Abstract: A computer-implemented method for static testing a software system that is decomposed into software units connected by interfaces. The method comprises receiving context information for an interface, which includes at least one postcondition for the at least one output variable of a respective first software unit and/or a precondition for the input variable of a respective second software unit; receiving a selection of a third software unit in so that a substitute decomposition appertaining thereto of the software system into the third software unit and a complement of the third software unit is produced, the third software unit and the complement forming the software system and being connected via a substitute interface; selecting, based on the item of context information a postcondition per output variable of the complement; and testing whether the selected postcondition can be forward-propagated by the third software unit with regard to a formal verification.

Abstract: An internal combustion engine has first and second non-deactivatable cylinder banks. Each cylinder bank is assigned exhaust lines which extend from exhaust manifolds. First and second exhaust-gas turbocharger in the exhaust line are assigned to the first and second cylinders, respectively. A first catalytic converter in the first exhaust line contains the first exhaust-gas turbocharger, and is arranged downstream of the first exhaust-gas turbocharger as viewed in the flow direction of the exhaust gas of the first cylinder bank. A second catalytic converter in the second exhaust line contains the second exhaust-gas turbocharger, and is arranged downstream of the second exhaust-gas turbocharger as viewed in the flow direction of the exhaust gas of the second cylinder bank. A flow transfer line is arranged between the first and the second exhaust line, and a first control element, by an exhaust-gas mass flow passing through the flow transfer line can be regulated.