- ...long.
- For example, in a software model-checking experiment
performed by researchers at NASA Ames and Honeywell, checking
properties of the DEOS real-time operating system scheduler produced
SPIN counterexamples over 2700 steps long [14].
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...Spin
- http://netlib.bell-labs.com/netlib/spin/whatispin.html
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...SMV
- http://sra.itc.it/tools/nusmv/
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...DSpin
- http://www.dai-arc.polito.it/dai-arc/auto/tools/tool7.shtml
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...JPF
- http://ase.arc.nasa.gov/visser/jpf
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...GNU's
- http://gcc.gnu.org/
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...DJGPP's
- http://www.djgpp.com
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...window.
- We
hope to display the actual text in future versions of Bandera.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- ...method).
- Even
though Java does not include goto's, it includes labels to
indicate the targets of break and continue statements.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.