How to avoid proving the absence of integer overflows - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2015

How to avoid proving the absence of integer overflows


When proving safety of programs, we must show, in particular, the absence of integer overflows. Unfortunately, there are lots of situations where performing such a proof is extremely difficult, because the appropriate restrictions on function arguments are invasive and may be hard to infer. Yet, in certain cases, we can relax the desired property and only require the absence of overflow during the first n steps of execution, n being large enough for all practical purposes. It turns out that this relaxed property can be easily ensured for large classes of algorithms, so that only a minimal amount of proof is needed, if at all. The idea is to restrict the set of allowed arithmetic operations on the integer values in question, imposing a " speed limit " on their growth. For example, if we repeatedly increment a 64-bit integer, starting from zero, then we will need at least 2 64 steps to reach an overflow; on current hardware, this takes several hundred years. When we do not expect any single execution of our program to run that long, we have effectively proved its safety against overflows of all variables with controlled growth speed. In this paper, we give a formal explanation of this approach, prove its soundness, and show how it is implemented in the context of deductive verification.
Fichier principal
Vignette du fichier
main.pdf (185.1 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01162661 , version 1 (11-06-2015)
hal-01162661 , version 2 (09-10-2015)


  • HAL Id : hal-01162661 , version 2


Martin Clochard, Jean-Christophe Filliâtre, Andrei Paskevich. How to avoid proving the absence of integer overflows. 7th Working Conference on Verified Software: Theories, Tools, and Experiments, Jul 2015, San Francisco, CA, United States. ⟨hal-01162661v2⟩
772 View
570 Download


Gmail Facebook X LinkedIn More