Puss in Boots: Formalizing Arm’s Virtual Memory System Architecture

We present our formalization of Arm’s Virtual Memory System Architecture (VMSA). This work has been developed with, and ratified by, Arm and its partners, and is now a part of the Arm Architecture Reference Manual. Additionally, we present our experimental validation methodology, which required extending kernel virtual machine (KVM) unit tests, a test harness for the KVM. We used this infrastructure to run approximately 1300 VMSA litmus tests on a variety of Arm machines, thereby validating our model with respect to existing hardware. Our testing uncovered infidelities in the definition of a feature called translation table hardware management, which led Arm to relax its architecture to accommodate those cases. Finally, as part of this work, we uncovered subtleties in the definition of a feature of the VMSA called enhanced translation synchronization (ETS), which led Arm to deprecate ETS and replace it with a stronger feature called ETS2.