Semantics  



Semantics of programming languages  


Operational semantics is a category of formal programming language semantics in which certain desired properties of a program, such as correctness, safety or security, are verified by constructing proofs from logical statements about its execution and procedures, rather than by attaching mathematical meanings to its terms (denotational semantics). Operational semantics are classified in two categories: structural operational semantics (or smallstep semantics) formally describe how the individual steps of a computation take place in a computerbased system; by opposition natural semantics (or bigstep semantics) describe how the overall results of the executions are obtained. Other approaches to providing a formal semantics of programming languages include axiomatic semantics and denotational semantics.
The operational semantics for a programming language describes how a valid program is interpreted as sequences of computational steps. These sequences then are the meaning of the program. In the context of functional programming, the final step in a terminating sequence returns the value of the program. (In general there can be many return values for a single program, because the program could be nondeterministic, and even for a deterministic program there can be many computation sequences since the semantics may not specify exactly what sequence of operations arrives at that value.)
Perhaps the first formal incarnation of operational semantics was the use of the lambda calculus to define the semantics of Lisp.^{[1]} Abstract machines in the tradition of the SECD machine are also closely related.
The concept of operational semantics was used for the first time in defining the semantics of Algol 68. The following statement is a quote from the revised ALGOL 68 report:
The meaning of a program in the strict language is explained in terms of a hypothetical computer which performs the set of actions that constitute the elaboration of that program. (Algol68, Section 2)
The first use of the term "operational semantics" in its present meaning is attributed to Dana Scott (Plotkin04). What follows is a quote from Scott's seminal paper on formal semantics, in which he mentions the "operational" aspects of semantics.
It is all very well to aim for a more ‘abstract’ and a ‘cleaner’ approach to semantics, but if the plan is to be any good, the operational aspects cannot be completely ignored. (Scott70)
Gordon Plotkin introduced the structural operational semantics, Matthias Felleisen and Robert Hieb the reduction semantics,^{[2]} and Gilles Kahn the natural semantics.
Structural operational semantics (SOS, also called structured operational semantics or smallstep semantics) was introduced by Gordon Plotkin in (Plotkin81) as a logical means to define operational semantics. The basic idea behind SOS is to define the behavior of a program in terms of the behavior of its parts, thus providing a structural, i.e., syntaxoriented and inductive, view on operational semantics. An SOS specification defines the behavior of a program in terms of a (set of) transition relation(s). SOS specifications take the form of a set of inference rules that define the valid transitions of a composite piece of syntax in terms of the transitions of its components.
For a simple example, we consider part of the semantics of a simple programming language; proper illustrations are given in Plotkin81 and Hennessy90, and other textbooks. Let range over programs of the language, and let range over states (e.g. functions from memory locations to values). If we have expressions (ranged over by ), values () and locations (), then a memory update command would have semantics:
Informally, the rule says that "if the expression in state reduces to value , then the program will update the state with the assignment ".
The semantics of sequencing can be given by the following three rules:
Informally, the first rule says that, if program in state finishes in state , then the program in state will reduce to the program in state . (You can think of this as formalizing "You can run , and then run using the resulting memory store.) The second rule says that if the program in state can reduce to the program with state , then the program in state will reduce to the program in state . (You can think of this as formalizing the principle for an optimizing compiler: "You are allowed to transform as if it were standalone, even if it is just the first part of a program.") The semantics is structural, because the meaning of the sequential program , is defined by the meaning of and the meaning of .
If we also have Boolean expressions over the state, ranged over by , then we can define the semantics of the while command:
Such a definition allows formal analysis of the behavior of programs, permitting the study of relations between programs. Important relations include simulation preorders and bisimulation. These are especially useful in the context of concurrency theory.
Thanks to its intuitive look and easytofollow structure, SOS has gained great popularity and has become a de facto standard in defining operational semantics. As a sign of success, the original report (socalled Aarhus report) on SOS (Plotkin81) has attracted more than 1000 citations according to the CiteSeer [1], making it one of the most cited technical reports in Computer Science.
