Commit Graph

712 Commits

Author SHA1 Message Date
Joel Beeren 5babd2ce21 aep-binding: restructured decode_bind_aep for infoflow 2015-09-15 16:31:13 +10:00
Daniel Matichuk 50adc350d9 Syscall_IF building (1 sorry in decode) 2015-09-15 12:04:46 +10:00
Daniel Matichuk 8451c17837 fixed decode with sorry 2015-09-15 12:02:26 +10:00
Ramana Kumar 53919eda6e handle_wait_globals_equiv 2015-09-15 11:53:40 +10:00
Ramana Kumar 2de96bb5bf handle_wait_reads_respects_f
most of the hard work done by Dan
2015-09-14 18:38:49 +10:00
Daniel Matichuk 229f521d3b finished Ipc_IF 2015-09-14 15:54:17 +10:00
Ramana Kumar 1bde303763 receive_ipc_reads_respects 2015-09-14 11:58:09 +10:00
Ramana Kumar cfc5841b38 complete_async_ipc_reads_respects 2015-09-14 09:47:46 +10:00
Daniel Matichuk f956842e93 finished send_async_ipc_reads_respects 2015-09-11 15:54:53 +10:00
Ramana Kumar 0fb88ea01c Merge branch 'master' into aep-merge
This commit should at least remove merge conflict markers, and the idea
is that at least refine, crefine, drefine, and infoflow (with sorrys)
build. Subsequent commits may be required to fix build issues that I
have not picked up.
2015-09-10 17:06:45 +10:00
Matthew Fernandez bcdadb1816 lib: Some pair-related lemmas for LemmaBucket. 2015-09-09 18:44:19 +10:00
Japheth Lim acb061e20c autocorres: add a polish rule for "int (unat _)". 2015-09-02 19:38:59 +10:00
Ramana Kumar d88a931ec7 history squashed patch for aep-binding 2015-09-02 15:43:39 +10:00
Thomas Sewell 3c85373823 Treat SimplExportOnly specially in proof Makefile.
SimplExportOnly builds both a (useless) Isabelle image and a (useful) output
file. We need to adjust the build command to ensure the file actually gets
built if the image already existed.
2015-09-01 18:25:32 +10:00
Japheth Lim 36fc7f1dd7 autocorres: remove type restriction in WordAbstract rule.
The restriction in corresTA_L2_call (?ex was always unified to "id")
caused corresTA_L2_call' (which produces uglier output) to be used
in situations where the first rule should have sufficed.

Reported by Lars Noschinski.
2015-08-31 16:00:44 +10:00
Rafal Kolanski 818181db9e JEdit macro: goto-error (first version)
Jumps to first error in current theory file (presumably the currently
focused textArea).

