Modular Specification of Frame Properties in JML
				  by
      Peter Mueller, Arnd Poetzsch-Heffter, and Gary T. Leavens

			       Abstract

We present a modular specification technique for frame properties.
The technique uses modifies clauses and abstract fields with
declared dependencies.  Modularity is guaranteed by a
programming model that restricts aliasing, and by modularity
requirements for dependencies.  For concreteness, we adapt this technique 
to the Java Modeling Language, JML.



Keywords: frame property, frame axiom, modifies clause, depends
clause, pivot object, rep exposure, argument exposure, ownership type
model, universe type system, data abstraction, aliasing, mutation,
modularity, specification, verification, Java language, JML language.


2000 CR Categories: 
D.2.1 [Software Engineering]
        Requirements/Specifications --- languages, tools, JML;
D.2.2 [Software Engineering]
        Design Tools and Techniques --- Object-oriented design methods;
D.2.3 [Software Engineering]
        Coding Tools and Techniques --- Object-oriented programming;
D.2.4 [Software Engineering]
        Software/Program Verification --- Class invariants,
        correctness proofs, formal methods,
        programming by contract, reliability, tools, JML;
D.2.7 [Software Engineering]
	Distribution, Maintenance, and Enhancement --- Documentation;
D.2.13 [Software Engineering]
	Reusable Software --- Reusable libraries;
D.3.2 [Programming Languages]
	Language Classifications --- Object-oriented langauges;
D.3.3 [Programming Languages]
	Language Constructs and Features --- Abstract data types,
        classes and objects, modules, packages, polymorphism,
        procedures, functions, and subroutines;
F.3.1 [Logics and Meanings of Programs]
        Specifying and Verifying and Reasoning about Programs ---
        Assertions, invariants, logics of programs,
        pre- and post-conditions, specification techniques;

Copyright (c) 2001 by Peter Mueller, Arnd Poetzsch-Heffter, and Gary T. Leavens