 verbiage.

Thanks

We are grateful for NASA Contract NNL08AD13T to Galois, Inc and the National Institute of Aerospace, which partially supported this work.

Jump to Line
Something went wrong with that request. Please try again.