Issue No. 02 - February (2011 vol. 60)

ISSN: 0018-9340

pp: 242-253

DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/TC.2010.128

Florent de Dinechin , Université de Lyon, Lyon

Christoph Lauter , Intel Corporation, Hillsboro

Guillaume Melquiond , INRIA, Orsay

ABSTRACT

High confidence in floating-point programs requires proving numerical properties of final and intermediate values. One may need to guarantee that a value stays within some range, or that the error relative to some ideal value is well bounded. This certification may require a time-consuming proof for each line of code, and it is usually broken by the smallest change to the code, e.g., for maintenance or optimization purpose. Certifying floating-point programs by hand is, therefore, very tedious and error-prone. The Gappa proof assistant is designed to make this task both easier and more secure, due to the following novel features: It automates the evaluation and propagation of rounding errors using interval arithmetic. Its input format is very close to the actual code to validate. It can be used incrementally to prove complex mathematical properties pertaining to the code. It generates a formal proof of the results, which can be checked independently by a lower level proof assistant like Coq. Yet it does not require any specific knowledge about automatic theorem proving, and thus, is accessible to a wide community. This paper demonstrates the practical use of this tool for a widely used class of floating-point programs: implementations of elementary functions in a mathematical library.

INDEX TERMS

Correctness proofs, error analysis, elementary function approximation.

CITATION

Florent de Dinechin, Christoph Lauter, Guillaume Melquiond, "Certifying the Floating-Point Implementation of an Elementary Function Using Gappa",

*IEEE Transactions on Computers*, vol. 60, no. , pp. 242-253, February 2011, doi:10.1109/TC.2010.128