DOCSLIB.ORG

Integration of Prolog and Java with the Connector Architecture Capja

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Integration of Prolog and Java with the Connector Architecture Capja Julius-Maximilians-Universität Würzburg Fakultät für Mathematik und Informatik Dissertation Integration of Prolog and Java with the Connector Architecture CAPJa Ludwig Ostermayer February 2017 Supervisor: Prof. Dr. Dietmar Seipel Referees: Prof. Dr. Dietmar Seipel Prof. Dr. Grzegorz J. Nalepa Integration of Prolog and Java with the Connector Architecture CAPJa © 2017 Ludwig Ostermayer Julius-Maximilians-Universität Würzburg Fakultät für Mathematik und Informatik Am Hubland 97074 Würzburg Germany To Bernadette Abstract Modern software is often realized as a modular combination of subsystems for, e. g., knowledge management, visualization, verification, or the interaction with users. As a result, software libraries from possibly different programming languages have to work together. Even more complex the case is if different programming paradigms have to be combined. This type of diversification of programming languages and paradigms in just one software application can only be mastered by mechanisms for a seamless integration of the involved programming languages. However, the integration of the common logic programming language Prolog and the popular object-oriented programming language Java is complicated by various interoperabil- ity problems which stem on the one hand from the paradigmatic gap between the programming languages, and on the other hand, from the diversity of the available Prolog systems. The subject of the thesis is the investigation of novel mechanisms for the integration of logic programming in Prolog and object–oriented programming in Java. We are particularly interested in an object–oriented, uniform approach which is not specific to just one Prolog system. Therefore, we have first identified several important criteria for the seamless integration of Prolog and Java from the object–oriented perspective. The main contribution of the thesis is a novel integration framework called the Connector Architecture for Prolog and Java (CAPJa). The framework is completely implemented in Java and imposes no modifications to the Java Virtual Machine or Prolog. CAPJa provides a semi–automated mechanism for the integra- tion of Prolog predicates into Java. For compact, readable, and object–oriented queries to Prolog, CAPJa exploits lambda expressions with conditional and rela- tional operators in Java. The communication between Java and Prolog is based on a fully automated mapping of Java objects to Prolog terms, and vice versa. In Java, an extensible system of gateways provides connectivity with various Prolog system and, moreover, makes any connected Prolog system easily interchangeable, without major adaption in Java. Kurzbeschreibung Moderne Software ist oft modular zusammengesetzt aus Subsystemen zur Wis- sensverwaltung, Visualisierung, Verfikation oder Benutzerinteraktion. Dabei müssen Programmbibliotheken aus möglicherweise verschiedenen Programmiersprachen mit- einander zusammenarbeiten. Noch komplizierter ist der Fall, wenn auch noch ver- schiedene Programmierparadigmen miteinander kombiniert werden. Diese Art der Diversifikation an Programmiersprachen und –paradigmen in nur einer Software kann nur von nahtlosen Integrationsmechansimen für die beteiligten Programmier- sprachen gemeistert werden. Gerade die Einbindung der gängigen Logikprogram- miersprache Prolog und der populären objektorientierten Programmiersprache Java wird durch zahlreiche Kompatibilitätsprobleme erschwert, welche auf der einen Seite von paradigmatischen Unterschieden der beiden Programmiersprachen her- rühren und auf der anderen Seite von der Vielfalt der erhältlichen Prologimplemen- tierungen. Gegenstand dieser Arbeit ist die Untersuchung von neuartigen Mechanismen für die Zusammenführung von Logikprogrammierung in Prolog und objektorienter Programmierung in Java. Besonders interessiert uns dabei ein objektorientierter, einheitlicher Ansatz, der nicht auf eine konkrete Prologimplementierung festgelegt ist. Aus diesem Grund haben wir zunächst wichtige Kriterien für die nahtlose In- tegration von Prolog und Java aus der objetorientierten Sicht identifziert. Der Hauptbeitrag dieser Arbeit ist ein neuartiges Integrationssystems, welches Connec- tor Architecture for Prolog and Java (CAPJa) heißt. Das System ist komplett in Java implementiert und benötigt keine Anpassungen der Java Virtual Machine oder Prolog. CAPJa stellt