A Run-time Assertion Checker for Java using JML

The Java Modeling Language (JML) is a behavioral interface speci cation language tailored for specifying Java modules. This paper describes a source-to-source translation tool that takes a JML speci cation and Java source code for a module and produces source code that checks assertions at run-time. It describes issues unique to JML, including speci cation-only variables, re nement, speci cation inheritance, and privacy. It also describes the design and implementation of the translation tool.