Model Checking, Tla Plus, TLC, Java, Concurrency.
phone call from the customer to complain that everything hangs. The best thing about TLC is what comes next, an explicit trace of the system that leads to the deadlock state: Error: The behavior up to this point is: State 1: <Initial predicate> /\ buffer = <<>> /\ waitSet = {} State 2: <Action line