Commit Graph

744 Commits

Author SHA1 Message Date
Thomas Sewell 29648ac243 Reduce verbosity in GraphRefine. 2015-12-08 19:36:28 +11:00
Thomas Sewell 15d09a093a Parallelise GraphRefine in its default run. 2015-12-08 17:39:07 +11:00
Japheth Lim a918b41163 Merge pull request #1 in SEL4/l4v from ~JALIM/l4v:etanercept-reloaded to master
* commit '28e6511148e7daeec3803465ca50294e2840ed4d':
  etanercept: remove user config for CFLAGS; it could inject shell commands. Added -fwrapv to default CFLAGS.
  etanercept: tweak header documentation.
  etanercept: revert accidental change to int and nat translation.
  etanercept: use term_pat antiquote, just for fun.
  etanercept: search for C compiler at run time, not at init time.
  etanercept: use HOLogic.
  etanercept: improve exception throwing and messages.
  etanercept: refactor variable handling. Uses Termtab for simplicity.
  etanercept: add a couple more examples.
  etanercept: refactor type lookup code.
  etanercept: avoid unnecessary floating point code.
  etanercept: add options: debug, timeout, and CFLAGS.
  etanercept: rename user command to "word_refute".
2015-12-08 05:47:40 +00:00
Japheth Lim 28e6511148 etanercept: remove user config for CFLAGS; it could inject shell commands.
Added -fwrapv to default CFLAGS.
2015-12-04 16:37:25 +11:00
Japheth Lim 4c982bd80b etanercept: tweak header documentation. 2015-12-04 16:18:56 +11:00
Thomas Sewell 7ac0157bba Oops. 2015-12-04 14:24:20 +11:00
Thomas Sewell f54964a05d More fixes, hopefully closer. 2015-12-04 14:01:38 +11:00
Thomas Sewell 175eb2da2d More fixes for pointer array assertions. 2015-12-03 17:30:08 +11:00
Thomas Sewell df40425731 Repair SimplExport/GraphRefine. 2015-12-03 16:34:11 +11:00
Japheth Lim c5496f869e etanercept: revert accidental change to int and nat translation. 2015-12-02 16:14:59 +11:00
Japheth Lim 36cc252bd4 etanercept: use term_pat antiquote, just for fun. 2015-12-02 16:14:59 +11:00
Japheth Lim 508e6b1968 etanercept: search for C compiler at run time, not at init time. 2015-12-02 16:14:59 +11:00
Japheth Lim f59bc9e826 etanercept: use HOLogic. 2015-12-02 16:14:59 +11:00
Japheth Lim 58e5303315 etanercept: improve exception throwing and messages. 2015-12-02 16:14:59 +11:00
Japheth Lim 8d35708666 etanercept: refactor variable handling. Uses Termtab for simplicity.
Also remove translation for Var. Vars in a proof state are interpreted
as existentially- rather than forall-quantified.
2015-12-02 16:14:59 +11:00
Japheth Lim 2c299c07fa etanercept: add a couple more examples. 2015-12-02 16:14:58 +11:00
Japheth Lim 310d5fdc84 etanercept: refactor type lookup code. 2015-12-02 16:14:58 +11:00
Japheth Lim a03c0fa046 etanercept: avoid unnecessary floating point code. 2015-12-02 16:14:58 +11:00
Japheth Lim 169f66bd1e etanercept: add options: debug, timeout, and CFLAGS. 2015-12-02 16:14:58 +11:00
Japheth Lim e4826d0616 etanercept: rename user command to "word_refute". 2015-12-02 16:14:58 +11:00
Japheth Lim 2bb62173e5 Merge pull request #15 from mfernandez/bdb0dc61-c039-4651-89b1-3d72a8b07fd3
lib: Add a new nitpick-style command for refuting word problems.
2015-12-02 16:10:02 +11:00
Thomas Sewell 043a69c81b Fix Orphanage from array changes, refactor.
Some generalisation is done in finaliseSlot_invs'' to avoid
duplicating it in Orphanage and PageTableDuplicates.

