[sel4] Porting seL4 to RISC-V - Status Report 1
Hi all, As a warm up, I've written a blog entry [1] of the project giving some introductory details for both RISC-V and seL4 microkernel and what has been done so far. Open to questions/suggestions. [1] http://heshamelmatary.blogspot.co.uk/2015/05/porting-sel4-to-risc-v-status-r... Thanks, -- Hesham
Cool, will be nice to follow your progress there. Minor nitpick: "seL4 is a new open-source L4 microkernel developed by General Dynamics C4 Systems and NICTA”: seL4 was exclusively developed by NICTA, and is now owned by GD. The RISC-V architecture is a potential candidate for later verification. Would you be interested in trying to keep your C port in the subset of the C language our verification tools can handle? It may be more work for your project, but it will give you the real seL4 experience ;-) If yes, I can give you some tools and instructions on how to use them for checking the subset. There’s a lightweight syntax-only checker, and there’s a longer-running check that actually reads the code into the theorem prover. Cheers, Gerwin
On 25.05.2015, at 06:10, Hesham ALMatary
wrote: Hi all,
As a warm up, I've written a blog entry [1] of the project giving some introductory details for both RISC-V and seL4 microkernel and what has been done so far. Open to questions/suggestions.
[1] http://heshamelmatary.blogspot.co.uk/2015/05/porting-sel4-to-risc-v-status-r...
Thanks, -- Hesham
_______________________________________________ Devel mailing list Devel@sel4.systems https://sel4.systems/lists/listinfo/devel
________________________________ The information in this e-mail may be confidential and subject to legal professional privilege and/or copyright. National ICT Australia Limited accepts no liability for any damage caused by this email or its attachments.
Hi Gerwin,
On Mon, May 25, 2015 at 12:09 AM, Gerwin Klein
Cool, will be nice to follow your progress there.
Minor nitpick: "seL4 is a new open-source L4 microkernel developed by General Dynamics C4 Systems and NICTA”: seL4 was exclusively developed by NICTA, and is now owned by GD.
Thanks for the nitpick, I've modified the blog entry.
The RISC-V architecture is a potential candidate for later verification. Would you be interested in trying to keep your C port in the subset of the C language our verification tools can handle? It may be more work for your project, but it will give you the real seL4 experience ;-)
If yes, I can give you some tools and instructions on how to use them for checking the subset. There’s a lightweight syntax-only checker, and there’s a longer-running check that actually reads the code into the theorem prover.
That will be great. Actually I was thinking of formally verifying the port, but since I don't have experience with formal verification in general, I wouldn't know how much time/effort would this take, given that I heard you did the verification in 20 years and more than 100K of code :)
Cheers, Gerwin
On 25.05.2015, at 06:10, Hesham ALMatary
wrote: Hi all,
As a warm up, I've written a blog entry [1] of the project giving some introductory details for both RISC-V and seL4 microkernel and what has been done so far. Open to questions/suggestions.
[1] http://heshamelmatary.blogspot.co.uk/2015/05/porting-sel4-to-risc-v-status-r...
Thanks, -- Hesham
_______________________________________________ Devel mailing list Devel@sel4.systems https://sel4.systems/lists/listinfo/devel
________________________________
The information in this e-mail may be confidential and subject to legal professional privilege and/or copyright. National ICT Australia Limited accepts no liability for any damage caused by this email or its attachments.
-- Hesham
The RISC-V architecture is a potential candidate for later verification. Would you be interested in trying to keep your C port in the subset of the C language our verification tools can handle? It may be more work for your project, but it will give you the real seL4 experience ;-)
If yes, I can give you some tools and instructions on how to use them for checking the subset. There’s a lightweight syntax-only checker, and there’s a longer-running check that actually reads the code into the theorem prover.
That will be great. Actually I was thinking of formally verifying the port, but since I don't have experience with formal verification in general, I wouldn't know how much time/effort would this take, given that I heard you did the verification in 20 years and more than 100K of code :)
Cool, give me a few days, and I’ll put some docs together (new prover version is just coming out today, so will need to update the infrastructure first). Updating the whole verification is probably too much for the timeframe of the project, but updating the formal specs and Haskell prototype might be useful and even helpful for your project. If you’re interesting in that, let me know. Cheers, Gerwin ________________________________ The information in this e-mail may be confidential and subject to legal professional privilege and/or copyright. National ICT Australia Limited accepts no liability for any damage caused by this email or its attachments.
participants (2)
-
Gerwin Klein
-
Hesham ALMatary