Citation Context

...so that a class does not need to know the invariants of its superclasses and future subclasses, object invariants are partitioned into class frames according to the class that declares each invariant =-=[3, 17]-=-. The expose mechanism deals with class frames. 11 To reduce the programmer’s initial cost of adding expose statements and to handle non-virtual methods in a more backward compatible way (see [3]), Sp...

Citation Context

...c valuestyping. But more sophisticated interface technologies havesbeen developed for object-oriented and other languages.sThese include higher-order value typing like generic types,s[5] state typing =-=[10]-=-, behavioral specification [6, 27, 30]sand others. One area of research is to explore the aspectaware equivalent of these other kinds of interfaces.sOursbelief is that the basic idea of aspect-aware i...

Citation Context

...future solution. In contrast, our approach adds must-not and also introduces the notions of uniqueness and focus, and uses staging to achieve increased scalability and precision. DeLine and Fähndrich =-=[12]-=- present a type system for typestate properties for objects. Their system guarantees that a program that typechecks has no typestate violations, and provides a modular, sound checker for object-orient...

Citation Context

...ffect information has several important applications. For example, many program analyses need to understand how the execution of invoked methods may affect the information that the analysis maintains =-=[15,17,20]-=-. In program understanding and documentation, the knowledge that a method is pure, or has no externally visible side effects, is especially useful because it guarantees that invocations of the method ...

Citation Context

...determine efficiently all objects whose invariant is potentially broken by a field update. Both approaches can be combined with our visibility technique to simplify verification. DeLine and Fähndrich =-=[15]-=- use typestates to express consistency of objects. Typestates can essentially express classical invariants (Def. 3.2) and also allow invariants to depend on inherited fields. Moreover, different invar...

Citation Context

...to specify the way a component should be used and checks these specifications. The SLAM tool by Ball and Rajamani [5] uses a model checker to validate temporal safety properties. DeLine and Fähndrich =-=[9]-=- created FUGUE, a tol that allows for specifying typestates for objects and checking the code for conformance to those typestates. Antoy and Hamlet [4] instrument code defining abstract data types to ...

Citation Context

...lso support a form of polymorphism for refinements. However, those systems lack a language for user-defined type rules and lack automated soundness checking with respect to run-time invariants. Fugue =-=[13]-=- is an adaptation and extension of Vault’s type system to perform static checking of temporal protocols for C# [6]. Among other innovations, Fugue allows a class’s typestates, which are the analogues ...

Citation Context

... like Hibernate-QL. In keeping with the dynamic typing of the Scheme language, SchemeQL validates queries at runtime and provides no static checks. Gould, Su and Devanbu [11] and Deline and Fahndrich =-=[10]-=- use static analysis to type check programs with embedded SQL. They track the construction of strings containing SQL so that they can be checked against the SQL grammar and typing rules. Their analysi...