Thomas Sewell
29648ac243
Reduce verbosity in GraphRefine.
2015-12-08 19:36:28 +11:00
Thomas Sewell
15d09a093a
Parallelise GraphRefine in its default run.
2015-12-08 17:39:07 +11:00
Japheth Lim
a918b41163
Merge pull request #1 in SEL4/l4v from ~JALIM/l4v:etanercept-reloaded to master
...
* commit '28e6511148e7daeec3803465ca50294e2840ed4d':
etanercept: remove user config for CFLAGS; it could inject shell commands. Added -fwrapv to default CFLAGS.
etanercept: tweak header documentation.
etanercept: revert accidental change to int and nat translation.
etanercept: use term_pat antiquote, just for fun.
etanercept: search for C compiler at run time, not at init time.
etanercept: use HOLogic.
etanercept: improve exception throwing and messages.
etanercept: refactor variable handling. Uses Termtab for simplicity.
etanercept: add a couple more examples.
etanercept: refactor type lookup code.
etanercept: avoid unnecessary floating point code.
etanercept: add options: debug, timeout, and CFLAGS.
etanercept: rename user command to "word_refute".
2015-12-08 05:47:40 +00:00
Japheth Lim
28e6511148
etanercept: remove user config for CFLAGS; it could inject shell commands.
...
Added -fwrapv to default CFLAGS.
2015-12-04 16:37:25 +11:00
Japheth Lim
4c982bd80b
etanercept: tweak header documentation.
2015-12-04 16:18:56 +11:00
Thomas Sewell
7ac0157bba
Oops.
2015-12-04 14:24:20 +11:00
Thomas Sewell
f54964a05d
More fixes, hopefully closer.
2015-12-04 14:01:38 +11:00
Thomas Sewell
175eb2da2d
More fixes for pointer array assertions.
2015-12-03 17:30:08 +11:00
Thomas Sewell
df40425731
Repair SimplExport/GraphRefine.
2015-12-03 16:34:11 +11:00
Japheth Lim
c5496f869e
etanercept: revert accidental change to int and nat translation.
2015-12-02 16:14:59 +11:00
Japheth Lim
36cc252bd4
etanercept: use term_pat antiquote, just for fun.
2015-12-02 16:14:59 +11:00
Japheth Lim
508e6b1968
etanercept: search for C compiler at run time, not at init time.
2015-12-02 16:14:59 +11:00
Japheth Lim
f59bc9e826
etanercept: use HOLogic.
2015-12-02 16:14:59 +11:00
Japheth Lim
58e5303315
etanercept: improve exception throwing and messages.
2015-12-02 16:14:59 +11:00
Japheth Lim
8d35708666
etanercept: refactor variable handling. Uses Termtab for simplicity.
...
Also remove translation for Var. Vars in a proof state are interpreted
as existentially- rather than forall-quantified.
2015-12-02 16:14:59 +11:00
Japheth Lim
2c299c07fa
etanercept: add a couple more examples.
2015-12-02 16:14:58 +11:00
Japheth Lim
310d5fdc84
etanercept: refactor type lookup code.
2015-12-02 16:14:58 +11:00
Japheth Lim
a03c0fa046
etanercept: avoid unnecessary floating point code.
2015-12-02 16:14:58 +11:00
Japheth Lim
169f66bd1e
etanercept: add options: debug, timeout, and CFLAGS.
2015-12-02 16:14:58 +11:00
Japheth Lim
e4826d0616
etanercept: rename user command to "word_refute".
2015-12-02 16:14:58 +11:00
Japheth Lim
2bb62173e5
Merge pull request #15 from mfernandez/bdb0dc61-c039-4651-89b1-3d72a8b07fd3
...
lib: Add a new nitpick-style command for refuting word problems.
2015-12-02 16:10:02 +11:00
Thomas Sewell
043a69c81b
Fix Orphanage from array changes, refactor.
...
Some generalisation is done in finaliseSlot_invs'' to avoid
duplicating it in Orphanage and PageTableDuplicates.
Finally cleanup in haskell translation.
2015-12-02 09:15:32 +11:00
Thomas Sewell
860f8f2225
Fixes for merge/rebase with mainline.
2015-12-02 09:15:26 +11:00
Thomas Sewell
375b526b0c
Finally done with array assertions.