Finally cleanup in haskell translation.
2015-12-02 09:15:32 +11:00
Thomas Sewell 860f8f2225 Fixes for merge/rebase with mainline. 2015-12-02 09:15:26 +11:00
Thomas Sewell 375b526b0c Finally done with array assertions. 2015-12-02 09:08:27 +11:00
Thomas Sewell 7e40646c48 Proof up to Fastpath_C.
The very last twist of this: the proof that resolveAddressBits can
be seen as functional needs to change, a lot, because it's now
sensitive to gsCNodes. Still working on that.
2015-12-02 09:07:49 +11:00
Thomas Sewell 22f5f2f005 Further work on array assertions. 2015-12-02 09:07:15 +11:00
Thomas Sewell 4fd43512bb WIP on handling array assertions. Up to Retype_C.
This is quite a lot of work in the end. I've had to gut most of
Retype_C along the way. Nearly done there.
2015-12-02 09:06:06 +11:00
Thomas Sewell 6fa0909124 Partial progress on using array assertions. 2015-12-02 09:05:04 +11:00
Thomas Sewell 1fdbbe787e Theory of array assertions.
This is a way to use the UMM assertions to assert an array is
present without knowing its exact size.
2015-12-02 09:04:48 +11:00
Thomas Sewell 91ff60c978 Adjust Strengthen, split out ProvePart. 2015-11-30 10:58:11 +11:00
Matthew Fernandez 53376140e0 lib: Add a new nitpick-style command for refuting word problems. 2015-11-27 14:25:29 +11:00
Japheth Lim 411ef475dc crefine: fix theory import path. 2015-11-27 13:55:23 +11:00
Matthew Fernandez 24aaad4f8b infoflow: Remove a find_theorems invocation. 2015-11-25 10:30:29 +11:00
Matthew Fernandez d9154d00af crefine: Remove a find_theorems invocation. 2015-11-25 10:29:22 +11:00
Gerwin Klein 7bc4236077 remove accidentally committed file 2015-11-25 09:54:30 +13:00
Thomas Sewell e2c5e1eb3d Treat guarded_spec_body like Spec in asmrefine.
The parser now emits guarded_spec_body for underspecified functions,
not Spec. SimplExport now treats them the same.
2015-11-24 17:52:53 +11:00
Gerwin Klein 0f2d557679 terminology in comments: async ep -> notifications 2015-11-24 16:58:22 +13:00
Japheth Lim 324d48b53f autocorres: handle guarded_spec_body construct. See 27a12b871 and VER-464. 2015-11-24 13:58:28 +11:00
Corey Lewis f0ce95aa11 Fix wp_del for crunch. 2015-11-23 17:46:50 +11:00
Gerwin Klein df519ffd25 avoid `make` warning, remove SimplExportOnly from HEAPS
Make ignores the HEAPS rule for SimplExportOnly anyhow (as it should).
2015-11-20 16:02:14 +11:00
Gerwin Klein be0ebaa139 ignore generated autoconf.h 2015-11-20 16:02:14 +11:00
Gerwin Klein ac632c5aaa Wait -> Recv: update proofs 2015-11-20 16:02:14 +11:00
Gerwin Klein 00bfafe2f5 Wait -> Recv: update specs 2015-11-20 16:02:14 +11:00
Gerwin Klein 8fb2dc2b15 Wait -> Recv: haskell update 2015-11-20 16:02:13 +11:00
Daniel Matichuk 3af6a6b0da added timing methods 2015-11-20 16:02:13 +11:00
Joel Beeren 457a55a831 add arch_tcb object to C, rename aep -> ntfn 2015-11-20 16:02:13 +11:00
Rafal Kolanski ac9c3bb1a3 Remove sorry on clz_spec (C parser changes allow it to be proved now).
(with some magic from Thomas)
2015-11-20 15:58:15 +11:00
Michael Norrish 2f39375ee4 Modifies proofs partially working
At the moment, if there is a specification and DONT_TRANSLATE, the
automatic proofs only work if the specification is that no globals are
modified.

Work on JIRA VER-464
2015-11-19 11:27:05 +11:00
Michael Norrish 27a12b871c Translate spec-only fns with new guarded_spec_body const
As per discussion in JIRA VER-464 issue.

Still to try to prove modifies theorems for such functions
automatically.
2015-11-19 09:58:36 +11:00
Gerwin Klein 05c6abc751 removed unused (and outdated) constants 2015-11-13 15:24:36 +11:00