einen halbautomatischen Mechanismus zur Vernetzung von Prolog Prädikaten mit Java zur Verfügung. Für kompakte, lesbare und ob- jektorientierte Anfragen an Prolog nutzt CAPJa Lambdaausdrücke mit logischen und relationalen Operatoren in Java. Die Kommunikation zwischen Java und Pro- log basiert auf einer automatisierten Abbildung von Java Objekten auf Prolog Terme, und umgekehrt. In Java bietet ein erweiterbares System von Schnittstellen Konnektivität zu einer Vielzahl an Prologimplmentierung und macht darüber hin- aus jede verbundene Prologimplementierung einfach austauschbar, und zwar ohne größere Anpassung in Java. Acknowledgements First of all, I would like to thank my mentor Professor Dr. Dietmar Seipel for in- troducing me to the wonderful world of logic programming, for his wise guidance, continuous support, and incredible patience without which this thesis would not have been possible. I also thank Professor Dr. Grzegorz J. Nalepa for countless valuable suggestions, important remarks, and fruitful discussions which had major impact on the work at hand. Moreover, I thank my colleague Frank Flederer for the close collaborations in the early stages of CAPJa and Dr. Joachim Spoerhase for his advice during the completion of this thesis. I also would like to express my thanks to Dr. Ulrike Rapp–Galmiche for proofreading this thesis. Finally, I would like to thank all students that have been involved in CAPJa in any manner, most notably Mirco Lukas and Andrew Easton. Last but not least, I would like to ex- press my gratitude to all my friends and my family for their consistent support and encouragement, most especially my dearest Bernadette. Contents Contents 1 Introduction1 1.1 Motivation, Scope, and Research Problem . .1 1.2 Goal of the Work and Original Contribution . .3 1.3 Introductory Examples . .6 1.4 Plan of the Work . .8 1.5 Exclusions . .9 1.6 Supporting Publications . .9 2 Selected Programming Paradigms and Languages 11 2.1 The Logic Programming Paradigm . 12 2.1.1 The Language of First-Order Logic . 12 2.1.2 Theory of Unification . 15 2.1.3 The Computational Model . 18 2.2 The Logic Programming Language Prolog .............. 21 2.2.1 Characteristics . 21 2.2.2 Important Language Concepts and Artifacts . 23 2.3 The Object-Oriented Programming Paradigm . 27 2.3.1 Objects and Classes . 27 2.3.2 Information Hiding and Encapsulation . 29 2.3.3 Types and Subtypes . 29 2.3.4 Inheritance and Polymorphy . 30 2.3.5 Dynamic Method Dispatch . 31 2.4 The Object-Oriented Programming Language Java .......... 31 2.4.1 Characteristics . 31 2.4.2 Important Language Concepts and Artifacts . 32 2.5 Synergy of Prolog and Java . 35 2.5.1 Advantages and Disadvantages of Prolog .......... 36 2.5.2 Advantages and Disadvantages of Java ............ 37 2.5.3 Synergy Effects . 39 3 Integration Approaches for Prolog and Java 41 3.1 Integration via Translation . 41 3.1.1 jProlog . 41 I Contents 3.1.2 Prolog Cafe . 42 3.2 Integration via Embedding . 45 3.2.1 tuProlog and P@J . 46 3.2.2 Smalltalk and SOUL ...................... 49 3.2.3 Logic Java . 51 3.3 Integration via Communication Interfaces . 54 3.3.1 Interprolog . 54 3.3.2 JPL . 57 3.3.3 PBR4J . 60 3.3.4 LogicObjects . 63 3.4 Alternative Approaches . 67 3.5 Synthesis . 68 3.5.1 Discussion . 69 3.5.2 Important Criteria for a Seamless Integration . 71 4 The Connector Architecture CAPJa 73 4.1 Components . 74 4.2 Development with CAPJa . 78 5 The JPMapping Component 81 5.1 Object-To-Term Mappings . 82 5.1.1 Introductory Example . 82 5.1.2 Formal Definition . 83 5.1.3 Default Mapping Mechanism . 86 5.1.4 Custom Mapping Definitions . 87 5.2 Predicate-Signature Notation . 91 5.2.1 Introductory Example . 92 5.2.2 Syntax and Semantics . 93 5.3 Implementation of Mappings . 95 5.3.1 The Abstract JPMapper<T> Class . 95 5.3.2 Subclassing JPMapper<T> .................... 96 5.3.3 Source Code Generation . 100 6 The JPLambda Component 105 6.1 Introductory Examples . 106 6.2 The Query Language JPQL . 109 6.2.1 Lambda Expressions . 109 6.2.2 Query Constraints . 110 6.2.3 Query Execution . 112 6.3 The Mapping Language JPML . 114 II Contents 6.4 JPCompiler . 116 6.4.1 Workflow . 117 6.4.2 Source Code Parsing . 119 6.4.3 The JPLambdaAnalyzer Class . 120 6.4.4 Generated Source Code . 121 6.4.5 Modified Source Code . 123 7 The JPGateway Component 125 7.1 The JPGateway Interface . 125 7.2 Dependencies . 127 7.3 The Portable Prolog Gateway . 129 7.4 Custom Gateways . 134 7.4.1 Remote Procedure Calls . 134 7.4.2 CAPJa as a High-Level API . 139 8 Evaluation 143 8.1 Case Study on the London Underground . 