lh-l4v/spec/haskell
Gerwin Klein e2355c7114
aarch64 haskell: check cap type in checkVSpaceRoot
Correctly check the type of the table the PageTableCap points to in
checkVSpaceRoot (must be a VSRootPT, not NormalPT).

Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>
2023-09-27 14:28:32 +10:00
..
include run astyle on all C files in the repository 2020-04-19 13:50:17 +08:00
src aarch64 haskell: check cap type in checkVSpaceRoot 2023-09-27 14:28:32 +10:00
.gitignore haskell: use ghc-9.0.2 and cabal v2 commands 2022-06-24 13:07:17 +10:00
Makefile haskell: constrain run_tests to current L4V_ARCH 2023-05-31 14:46:35 +10:00
README.md licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
SEL4.cabal haskell: upgrade to lts-20.25 and ghc 9.2.8 2023-06-19 10:00:45 +10:00
Setup.hs haskell: add build configuration for AARCH64 on TX2 platform 2022-04-20 09:16:19 +10:00
configure licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
mkhsboot.pl licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
stack-path licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
stack.yaml haskell: upgrade to lts-20.25 and ghc 9.2.8 2023-06-19 10:00:45 +10:00

README.md

The seL4 Haskell Model

The sources in this directory can be used to build a Haskell Cabal package containing an executable model of the seL4 kernel. The model cannot run stand-alone; it must be integrated into a simulator that can run user-level binaries and generate events that the kernel model can process.

To build it:

  • install the Haskell build tool stack.
  • run make

The Makefile will use stack to fetch appropriate versions of ghc and cabal-install.

After that, you can compile Haskell programs using the simulator by adding -package SEL4 to the ghc command line. Note that the qemu target requires some callback functions to be accessible via the FFI, so it is not possible to load a model compiled for those targets in GHCi.

Currently, the simulator interface is out of date, so this model is currently only useful as documentation and as intermediate artefact in the seL4 correctness proof. The model itself is kept up to date with the C code, only the simulator interface is outdated.