A Formal Correctness Proof for an EDF Scheduler Implementation - Archive ouverte HAL Access content directly
Conference Papers Year : 2022

A Formal Correctness Proof for an EDF Scheduler Implementation


The scheduler is a critical piece of software in real-time systems. A failure in the scheduler can have serious consequences; therefore, it is important to provide strong cor- rectness guarantees for it. In this paper we propose a formal proof methodology that we apply to an Earliest Deadline First (EDF) scheduler. It consists first in proving the correctness of the election function algorithm and then lifting this proof up to the implementation through refinements. The proofs are formalized in the Coq proof assistant, ensuring that they are free of human errors and that all cases are considered. Our methodology is general enough to be applied to other schedulers or other types of system code. To the best of our knowledge, this is the first time that an implementation of EDF applicable to arbitrary sequences of jobs has been proven correct.
Fichier principal
Vignette du fichier
edf_paper.pdf (874.68 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03671598 , version 1 (18-05-2022)
hal-03671598 , version 2 (17-11-2022)




Florian Vanhems, Vlad Rusu, David Nowak, Gilles Grimaud. A Formal Correctness Proof for an EDF Scheduler Implementation. RTAS 2022: 28th IEEE Real-Time and Embedded Technology and Applications Symposium, May 2022, Milan, Italy. ⟨10.1109/RTAS54340.2022.00030⟩. ⟨hal-03671598v2⟩
246 View
272 Download



Gmail Mastodon Facebook X LinkedIn More