143 8.1.1 The Prolog Knowledge Base . 144 8.1.2 Queries from Java to Prolog ................. 145 8.1.3 Implementation with CAPJa . 147 8.1.4 Implementation with JPL . 148 8.1.5 Results . 150 8.2 Case Study on Taxes in International E-Commerce . 153 8.2.1 Logic Programming for Business Rules . 153 8.2.2 Delivery Threshold . 155 8.2.3 Business Objects . 155 8.2.4 Business Rules . 158 8.2.5 Calling the Business Rules . 160 8.2.6 Results . 162 8.3 Validation . 163 8.3.1 Applicability Revisited . 163 8.3.2 Important Criteria for a Seamless Integration Revisited . 165 9 Conclusion 173 9.1 Summary . 173 9.2 Future Work . 176 III List of Figures List of Figures 3.1 JFrame with 4 Buttons . 60 4.1 The Connector Architecture for Prolog and Java.......... 74 4.2 The JPMapping component of CAPJa. 76 5.1 The annotation layer of JPMapping.................. 88 5.2 The abstract JPMapper<T> class and its abstract methods. 95 5.3 Generating of subclasses of JPMapper<T> with JPMappingProcessor. 101 5.4 Generation of the object-oriented interface from Psn.......... 102 6.1 The Employee and the Address class in Java.............. 107 6.2 Extended build process with JPCompiler..............
Load more

Recommended publications
  • Safety Properties Liveness Properties
    Computer security Goal: prevent bad things from happening PLDI’06 Tutorial T1: Clients not paying for services Enforcing and Expressing Security Critical service unavailable with Programming Languages Confidential information leaked Important information damaged System used to violate laws (e.g., copyright) Andrew Myers Conventional security mechanisms aren’t Cornell University up to the challenge http://www.cs.cornell.edu/andru PLDI Tutorial: Enforcing and Expressing Security with Programming Languages - Andrew Myers 2 Harder & more important Language-based security In the ’70s, computing systems were isolated. Conventional security: program is black box software updates done infrequently by an experienced Encryption administrator. Firewalls you trusted the (few) programs you ran. System calls/privileged mode physical access was required. Process-level privilege and permissions-based access control crashes and outages didn’t cost billions. The Internet has changed all of this. Prevents addressing important security issues: Downloaded and mobile code we depend upon the infrastructure for everyday services you have no idea what programs do. Buffer overruns and other safety problems software is constantly updated – sometimes without your knowledge Extensible systems or consent. Application-level security policies a hacker in the Philippines is as close as your neighbor. System-level security validation everything is executable (e.g., web pages, email). Languages and compilers to the rescue! PLDI Tutorial: Enforcing
    [Show full text]
  • Cyclone: a Type-Safe Dialect of C∗
    Cyclone: A Type-Safe Dialect of C∗ Dan Grossman Michael Hicks Trevor Jim Greg Morrisett If any bug has achieved celebrity status, it is the • In C, an array of structs will be laid out contigu- buffer overflow. It made front-page news as early ously in memory, which is good for cache locality. as 1987, as the enabler of the Morris worm, the first In Java, the decision of how to lay out an array worm to spread through the Internet. In recent years, of objects is made by the compiler, and probably attacks exploiting buffer overflows have become more has indirections. frequent, and more virulent. This year, for exam- ple, the Witty worm was released to the wild less • C has data types that match hardware data than 48 hours after a buffer overflow vulnerability types and operations. Java abstracts from the was publicly announced; in 45 minutes, it infected hardware (“write once, run anywhere”). the entire world-wide population of 12,000 machines running the vulnerable programs. • C has manual memory management, whereas Notably, buffer overflows are a problem only for the Java has garbage collection. Garbage collec- C and C++ languages—Java and other “safe” lan- tion is safe and convenient, but places little con- guages have built-in protection against them. More- trol over performance in the hands of the pro- over, buffer overflows appear in C programs written grammer, and indeed encourages an allocation- by expert programmers who are security concious— intensive style. programs such as OpenSSH, Kerberos, and the com- In short, C programmers can see the costs of their mercial intrusion detection programs that were the programs simply by looking at them, and they can target of Witty.
