Matthew Brecknell
|
0c3a12771d
|
arch_split: merge master
|
2016-04-28 14:36:43 +10:00 |
Daniel Matichuk
|
1d20b393c0
|
arch_split: replaced sublocale with global_naming
|
2016-04-27 14:32:38 +10:00 |
Matthew Brecknell
|
14f7570147
|
arch_split: Access checking
|
2016-04-22 11:58:59 +10:00 |
Daniel Matichuk
|
3191c485d5
|
arch_split: added ARM_A and ARM_H locales
|
2016-04-20 17:31:45 +10:00 |
Matthew Brecknell
|
2277e9332f
|
arch_split: invariants: move KernelInit_AI into ARM context
|
2016-04-20 13:12:31 +10:00 |
Matthew Brecknell
|
d5f7a369ba
|
arch_split: invariants: slightly more selective interpretation in deterministic scheduler
|
2016-04-20 13:04:09 +10:00 |
Matthew Brecknell
|
fd8926d3a8
|
arch_split: invariants: slightly more selective interpretation up to AInvs
|
2016-04-20 08:36:22 +10:00 |
Daniel Matichuk
|
3f4c8cb188
|
arch_split: AInvs checking?
|
2016-04-19 14:27:21 +10:00 |
Matthew Brecknell
|
ee48e33253
|
arch_split: invariants: tidy up some simplifications using is_derived_def
|
2016-04-19 11:40:36 +10:00 |
Matthew Brecknell
|
21b6c7c386
|
arch_split: invariants: checking up to Tcb_AI
|
2016-04-19 10:38:06 +10:00 |
Matthew Brecknell
|
515f32e59d
|
arch_split: invariants: part-way through CNodeInv_AI
|
2016-04-18 19:18:07 +10:00 |
Matthew Brecknell
|
02245004bf
|
arch_split: invariants: checking up to Ipc_AI
|
2016-04-18 17:43:37 +10:00 |
Matthew Brecknell
|
286c592a8e
|
arch_split: invariants: checking up to Arch_AI
|
2016-04-17 16:59:54 +10:00 |
Matthew Brecknell
|
4e6369f86d
|
arch_split: invariants: Finalise_AI checking
|
2016-04-15 15:11:32 +10:00 |
Matthew Brecknell
|
d683425e0d
|
arch_split: invariants: fixup CSpaceInv_AI, working on Finalise_AI
|
2016-04-14 19:01:20 +10:00 |
Matthew Brecknell
|
aa632d4822
|
arch_split: invariants: up to Schedule_AI
|
2016-04-13 13:21:11 +10:00 |
Matthew Brecknell
|
2c11f767af
|
archsplit: invariants: fix sorrys in CSpaceInv_AI
|
2016-04-13 11:29:03 +10:00 |
Daniel Matichuk
|
2de08b7ec1
|
arch_split: differentiate "context ARM begin" vs "context begin interpretation ARM ."
|
2016-04-08 15:05:09 +10:00 |
Daniel Matichuk
|
04362dba27
|
arch_split: some quick and dirty arch_splitting by selectively interpreting the ARM locale (with FIXMEs)
|
2016-04-07 17:05:14 +10:00 |
Daniel Matichuk
|
ab09d49b59
|
arch_split: checkpoint. Checks up to ArchVSpace_AI with two sorries (MattB WIP)
|
2016-04-06 17:57:47 +10:00 |
Matthew Brecknell
|
69d7b50dae
|
arch_split: CSpaceInv_AI work-in-progress
|
2016-04-04 10:49:18 +10:00 |
Matthew Brecknell
|
6d64ef053e
|
arch_split: remove unused ArchTypes_AI
|
2016-03-29 17:21:54 +11:00 |
Matthew Brecknell
|
7563c9e2c6
|
arch_split: repair up to ArchAcc_AI
|
2016-03-29 14:28:02 +11:00 |
Matthew Brecknell
|
4c2571e215
|
arch_split: reworking predicates about arch objects and type
|
2016-03-29 11:50:31 +11:00 |
Matthew Brecknell
|
f89279e381
|
arch_split: reworking predicates about arch objects and types
|
2016-03-24 17:24:14 +11:00 |
Matthew Brecknell
|
674fcbe9d7
|
arch_split: invariants: fixed KHeap_AI
|
2016-03-18 16:54:29 +11:00 |
Matthew Brecknell
|
600a6fd56d
|
arch_split: invariants: improved ArchADT_AI
Mainly Thomas typing at Matthew's keyboard.
