Open Access
- 7 January 2025
- journal article
- Published by Association for Computing Machinery (ACM) in Proceedings of the ACM on Programming Languages
- Vol. 9 (POPL) , 1446-1474
Abstract
We present Generic Refinement Types : a way to write modular higher-order specifications that abstract invariants over function contracts, while preserving automatic SMT-decidable verification. We show how generic refinements let us write a variety of modular higher-order specifications, including specifications for Rust’s traits which abstract over the concrete refinements that hold for different trait implementations. We formalize generic refinements in a core calculus and show how to synthesize the generic instantiations algorithmically at usage sites via a combination of syntactic unification and constraint solving. We give semantics to generic refinements via the intuition that they correspond to ghost parameters , and we formalize this intuition via a type-preserving translation into the polymorphic contract calculus to establish the soundness of generic refinements. Finally, we evaluate generic refinements by implementing them in F luk and using it for two case studies. First, we show how generic refinements let us write modular specifications for Rust’s vector indexing API that lets us statically verify the bounds safety of a variety of vector-manipulating benchmarks from the literature. Second, we use generic refinements to refine Rust’s diesel ORM library to track the semantics of the database queries issued by client applications, and hence, statically enforce data-dependent access-control policies in several database-backed web applications.Keywords
Funding Information
- NSF (CNS-2327336, CNS-2155235, CNS-2120642)
This publication has 29 references indexed in Scilit:
- Specifying and Verifying Higher-order Rust Iterators2023
- Creusot: A Foundry for the Deductive Verification of Rust Programs2022
- The Lean Theorem Prover (System Description)2015
- Why3 — Where Programs Meet Provers2013
- Abstract Refinement Types2013
- Secure distributed programming with value-dependent types2011
- Polymorphic Contracts2011
- Dafny: An Automatic Program Verifier for Functional Correctness2010
- Liquid types2008
- Indexed typesTheoretical Computer Science, 1997