    [Show full text]
  • Cs164: Introduction to Programming Languages and Compilers
    Lecture 19 Flow Analysis flow analysis in prolog; applications of flow analysis Ras Bodik Hack Your Language! CS164: Introduction to Programming Ali and Mangpo Languages and Compilers, Spring 2013 UC Berkeley 1 Today Static program analysis what it computes and how are its results used Points-to analysis analysis for understanding flow of pointer values Andersen’s algorithm approximation of programs: how and why Andersen’s algorithm in Prolog points-to analysis expressed via just four deduction rules Andersen’s algorithm via CYK parsing (optional) expressed as CYK parsing of a graph representing the pgm Static Analysis of Programs definition and motivation 3 Static program analysis Computes program properties used by a range of clients: compiler optimizers, static debuggers, security audit tools, IDEs, … Static analysis == at compile time – that is, prior to seeing the actual input ==> analysis answer must be correct for all possible inputs Sample program properties: does variable x has a constant value (for all inputs)? does foo() return a table (whenever called, on all inputs)? 4 Client 1: Program Optimization Optimize program by finding constant subexpressions Ex: replace x[i] with x[1] if we know that i is always 1. This optimizations saves the address computation. This analysis is called constant propagation i = 2 … i = i+2 … if (…) { …} … x[i] = x[i-1] 5 Client 2: Find security vulnerabilities One specific analysis: find broken sanitization In a web server program, as whether a value can flow from POST (untrusted source) to the SQL interpreter (trusted sink) without passing through the cgi.escape() sanitizer? This is taint analysis.
    [Show full text]
  • An Operational Semantics and Type Safety Proof for Multiple Inheritance in C++
    An Operational Semantics and Type Safety Proof for Multiple Inheritance in C++ Daniel Wasserrab Tobias Nipkow Gregor Snelting Frank Tip Universitat¨ Passau Technische Universitat¨ Universitat¨ Passau IBM T.J. Watson Research [email protected] Munchen¨ [email protected] Center passau.de [email protected] passau.de [email protected] Abstract pected type, or end with an exception. The semantics and proof are formalized and machine-checked using the Isabelle/HOL theorem We present an operational semantics and type safety proof for 1 multiple inheritance in C++. The semantics models the behaviour prover [15] and are available online . of method calls, field accesses, and two forms of casts in C++ class One of the main sources of complexity in C++ is a complex hierarchies exactly, and the type safety proof was formalized and form of multiple inheritance, in which a combination of shared machine-checked in Isabelle/HOL. Our semantics enables one, for (“virtual”) and repeated (“nonvirtual”) inheritance is permitted. Be- the first time, to understand the behaviour of operations on C++ cause of this complexity, the behaviour of operations on C++ class class hierarchies without referring to implementation-level artifacts hierarchies has traditionally been defined informally [29], and in such as virtual function tables. Moreover, it can—as the semantics terms of implementation-level constructs such as v-tables. We are is executable—act as a reference for compilers, and it can form only aware of a few formal treatments—and of no operational the basis for more advanced correctness proofs of, e.g., automated semantics—for C++-like languages with shared and repeated mul- program transformations.
