On the correctness of Egalitarian Paxos

06/26/2019

∙

by   Pierre Sutra, et al.

∙

0

∙

share

This paper identifies a problem in both the TLA+ specification and the implementation of the Egalitarian Paxos protocol. It is related to how replicas switch from one ballot to another when computing the dependencies of a command. The problem may lead replicas to diverge and break the linearizability of the replicated service.