Joel Beeren
5babd2ce21
aep-binding: restructured decode_bind_aep for infoflow
2015-09-15 16:31:13 +10:00
Daniel Matichuk
50adc350d9
Syscall_IF building (1 sorry in decode)
2015-09-15 12:04:46 +10:00
Daniel Matichuk
8451c17837
fixed decode with sorry
2015-09-15 12:02:26 +10:00
Ramana Kumar
53919eda6e
handle_wait_globals_equiv
2015-09-15 11:53:40 +10:00
Ramana Kumar
2de96bb5bf
handle_wait_reads_respects_f
...
most of the hard work done by Dan
2015-09-14 18:38:49 +10:00
Daniel Matichuk
229f521d3b
finished Ipc_IF
2015-09-14 15:54:17 +10:00
Ramana Kumar
1bde303763
receive_ipc_reads_respects
2015-09-14 11:58:09 +10:00
Ramana Kumar
cfc5841b38
complete_async_ipc_reads_respects
2015-09-14 09:47:46 +10:00
Daniel Matichuk
f956842e93
finished send_async_ipc_reads_respects
2015-09-11 15:54:53 +10:00
Ramana Kumar
0fb88ea01c
Merge branch 'master' into aep-merge
...
This commit should at least remove merge conflict markers, and the idea
is that at least refine, crefine, drefine, and infoflow (with sorrys)
build. Subsequent commits may be required to fix build issues that I
have not picked up.
2015-09-10 17:06:45 +10:00
Matthew Fernandez
bcdadb1816
lib: Some pair-related lemmas for LemmaBucket.
2015-09-09 18:44:19 +10:00
Japheth Lim
acb061e20c
autocorres: add a polish rule for "int (unat _)".
2015-09-02 19:38:59 +10:00
Ramana Kumar
d88a931ec7
history squashed patch for aep-binding
2015-09-02 15:43:39 +10:00
Thomas Sewell
3c85373823
Treat SimplExportOnly specially in proof Makefile.
...
SimplExportOnly builds both a (useless) Isabelle image and a (useful) output
file. We need to adjust the build command to ensure the file actually gets
built if the image already existed.
2015-09-01 18:25:32 +10:00
Japheth Lim
36fc7f1dd7
autocorres: remove type restriction in WordAbstract rule.
...
The restriction in corresTA_L2_call (?ex was always unified to "id")
caused corresTA_L2_call' (which produces uglier output) to be used
in situations where the first rule should have sufficed.
Reported by Lars Noschinski.
2015-08-31 16:00:44 +10:00
Rafal Kolanski
818181db9e
JEdit macro: goto-error (first version)
...
Jumps to first error in current theory file (presumably the currently
focused textArea).
The buffer overview indicates where the error is, but it's hard to go
directly to the offending command, and in large files the overview
buffer doesn't cover the whole file anyway.
2015-08-24 03:03:49 +10:00
Thomas Sewell
09e155d59d
Repair crefine for fastpath changes.
2015-08-21 14:48:55 +10:00
Thomas Sewell
2619356d07
Configure SimplExport targets in proof/Makefile.
2015-08-21 13:56:24 +10:00
Matthew Fernandez
88b01788b3
lib: Fix import in Eisbach.
2015-08-19 17:59:15 +10:00
diekmann
780dc272fb
WordLemmaBucket: mehr lemma ist mehr gut
2015-08-19 15:14:31 +10:00
Thomas Sewell
cc7cf154a5
Fiddling const global unfold in graph refine.
2015-08-18 17:24:23 +10:00
Thomas Sewell
bd928d1793
Try to avoid emitting const-globals via memory.
...
Sometimes it's simpler to access an unknown field of a const
global by just computing the offset from its symbol in memory
and assuming the relevant words are in the .rodata section. But
for known fields, it's easier to just figure out what the
constant value is. This complicates the proof slightly, since
it has to guess which case it is in.
2015-08-17 23:35:06 +10:00
Matthew Fernandez
8f50ba4893
lib: Some more trivial map-related lemmas.
2015-08-15 12:17:26 +10:00
Matthew Fernandez
e5340b5cca
lib: More trivial helpers from CAmkES.