    [Show full text]
  • Chapter 8 Automation Using Powershell
    Chapter 8 Automation Using PowerShell Virtual Machine Manager is one of the first Microsoft software products to fully adopt Windows PowerShell and offer its users a complete management interface tailored for script- ing. From the first release of VMM 2007, the Virtual Machine Manager Administrator Console was written on top of Windows PowerShell, utilizing the many cmdlets that VMM offers. This approach made VMM very extensible and partner friendly and allows customers to accomplish anything that VMM offers in the Administrator Console via scripts and automation. Windows PowerShell is also the only public application programming interface (API) that VMM offers, giving both developers and administrators a single point of reference for managing VMM. Writing scripts that interface with VMM, Hyper-V, or Virtual Server can be made very easy using Windows PowerShell’s support for WMI, .NET, and COM. In this chapter, you will learn to: ◆ Describe the main benefits that PowerShell offers for VMM ◆ Use the VMM PowerShell cmdlets ◆ Create scheduled PowerShell scripts VMM and Windows PowerShell System Center Virtual Machine Manager (VMM) 2007, the first release of VMM, was one of the first products to develop its entire graphical user interface (the VMM Administrator Con- sole) on top of Windows PowerShell (previously known as Monad). This approach proved very advantageous for customers that wanted all of the VMM functionality to be available through some form of an API. The VMM team made early bets on Windows PowerShell as its public management interface, and they have not been disappointed with the results. With its consis- tent grammar, the great integration with .NET, and the abundance of cmdlets, PowerShell is quickly becoming the management interface of choice for enterprise applications.
    [Show full text]
  • Mastering Powershellpowershell
    CopyrightCopyright © 2009 BBS Technologies ALL RIGHTS RESERVED. No part of this work covered by the copyright herein may be reproduced, transmitted, stored, or used in any form or by any means graphic, electronic, or mechanical, including but not limited to photocopying, recording, scanning, digitizing, taping, Web distribution, information networks, or information storage and retrieval systems except as permitted under Section 107 or 108 of the 1976 United States Copyright Act without the prior written permission of the publisher. For permission to use material from the text please contact Idera at [email protected]. Microsoft® Windows PowerShell® and Microsoft® SQL Server® are registered trademarks of Microsoft Corporation in the United Stated and other countries. All other trademarks are the property of their respective owners. AboutAbout thethe AuthorAuthor Dr. Tobias Weltner is one of the most visible PowerShell MVPs in Europe. He has published more than 80 books on Windows and Scripting Techniques with Microsoft Press and other publishers, is a regular speaker at conferences and road shows and does high level PowerShell and Scripting trainings for companies throughout Europe. He created the powershell.com website and community in an effort to help people adopt and use PowerShell more efficiently. As software architect, he created a number of award-winning scripting tools such as SystemScripter (VBScript), the original PowerShell IDE and PowerShell Plus, a comprehensive integrated PowerShell development system. AcknowledgmentsAcknowledgments First and foremost, I’d like to thank my family who is always a source of inspiration and encouragement. A special thanks to Idera, Rick Pleczko, David Fargo, Richard Giles, Conley Smith and David Twamley for helping to bring this book to the English speaking world.
    [Show full text]
  • Lecture Notes on Language-Based Security
    Lecture Notes on Language-Based Security Erik Poll Radboud University Nijmegen Updated September 2019 These lecture notes discuss language-based security, which is the term loosely used for the collection of features and mechanisms that a programming language can provide to help in building secure applications. These features include: memory safety and typing, as offered by so-called safe pro- gramming languages; language mechanisms to enforce various forms of access con- trol (such as sandboxing), similar to access control traditionally offered by operating systems; mechanisms that go beyond what typical operating systems do, such as information flow control. Contents 1 Introduction 4 2 Operating system based security 7 2.1 Operating system abstractions and access control . .7 2.2 Imperfections in abstractions . 10 2.3 What goes wrong . 10 3 Safe programming languages 12 3.1 Safety & (un)definedness . 13 3.1.1 Safety and security . 14 3.2 Memory safety . 15 3.2.1 Ensuring memory safety . 15 3.2.2 Memory safety and undefinedness . 16 3.2.3 Stronger notions of memory safety . 16 3.3 Type safety . 17 3.3.1 Expressivity . 18 3.3.2 Breaking type safety . 18 3.3.3 Ensuring type safety . 19 3.4 Other notions of safety . 19 3.4.1 Safety concerns in low-level languages . 20 3.4.2 Safe arithmetic . 20 3.4.3 Thread safety . 21 3.5 Other language-level guarantees . 22 3.5.1 Visibility . 22 3.5.2 Constant values and immutable data structures . 23 4 Language-based access control 26 4.1 Language platforms .
