Applying Model Checking to an Automotive Microcontroller Application

Microcontrollers in automotive applications perform more and more safety critical functions. The reliability of these systems is of great importance and model checking is seen as a promising future tool for the analysis of the corresponding software. For this purpose an explicit, on-the-fly CTL model checker for assembly code called [mc]square was developed at our institute. This paper describes a case study that was conducted using [mc] square. The aim of this case study was to model check programs that solve an automotive problem, namely a four channel speed measurement with CAN bus interface. The programs were written by students in a lab course without the application of model checking in mind. Hence, these programs contain all features which can be found in real world software. This case study showed that small or medium sized microcontroller programs can be verified without respectively with minor modifications. Additional potentials for future improvements to handle more complex programs have been identified.