Gerwin Klein
2367dff983
word_lib: move out unused HOL_Lemmas
2016-05-16 21:11:40 +10:00
Gerwin Klein
322f1023f5
word_lib: adjust theory dependencies
2016-05-16 21:11:40 +10:00
Gerwin Klein
2a6df7a9a3
capDL: remove duplicate wordbits
2016-05-16 21:11:40 +10:00
Matthew Brecknell
0e5ffd1ea0
arch_split: requalify abstract theories
2016-04-27 18:46:16 +10:00
Matthew Brecknell
57c29692d0
arch_split: SysInitExamples checking
2016-04-26 09:27:46 +10:00
Japheth Lim
5772559915
regression: bump timeouts further. All timeouts now multiples of 1hr.
2016-02-22 17:38:35 +11:00
Matthew Brecknell
84d2889d45
Isabelle2016: merge master into 2016
2016-02-19 16:17:26 +11:00
Gao Xin
33b5dab6a1
l4v-sabre: proof fix upto InfoFlowC
2016-02-17 11:18:03 +11:00
Matthew Brecknell
c65e290a8b
Isabelle2016: merge master into 2016
2016-02-16 12:52:24 +11:00
Miki Tanaka
e5ff19d1b8
SysInit finished
2016-02-11 11:15:59 +11:00
Japheth Lim
253b04f6d9
regression: use CPU instead of real-time timeouts for all tests.
...
Also update and clarify test spec documentation.
2016-02-01 19:51:13 +11:00
Japheth Lim
3c4b566484
regression: fix tests.xml dependencies to be consistent with ROOTs.
2016-01-07 18:39:50 +11:00
Gerwin Klein
0f2d557679
terminology in comments: async ep -> notifications
2015-11-24 16:58:22 +13:00
Joel Beeren
457a55a831
add arch_tcb object to C, rename aep -> ntfn
2015-11-20 16:02:13 +11:00
Joel Beeren
0a3a1a52b2
aep-binding: finished SysInitExamples
2015-10-02 18:58:25 +10:00
Daniel Matichuk
e3c0855169
removed accidental inclusion of Apply_Trace
2015-09-22 12:28:14 +10:00
Daniel Matichuk
c8d0692008
sys-init now checks
2015-09-22 12:14:27 +10:00
Gerwin Klein
c7cccbf7ce
sys-init: Isabelle2015 update
2015-05-14 18:43:29 +02:00
Andrew Boyton
66ea3fa808
sys-init: Label all limitations of the system initialiser with "LIMITATION".
2014-10-31 14:56:35 +11:00
David Greenaway
0c004d2a93
Merge branch 'master' into 'isabelle-2014'.
...
Conflicts:
proof/drefine/Arch_DR.thy
proof/drefine/Finalise_DR.thy
proof/drefine/StateTranslation_D.thy
sys-init/DuplicateCaps_SI.thy
sys-init/Proof_SI.thy
tools/autocorres/tests/examples/SchorrWaite.thy
2014-09-23 14:31:33 +10:00
Andrew Boyton
57c57891bd
sys-init: Fix for Isabelle 2014.
2014-09-22 10:20:25 +10:00
Andrew Boyton
ea58753cd7
Merge branch 'cdl_page_map_cancel'
...
Merge in the setting of registers and the starting of threads in the system initialser.
2014-09-18 17:21:17 +10:00
Andrew Boyton
2b7b258997
sys-init: Prove the starting of threads is done correctly.
...
We no longer assume the starting of threads, but prove it correct
(assuming the behaviour of the scheduler).
2014-09-18 12:30:04 +10:00
David Greenaway
cf0d1abce6
Merge 'master' into 'isabelle-2014'.
...
Conflicts:
proof/crefine/Fastpath_C.thy
proof/drefine/KHeap_DR.thy
proof/infoflow/Noninterference.thy
spec/design/version
sys-init/DuplicateCaps_SI.thy
sys-init/InitTCB_SI.thy
sys-init/Proof_SI.thy
tools/asmrefine/SimplExport.thy
tools/autocorres/tests/examples/SchorrWaite.thy
2014-09-17 14:21:13 +10:00
Andrew Boyton
97166be5a5
sys-init: Update sys-init and separation logic tactics for Isabelle 2014.
2014-09-12 17:48:39 +10:00
Andrew Boyton
ded25f4067
sys-init: Refactor the writing of register to happen earlier, and prove correctness.
2014-09-12 15:15:43 +10:00
Gao Xin
5015f53d95
fix seL4_TCB_WriteRegisters
2014-09-10 17:30:35 +10:00
Andrew Boyton
7167ea42ac
CapDL: Made IRQ Nodes a new object type, not a small CNode.
...
IRQ Nodes are now their own object type in capDL. This makes it much easier
to distinguish between "real" CNodes and IRQ Nodes.
Updated:
* the capDL refinement,
* the access proofs, and
* the system initialiser.
2014-09-09 14:07:50 +10:00
David Greenaway
0fb7a8084d
misc: Proofing and formatting of README.md files.
...
Attempt to improve readability of the files when viewed as plain ASCII;
proof-read and fix minor issues.
2014-07-28 13:15:48 +10:00
Andrew Boyton
63c6ef2785
Updated READMEs for capDL-api and sep-capDL, and added one for sys-init.
2014-07-26 12:28:38 +10:00
Gerwin Klein
50dda7708c
comment cleanup
2014-07-22 18:10:20 +02:00
Andrew Boyton
acf0abe16a
Cleanup of a number of definitions of the separation algebra for capDL.
...
* The definitions of the separation "arrows" is slightly nicer and more consistent.
- We have a nicer correspondence between sep_map_c and sep_map_s.
- sep_map_irq now specifies exactly what the IRQ table contains
(that it *only* has one entry, not that it contains at least that entry).
- Nicer LaTeX output for the arrows.
* A number of minor renaming of constants and types.
- cdl_component => cdl_component_id
- sep_entity => cdl_component
- state_sep_projection => sep_state_projection
- obj_to_sep_state => object_to_sep_state
* Removed a few unused lemmas.
2014-07-22 14:37:37 +10:00
Gerwin Klein
84595f4233
release cleanup
2014-07-17 18:22:50 +02:00
Gerwin Klein
2a03e81df4
Import release snapshot.
2014-07-14 21:32:44 +02:00