The Plan

• Bottom-up approach
• Generate static call trees from kernel entry points we’re interested in
• Understand (and document) low-level functions & interfaces
• Build and test Promela implementations of these interfaces
• Translate core IPC C code
• Generate test cases
• Spin, spin, spin