lh-l4v/proof/invariant-abstract/VSpace_AI.thy

(*
 * Copyright 2014, General Dynamics C4 Systems
 *
 * This software may be distributed and modified according to the terms of
 * the GNU General Public License version 2. Note that NO WARRANTY is provided.
 * See "LICENSE_GPLv2.txt" for details.
 *
 * @TAG(GD_GPL)
 *)

(*
Architecture-independent VSpace invariant proofs
*)

theory VSpace_AI
imports "./$L4V_ARCH/ArchVSpace_AI"
begin
context begin interpretation Arch .

requalify_facts
   pspace_respects_device_region_dmo
   cap_refs_respects_device_region_dmo

end

lemmas device_region_dmos = pspace_respects_device_region_dmo

end
Import release snapshot. 2014-07-14 19:32:44 +00:00			`(*`
			`* Copyright 2014, General Dynamics C4 Systems`
			`*`
			`* This software may be distributed and modified according to the terms of`
			`* the GNU General Public License version 2. Note that NO WARRANTY is provided.`
			`* See "LICENSE_GPLv2.txt" for details.`
			`*`
			`* @TAG(GD_GPL)`
			`*)`

Removes all trailing whitespaces 2017-07-12 05:13:51 +00:00			`(*`
arch_split: some quick and dirty arch_splitting by selectively interpreting the ARM locale (with FIXMEs) 2016-04-07 07:05:14 +00:00			`Architecture-independent VSpace invariant proofs`
Import release snapshot. 2014-07-14 19:32:44 +00:00			`*)`

			`theory VSpace_AI`
arch_split: checkpoint. Checks up to ArchVSpace_AI with two sorries (MattB WIP) 2016-04-06 04:25:52 +00:00			`imports "./$L4V_ARCH/ArchVSpace_AI"`
Import release snapshot. 2014-07-14 19:32:44 +00:00			`begin`
SELFOUR-421: merge and fix up to ArmConfidentiality proof 2016-09-22 09:12:33 +00:00			`context begin interpretation Arch .`
Import release snapshot. 2014-07-14 19:32:44 +00:00
SELFOUR-421: merge and fix up to ArmConfidentiality proof 2016-09-22 09:12:33 +00:00			`requalify_facts`
			`pspace_respects_device_region_dmo`
			`cap_refs_respects_device_region_dmo`
x64: ArchVSpaceLookup_AI: prove vs_lookup_pages1_wellformed_order Show that there is a measure on vs_refs, on which vs_lookup_pages1 is strictly monotonically increasing. We also prove various lemmas relating vs_lookup and vs_lookup_pages, and valid_arch_objs. There are many things previously proved in ArchRetype_AI and ArchDetype_AI that are now broken because Xin's work overwrote some things I also proved in ArchVSpace_AI. I'm not fixing them here. 2017-02-01 08:08:13 +00:00
Import release snapshot. 2014-07-14 19:32:44 +00:00			`end`
SELFOUR-421: fix coding style 2016-09-22 02:05:17 +00:00
SELFOUR-421: merge and fix up to ArmConfidentiality proof 2016-09-22 09:12:33 +00:00			`lemmas device_region_dmos = pspace_respects_device_region_dmo`
Import release snapshot. 2014-07-14 19:32:44 +00:00
			`end`