    [Show full text]
  • Monadic State: Axiomatization and Type Safety
    Monadic State Axiomatization and Typ e Safety John Launchbury Amr Sabry Oregon Graduate Institute Department of Computer Science PO Box University of Oregon Portland OR Eugene OR jlcseogiedu sabrycsuoregonedu Our formal investigation reveals two subtle p oints that Abstract the previous informal reasoning failed to uncover First Typ e safety of imp erative programs is an area fraught with arbitrary b etareduction is unsound in a compiler which diculty and requiring great care The SML solution to the enco des statetransformers as statepassing functionsany problem originall y involving imp erative typ e variables has compiler that implemented the denotational semantics di b een recently simplied to the syntacticvalue restriction In rectly would have to take great care never to duplicate the Haskell the problem is addressed in a rather dierent way state parameter Second the recursive state op erator fixST using explicit monadic state We present an op erational cannot b e interpreted navely in callbyname but really semantics for state in Haskell and the rst full pro of of typ e needs callbyneed to make sense safety We demonstrate that the semantic notion of value provided by the explicit monadic typ es is able to avoid any Imp erative Typ es problems with generalization We b egin by reviewing the issue of typ e safety The need Intro duction for a sp ecial care arises in SML b ecause of examples like the following When Launchbury and Peyton Jones intro duced encapsu lated monadic state it came equipp ed with a de let val r ref fn
    [Show full text]
  • Advanced Programming Techniques Christopher Moretti
    Advanced Programming Techniques C++ Survey Christopher Moretti TIOBE Index April 2016 http://www.tiobe.com/tiobe_index Trending … not so great McJuggerNuggets Halcyon Days of C ❖ Representation is visible Charlie Fleming ❖ Opaque types are an impoverished workaround ❖ Manual creation and copying ❖ Manual initialization ❖ if you remember to do it! ❖ Manual deletion ❖ if you remember to do it! ❖ No type-safety No data abstraction mechanisms C++ as a Reaction to C ❖ A “Better” C ❖ Almost completely upwards compatible with C ❖ Function prototypes as interfaces (later added to ANSI C) ❖ Reasonable data abstraction ❖ methods reveal what is done, but how is hidden ❖ Parameterized types ❖ Object-oriented C++ Origins ❖ Developed at Bell Labs ca. 1980 by Bjarne Stroustrup ❖ “Initial aim for C++ was a language where I could write programs that were as elegant as Simula programs, yet as efficient as C programs.” ❖ Commercial release 1985, standards in 1998, 2014, and 2017(?) ❖ Stroustrup won the 2015 Dahl- Nygaard Prize for contributions to OOP (given by AITO). @humansky With apologies to Yogi Berra I really didn’t say everything I said! “C makes it easy to shoot yourself in the foot; C++ makes it harder, but when you do it blows your whole leg off.” “Within C++, there is a much smaller and cleaner language struggling to get out. […] And no, that smaller and cleaner language is not Java or C#.” “There are more useful systems developed in languages deemed awful than in languages praised for being beautiful--many more” “There are only two kinds of languages: the ones people complain about and the ones nobody uses” www.stroustrup.com quote checker C++: undersold as “C with Classes” ❖ Yes, classes, but also … + = ??? ❖ Data abstraction.
