Taming an Authoritative Armv8 ISA Specification: L3 Validation and CakeML Compiler Verification

EasyChair Preprint 8670

Abstract

Machine-readable specifications for the Armv8 instruction set architecture have become publicly available as part of Arm's release processes, providing an official and unambiguous source of truth for the semantics of Arm instructions. To date, compiler and machine code verification efforts have made use of unofficial theorem proving friendly specifications of Armv8, e.g. CakeML uses an L3-based specification. The validity of these verification efforts hinges upon their unofficial ISA specifications being valid with respect to the official Arm specification.

Leveraging the Sail language ecosystem, we bridge this validation gap by formally verifying that an L3-based specification simulates the official Arm specification using the HOL4 interactive theorem prover. We exercise this simulation by proving a novel compiler correctness result for CakeML with respect to Arm's official specification of the Armv8.6 A-class instruction set.

Keyphrases: HOL4, ISA specification, program verification

@booklet{EasyChair:8670,
  author    = {Hrutvik Kanabar and Anthony Fox and Magnus O. Myreen},
  title     = {Taming an Authoritative Armv8 ISA Specification: L3 Validation and CakeML Compiler Verification},
  howpublished = {EasyChair Preprint 8670},
  year      = {EasyChair, 2022}}