The buffer overview indicates where the error is, but it's hard to go
directly to the offending command, and in large files the overview
buffer doesn't cover the whole file anyway.
2015-08-24 03:03:49 +10:00
Thomas Sewell 09e155d59d Repair crefine for fastpath changes. 2015-08-21 14:48:55 +10:00
Thomas Sewell 2619356d07 Configure SimplExport targets in proof/Makefile. 2015-08-21 13:56:24 +10:00
Matthew Fernandez 88b01788b3 lib: Fix import in Eisbach. 2015-08-19 17:59:15 +10:00
diekmann 780dc272fb WordLemmaBucket: mehr lemma ist mehr gut 2015-08-19 15:14:31 +10:00
Thomas Sewell cc7cf154a5 Fiddling const global unfold in graph refine. 2015-08-18 17:24:23 +10:00
Thomas Sewell bd928d1793 Try to avoid emitting const-globals via memory.
Sometimes it's simpler to access an unknown field of a const
global by just computing the offset from its symbol in memory
and assuming the relevant words are in the .rodata section. But
for known fields, it's easier to just figure out what the
constant value is. This complicates the proof slightly, since
it has to guess which case it is in.
2015-08-17 23:35:06 +10:00
Matthew Fernandez 8f50ba4893 lib: Some more trivial map-related lemmas. 2015-08-15 12:17:26 +10:00
Matthew Fernandez e5340b5cca lib: More trivial helpers from CAmkES. 2015-08-12 13:54:56 +10:00
Matthew Fernandez 5073d065ad lib: Fix: Rename duplicate lemma.
...and now back to our regularly scheduled program.
2015-08-11 17:27:09 +10:00
Matthew Fernandez 10f963db36 lib: Another trivial lemma for supporting CAmkES. 2015-08-11 15:53:28 +10:00
Matthew Fernandez 3f20d24822 lib: Import various helper lemmas from CAmkES. 2015-08-11 12:25:22 +10:00
Thomas Sewell 99e7f82d0d Space out the CFunDump.txt file.
It's much easier to read that way.
2015-08-10 18:31:17 +10:00
Matthew Fernandez f253415a9f lib: Add a trivial lemma about `dom`.
This comes in handy when reasoning about large maps.
2015-08-07 12:16:46 +10:00
Gerwin Klein f1deda8797 space tweak 2015-08-06 14:09:15 +10:00
Thomas Sewell 5f4a25b078 Improve guard handling in GraphRefine.
Needed for recent changes to how global validity assertions are
generated.
2015-07-28 22:43:03 +10:00
Thomas Sewell e4ab39f0a6 Repair merge. 2015-07-28 18:12:53 +10:00
Thomas Sewell a0b3a569df Really add all necessary PGlobalValid assertions. 2015-07-28 17:40:21 +10:00
Matthew Fernandez b780e57759 camkes: Shuffle some helper lemmas around; labels as strings.
Moves some unnecessary stuff out of the locale and now specifies the label type
as `string` rather than a locale parameter. The purpose of the latter is to
allow us to talk about concrete labels rather than continually falling back on
the user's projection, but it's not clear yet whether this is a big win.
2015-07-27 16:09:59 +10:00
Matthew Fernandez 232ecb183f camkes: Rename `generate` to `state_of`.
This makes more sense for upcoming changes where we generate a policy as well.
2015-07-27 16:09:06 +10:00
Matthew Fernandez 9b13489a1f camkes: Update control TCB naming scheme.
This commit corresponds to CAmkES changes to disambiguate the name of a TCB for
a control thread.

See also camkes-tool/master@PR#113 on GINCA
2015-07-27 16:04:15 +10:00
Matthew Fernandez 0e19da32f4 camkes: Remove Grant from IPC buffer caps.
This makes no difference in the implementation, but is conceptually cleaner.

See also camkes-tool/master@c4e81e6116
2015-07-27 16:01:44 +10:00
Matthew Fernandez 422b1ee5ec camkes: Also depend on DPolicy in CamkesCdlBase. 2015-07-27 15:59:42 +10:00
Joel Beeren 8bbf48137d Merge pull request #8 from jbeeren/replycap
SELFOUR-220: When calling handleWait, only delete the TCB's ReplyCap when actually waiting on a synchronous
endpoint.
2015-07-23 14:59:26 +10:00
Joel Beeren 3372cd32a8 SELFOUR-220: When calling handleWait, only delete the
TCB's ReplyCap when actually waiting on a synchronous
endpoint.
2015-07-23 14:45:17 +10:00
Japheth Lim ddb13653fa autocorres: fix rules for heap lifting of arrays.
Should resolve JIRA VER-423.
2015-07-21 18:57:57 +10:00
Japheth Lim b085351fe9 autocorres: don't give up if HL output contains unlifted code.
Discussion at VER-437.
2015-07-20 18:48:15 +10:00
Thomas Sewell 440081c0f4 Add a gsMaxObjectSize as needed. 2015-07-17 14:30:08 +10:00
Thomas Sewell af86632985 Fix remaining sorries in crefine. 2015-07-16 14:44:56 +10:00
Thomas Sewell 0b5182bd84 More adjustments to graph export/refine. 2015-07-16 13:44:25 +10:00
Thomas Sewell 4211cd2b1a Progress on upgrading GraphRefine.
Needed to handle new concepts being exported from Simpl.
2015-07-15 21:41:07 +10:00
Thomas Sewell b5f796184a Repair spec/refine, I think. 2015-07-15 17:25:47 +10:00
Thomas Sewell 53e1c0c7df Update to SimplExport, fixes. 2015-07-15 11:48:39 +10:00
Thomas Sewell 44799b7663 Really add all necessary PGlobalValid assertions. 2015-07-15 11:48:39 +10:00
Thomas Sewell e9180d5cb5 Repair refine/crefine for WCET annotations. 2015-07-14 14:23:29 +10:00