    [Show full text]
  • An Introduction to Subtyping
    An Introduction to Subtyping Type systems are to me the most interesting aspect of modern programming languages. Subtyping is an important notion that is helpful for describing and reasoning about type systems. This document describes much of what you need to know about subtyping. I’ve taken some of the definitions, notation, and presentation ideas in this document from Kim Bruce's text "Fundamental Concepts of Object-Oriented Languages" which is a great book and the one that I use in my graduate programming languages course. I’ve also borrowed ideas from Cardelli and Wegner. 1.1. What is Subtyping When is an assignment, x = y legal? There are at least two possible answers: 1. When x and y are of equal types 2. When y’s type can be “converted” to x’s type The discussion of name and structural equality (which we went into earlier in this course) takes care of the first aspect. What about the second aspect? When can a type be safely converted to another type? Remember that a type is just a set of values. For example, an INTEGER type is the set of values from minint to maxint, inclusive. Once we consider types as set of values, we realize immediately one set may be a subset of another set. [0 TO 10] is a subset of [0 TO 100] [0 TO 100] is a subset of INTEGER [0 TO 10] has a non-empty intersection with [5 TO 20] but is not a subset of [5 TO 20] When the set of values in one type, T, is a subset of the set of values in another type, U, we say that T is a subtype of U.
    [Show full text]
  • Lecture #14: Proving Type-Safety
    Lecture #14: Proving Type-Safety CS 6371: Advanced Programming Languages February 27, 2020 A language's static semantics are designed to eliminate runtime stuck states. Recall that stuck states are non-final configurations whose runtime behavior is undefined according to the language's small-step operational semantics. Definition 1 (Final state). Configuration hc; σi is a final state if c = skip. Definition 2 (Stuck state). Configuration hc; σi is a stuck state if it is non-final and there is 0 0 0 0 no configuration hc ; σ i such that the judgment hc; σi !1 hc ; σ i is derivable. A language is said to be type-safe if its static semantics prevent all stuck states. To define this formally, we need a definition of what it means for a program to be well-typed. Definition 3 (Well-typed commands). A program c is well-typed in context Γ if there exists a typing context Γ0 such that judgment Γ ` c :Γ0 is derivable. We say simply that c is well-typed if it is well-typed in context ?. Definition 4 (Well-typed expressions). Similarly, an expression e is well-typed in context Γ if there exists a type τ such that judgment Γ ` e : τ is derivable; and we say simply that e is well-typed if it is well-typed in context ?. Definition 5 (Type safety). A language is type-safe if for every well-typed program c and 0 0 0 0 number of steps n 2 N, if hc; ?i !n hc ; σ i then configuration hc ; σ i is not a stuck state.
    [Show full text]
  • Ccured: Type-Safe Retrofitting of Legacy Software
    pdfauthor CCured: Type-Safe Retrofitting of Legacy Software GEORGE C. NECULA, JEREMY CONDIT, MATTHEW HARREN, SCOTT McPEAK, and WESTLEY WEIMER University of California, Berkeley This paper describes CCured, a program transformation system that adds type safety guarantees to existing C programs. CCured attempts to verify statically that memory errors cannot occur, and it inserts run-time checks where static verification is insufficient. CCured extends C’s type system by separating pointer types according to their usage, and it uses a surprisingly simple type inference algorithm that is able to infer the appropriate pointer kinds for existing C programs. CCured uses physical subtyping to recognize and verify a large number of type casts at compile time. Additional type casts are verified using run-time type information. CCured uses two instrumentation schemes, one that is optimized for performance and one in which metadata is stored in a separate data structure whose shape mirrors that of the original user data. This latter scheme allows instrumented programs to invoke external functions directly on the program’s data without the use of a wrapper function. We have used CCured on real-world security-critical network daemons to produce instrumented versions without memory-safety vulnerabilities, and we have found several bugs in these programs. The instrumented code is efficient enough to be used in day-to-day operations. Categories and Subject Descriptors: D.2.4 [Software Engineering]: Program Verification; D.2.5 [Software Engineering]: Testing and Debugging; D.2.7 [Software Engineering]: Distribution and Maintenance; D.3.3 [Programming Languages]: Language Constructs and Features General Terms: Languages, Reliability, Security, Verification Additional Key Words and Phrases: memory safety, pointer qualifier, subtyping, libraries 1.
    [Show full text]