In this talk I'll discuss recent work carried out at Silicon Graphics [1] in using the Cadence Berkeley Labs SMV model-checking tool to formally model and verify a pipelined implementation of a directory-based cache-coherency protocol. The implementation hardware forms the most complex part of a 1M-gate ASIC that is used in SGI Origin 200 and 2000 multiprocessor servers.
The verification involves comparing the implementation against a reference specification of the protocol. It makes essential use of compositional methods to divide the verification into pieces --- each with no more than 250 bits of state --- that are manageable by the SMV tool.
The verification initially helped with the diagnosis and repair of subtle faults that only showed up in field tests of early versions of the servers. Subsequently it was used to check updated designs of the cache-coherency hardware. This work demonstrates that it is now possible for a hardware designer to formally design complex hardware within the strict time schedule of a design project.
|
Informatics Forum, 10 Crichton Street, Edinburgh, EH8 9AB, Scotland, UK
Tel: +44 131 651 5661, Fax: +44 131 651 1426, E-mail: school-office@inf.ed.ac.uk Please contact our webadmin with any comments or corrections. Unless explicitly stated otherwise, all material is copyright © The University of Edinburgh |