2015-12-02 09:08:27 +11:00
Thomas Sewell
7e40646c48
Proof up to Fastpath_C.
...
The very last twist of this: the proof that resolveAddressBits can
be seen as functional needs to change, a lot, because it's now
sensitive to gsCNodes. Still working on that.
2015-12-02 09:07:49 +11:00
Thomas Sewell
22f5f2f005
Further work on array assertions.
2015-12-02 09:07:15 +11:00
Thomas Sewell
4fd43512bb
WIP on handling array assertions. Up to Retype_C.
...
This is quite a lot of work in the end. I've had to gut most of
Retype_C along the way. Nearly done there.
2015-12-02 09:06:06 +11:00
Thomas Sewell
6fa0909124
Partial progress on using array assertions.
2015-12-02 09:05:04 +11:00
Thomas Sewell
1fdbbe787e
Theory of array assertions.
...
This is a way to use the UMM assertions to assert an array is
present without knowing its exact size.
2015-12-02 09:04:48 +11:00
Thomas Sewell
91ff60c978
Adjust Strengthen, split out ProvePart.
2015-11-30 10:58:11 +11:00
Matthew Fernandez
53376140e0
lib: Add a new nitpick-style command for refuting word problems.
2015-11-27 14:25:29 +11:00
Japheth Lim
411ef475dc
crefine: fix theory import path.
2015-11-27 13:55:23 +11:00
Matthew Fernandez
24aaad4f8b
infoflow: Remove a find_theorems invocation.
2015-11-25 10:30:29 +11:00
Matthew Fernandez
d9154d00af
crefine: Remove a find_theorems invocation.
2015-11-25 10:29:22 +11:00
Gerwin Klein
7bc4236077
remove accidentally committed file
2015-11-25 09:54:30 +13:00
Thomas Sewell
e2c5e1eb3d
Treat guarded_spec_body like Spec in asmrefine.
...
The parser now emits guarded_spec_body for underspecified functions,
not Spec. SimplExport now treats them the same.
2015-11-24 17:52:53 +11:00
Gerwin Klein
0f2d557679
terminology in comments: async ep -> notifications
2015-11-24 16:58:22 +13:00
Japheth Lim
324d48b53f
autocorres: handle guarded_spec_body construct. See 27a12b871
and VER-464.
2015-11-24 13:58:28 +11:00
Corey Lewis
f0ce95aa11
Fix wp_del for crunch.
2015-11-23 17:46:50 +11:00
Gerwin Klein
df519ffd25
avoid `make` warning, remove SimplExportOnly from HEAPS
...
Make ignores the HEAPS rule for SimplExportOnly anyhow (as it should).
2015-11-20 16:02:14 +11:00
Gerwin Klein
be0ebaa139
ignore generated autoconf.h
2015-11-20 16:02:14 +11:00
Gerwin Klein
ac632c5aaa
Wait -> Recv: update proofs
2015-11-20 16:02:14 +11:00
Gerwin Klein
00bfafe2f5
Wait -> Recv: update specs
2015-11-20 16:02:14 +11:00
Gerwin Klein
8fb2dc2b15
Wait -> Recv: haskell update
2015-11-20 16:02:13 +11:00
Daniel Matichuk
3af6a6b0da
added timing methods
2015-11-20 16:02:13 +11:00
Joel Beeren
457a55a831
add arch_tcb object to C, rename aep -> ntfn
2015-11-20 16:02:13 +11:00
Rafal Kolanski
ac9c3bb1a3
Remove sorry on clz_spec (C parser changes allow it to be proved now).
...
(with some magic from Thomas)
2015-11-20 15:58:15 +11:00
Michael Norrish
2f39375ee4
Modifies proofs partially working
...
At the moment, if there is a specification and DONT_TRANSLATE, the
automatic proofs only work if the specification is that no globals are
modified.
Work on JIRA VER-464
2015-11-19 11:27:05 +11:00
Michael Norrish
27a12b871c
Translate spec-only fns with new guarded_spec_body const
...
As per discussion in JIRA VER-464 issue.
Still to try to prove modifies theorems for such functions
automatically.
2015-11-19 09:58:36 +11:00
Gerwin Klein
05c6abc751
removed unused (and outdated) constants
2015-11-13 15:24:36 +11:00