Reduction semantics is an alternative presentation of operational semantics. Its key ideas were first applied to purely functional call by name and call by value variants of the lambda calculus by Gordon Plotkin in 1975^{[3]} and generalized to higherorder functional languages with imperative features by Matthias Felleisen in his 1987 dissertation.^{[4]} The method was further elaborated by Matthias Felleisen and Robert Hieb in 1992 into a fully equational theory for control and state.^{[2]} The phrase “reduction semantics” itself was first coined by Felleisen and Daniel P. Friedman in a PARLE 1987 paper.^{[5]}
Reduction semantics are given as a set of reduction rules that each specify a single potential reduction step. For example, the following reduction rule states that an assignment statement can be reduced if it sits immediately beside its variable declaration:
To get an assignment statement into such a position it is “bubbled up” through function applications and the righthand side of assignment statements until it reaches the proper point. Since intervening expressions may declare distinct variables, the calculus also demands an extrusion rule for expressions. Most published uses of reduction semantics define such “bubble rules” with the convenience of evaluation contexts. For example, the grammar of evaluation contexts in a simple call by value language can be given as
where denotes arbitrary expressions and denotes fullyreduced values. Each evaluation context includes exactly one hole into which a term is plugged in a capturing fashion. The shape of the context indicates with this hole where reduction may occur. To describe “bubbling” with the aid of evaluation contexts, a single axiom suffices:
This single reduction rule is the lift rule from Felleisen and Hieb's lambda calculus for assignment statements. The evaluation contexts restrict this rule to certain terms, but it is freely applicable in any term, including under lambdas.
Following Plotkin, showing the usefulness of a calculus derived from a set of reduction rules demands (1) a ChurchRosser lemma for the singlestep relation, which induces an evaluation function, and (2) a CurryFeys standardization lemma for the transitivereflexive closure of the singlestep relation, which replaces the nondeterministic search in the evaluation function with a deterministic leftmost/outermost search. Felleisen showed that imperative extensions of this calculus satisfy these theorems. Consequences of these theorems are that the equational theory—the symmetrictransitivereflexive closure—is a sound reasoning principle for these languages. However, in practice, most applications of reduction semantics dispense with the calculus and use the standard reduction only (and the evaluator that can be derived from it).
Reduction semantics are particularly useful given the ease by which evaluation contexts can model state or unusual control constructs (e.g., firstclass continuations). In addition, reduction semantics have been used to model objectoriented languages,^{[6]} contract systems, exceptions, futures, callbyneed, and many other language features. A thorough, modern treatment of reduction semantics that discusses several such applications at length is given by Matthias Felleisen, Robert Bruce Findler and Matthew Flatt in Semantics Engineering with PLT Redex.^{[7]}
Bigstep structural operational semantics is also known under the names natural semantics, relational semantics and evaluation semantics.^{[8]} Bigstep operational semantics was introduced under the name natural semantics by Gilles Kahn when presenting MiniML, a pure dialect of ML.
One can view bigstep definitions as definitions of functions, or more generally of relations, interpreting each language construct in an appropriate domain. Its intuitiveness makes it a popular choice for semantics specification in programming languages, but it has some drawbacks that make it inconvenient or impossible to use in many situations, such as languages with controlintensive features or concurrency.
A bigstep semantics describes in a divideandconquer manner how final evaluation results of language constructs can be obtained by combining the evaluation results of their syntactic counterparts (subexpressions, substatements, etc.).
There are a number of distinctions between smallstep and bigstep semantics that influence whether one or the other forms a more suitable basis for specifying the semantics of a programming language.
Bigstep semantics have the advantage of often being simpler (needing fewer inference rules) and often directly correspond to an efficient implementation of an interpreter for the language (hence Kahn calling them "natural".) Both can lead to simpler proofs, for example when proving the preservation of correctness under some program transformation.^{[9]}
The main disadvantage of bigstep semantics is that nonterminating (diverging) computations do not have an inference tree, making it impossible to state and prove properties about such computations.^{[9]}
Smallstep semantics give more control over the details and order of evaluation. In the case of instrumented operational semantics, this allows the operational semantics to track and the semanticist to state and prove more accurate theorems about the runtime behaviour of the language. These properties make smallstep semantics more convenient when proving type soundness of a type system against an operational semantics.^{[9]}