Formal Specification and Verification of JDK’s Identity Hash Map Implementation

• Published in: Integrated Formal Methods pp. 45 - 62
• Main Authors: Boer, Martin de, Gouw, Stijn de, Klamroth, Jonas, Jung, Christian, Ulbrich, Mattias, Weigl, Alexander
• Format: Book Chapter
• Language: English
• Published: Cham Springer International Publishing
• Series: Lecture Notes in Computer Science
• Subjects: Cooperative verification; Deductive program verification; Java Modeling Language; Real-world case study; Verified data structure; Verified hash map
• ISBN: 3031077261; 9783031077265
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/978-3-031-07727-2_4

Hash maps are a common and important data structure in efficient algorithm implementations. Despite their wide-spread use, real-world implementations are not regularly verified. In this paper, we present the first case study of the IdentityHashMap class in the Java JDK. We specified its behavior using the Java Modeling Language (JML) and proved correctness for the main insertion and lookup methods with KeY, a semi-interactive theorem prover for JML-annotated Java programs. Furthermore, we report how unit testing and bounded model checking can be leveraged to find a suitable specification more quickly. We also investigated where the bottlenecks in the verification of hash maps lie for KeY by comparing required automatic proof effort for different hash map implementations and draw conclusions for the choice of hash map implementations regarding their verifiability.