Skip to main content


Specifying a realistic file system


Sidney Amani and Toby Murray




We present the most interesting elements of the correctness specification of BilbyFs, a performant Linux flash file system. The BilbyFs specification supports asynchronous writes, a feature that has been overlooked by several file system verification projects, and has been used to verify the correctness of BilbyFs’s fsync() C implementation. It makes use of nondeterminism to be concise and is shallowly-embedded in higher-order logic.

BibTeX Entry

    author           = {Amani, Sidney and Murray, Toby},
    month            = nov,
    year             = {2015},
    keywords         = {file system specification functional correctness asynchronous writes},
    title            = {Specifying a Realistic File System},
    booktitle        = {Workshop on Models for Formal Analysis of Real Systems},
    pages            = {1--9},
    address          = {Suva, Fiji}


Served by Apache on Linux on seL4.