|
2016-03-18 16:24:01 +11:00 |
Matthew Brecknell
|
f2cc8d7c0f
|
arch_split: invariants: progress in ArchADT_AI
|
2016-03-18 13:08:26 +11:00 |
Sophie Taylor
|
d7fd88727a
|
SELFOUR-420: Verification of maxIRQ check in handle_interrupt.
|
2016-03-17 11:20:52 +11:00 |
Daniel Matichuk
|
b679b00f97
|
arch_split: initial attempt at redefining invariants to avoid changing too many proofs
|
2016-03-04 19:03:45 +11:00 |
Daniel Matichuk
|
5e2f9a5e7c
|
arch_split: change caps_of_state to be explicit projection f caps_of_state
|
2016-03-04 19:03:45 +11:00 |
Daniel Matichuk
|
cdc0a840fe
|
arch_split: change aobj_at to definition instead of abbreviation
|
2016-03-02 13:15:15 +11:00 |
Daniel Matichuk
|
219603d21e
|
arch_split: halfway through ArchAcc_AI
|
2016-02-29 22:33:12 -08:00 |
Daniel Matichuk
|
8f8a428ee4
|
arch_split: moved ArchAcc_AI and made some progress
|
2016-02-29 21:25:51 -08:00 |
Daniel Matichuk
|
958726870e
|
arch_split: finished KHeap_AI
|
2016-02-29 21:05:45 -08:00 |
Matthew Brecknell
|
8cc95bfb8e
|
arch_split: merge master into arch_split
|
2016-03-01 11:30:47 +11:00 |
Daniel Matichuk
|
45dbd49c86
|
arch_split: more lifting lemmas for KHeap_AI
|
2016-02-29 18:32:44 +11:00 |
Miki Tanaka
|
6f6c58168c
|
SELFOUR-56: Remove diminish rights from IPC
|
2016-02-24 13:24:10 +11:00 |
Daniel Matichuk
|
d107cb6758
|
arch_split: halfway into KHeap_AI
|
2016-02-22 17:48:52 +11:00 |
Matthew Brecknell
|
4f7ac1a975
|
trivial: remove some comments and debug trace
|
2016-02-22 10:55:21 +11:00 |
Matthew Brecknell
|
84d2889d45
|
Isabelle2016: merge master into 2016
|
2016-02-19 16:17:26 +11:00 |
Daniel Matichuk
|
df8261c121
|
arch_split: split up Invariants_AI
|
2016-02-17 16:36:29 +11:00 |
Xin,Gao
|
1aed16085f
|
l4v-sabre: move a few word lemmas to WordLemmaBucket and fix styles of some proofs
|
2016-02-17 11:18:03 +11:00 |
Gao Xin
|
0d260252ff
|
l4v-sabre: rebase and fix proofs to infoflow
|
2016-02-17 11:18:02 +11:00 |
Gao Xin
|
bc73b112bd
|
l4v-sabre: change type of irq to be 10 word
|
2016-02-17 11:18:02 +11:00 |
Gao Xin
|
50fa257113
|
rebase and fix problems caused by new machine constants
|
2016-02-17 11:18:02 +11:00 |
Gao Xin
|
bee4ba0052
|
l4v-sabre: fix refine
|
2016-02-17 11:18:02 +11:00 |
Matthew Brecknell
|
c65e290a8b
|
Isabelle2016: merge master into 2016
|
2016-02-16 12:52:24 +11:00 |
Daniel Matichuk
|
1018d01b6f
|
arch_split: More namespacing progress and invariant splitting. Checks halfway into Invariants_AI
|
2016-02-05 17:00:06 +11:00 |
Daniel Matichuk
|
9718f1bda2
|
arch_split: progress on namespacing abstract spec
|
2016-02-05 16:59:18 +11:00 |