2015-08-12 13:54:56 +10:00
Matthew Fernandez
5073d065ad
lib: Fix: Rename duplicate lemma.
...
...and now back to our regularly scheduled program.
2015-08-11 17:27:09 +10:00
Matthew Fernandez
10f963db36
lib: Another trivial lemma for supporting CAmkES.
2015-08-11 15:53:28 +10:00
Matthew Fernandez
3f20d24822
lib: Import various helper lemmas from CAmkES.
2015-08-11 12:25:22 +10:00
Thomas Sewell
99e7f82d0d
Space out the CFunDump.txt file.
...
It's much easier to read that way.
2015-08-10 18:31:17 +10:00
Matthew Fernandez
f253415a9f
lib: Add a trivial lemma about `dom`.
...
This comes in handy when reasoning about large maps.
2015-08-07 12:16:46 +10:00
Gerwin Klein
f1deda8797
space tweak
2015-08-06 14:09:15 +10:00
Thomas Sewell
5f4a25b078
Improve guard handling in GraphRefine.
...
Needed for recent changes to how global validity assertions are
generated.
2015-07-28 22:43:03 +10:00
Thomas Sewell
e4ab39f0a6
Repair merge.
2015-07-28 18:12:53 +10:00
Thomas Sewell
a0b3a569df
Really add all necessary PGlobalValid assertions.
2015-07-28 17:40:21 +10:00
Matthew Fernandez
b780e57759
camkes: Shuffle some helper lemmas around; labels as strings.
...
Moves some unnecessary stuff out of the locale and now specifies the label type
as `string` rather than a locale parameter. The purpose of the latter is to
allow us to talk about concrete labels rather than continually falling back on
the user's projection, but it's not clear yet whether this is a big win.
2015-07-27 16:09:59 +10:00
Matthew Fernandez
232ecb183f
camkes: Rename `generate` to `state_of`.
...
This makes more sense for upcoming changes where we generate a policy as well.
2015-07-27 16:09:06 +10:00
Matthew Fernandez
9b13489a1f
camkes: Update control TCB naming scheme.
...
This commit corresponds to CAmkES changes to disambiguate the name of a TCB for
a control thread.
See also camkes-tool/master@PR#113 on GINCA
2015-07-27 16:04:15 +10:00
Matthew Fernandez
0e19da32f4
camkes: Remove Grant from IPC buffer caps.
...
This makes no difference in the implementation, but is conceptually cleaner.
See also camkes-tool/master@c4e81e6116
2015-07-27 16:01:44 +10:00
Matthew Fernandez
422b1ee5ec
camkes: Also depend on DPolicy in CamkesCdlBase.
2015-07-27 15:59:42 +10:00
Joel Beeren
8bbf48137d
Merge pull request #8 from jbeeren/replycap
...
SELFOUR-220: When calling handleWait, only delete the TCB's ReplyCap when actually waiting on a synchronous
endpoint.
2015-07-23 14:59:26 +10:00
Joel Beeren
3372cd32a8
SELFOUR-220: When calling handleWait, only delete the
...
TCB's ReplyCap when actually waiting on a synchronous
endpoint.
2015-07-23 14:45:17 +10:00
Japheth Lim
ddb13653fa
autocorres: fix rules for heap lifting of arrays.
...
Should resolve JIRA VER-423.
2015-07-21 18:57:57 +10:00
Japheth Lim
b085351fe9
autocorres: don't give up if HL output contains unlifted code.
...
Discussion at VER-437.
2015-07-20 18:48:15 +10:00
Thomas Sewell
440081c0f4
Add a gsMaxObjectSize as needed.
2015-07-17 14:30:08 +10:00
Thomas Sewell
af86632985
Fix remaining sorries in crefine.
2015-07-16 14:44:56 +10:00
Thomas Sewell
0b5182bd84
More adjustments to graph export/refine.
2015-07-16 13:44:25 +10:00
Thomas Sewell
4211cd2b1a
Progress on upgrading GraphRefine.
...
Needed to handle new concepts being exported from Simpl.
2015-07-15 21:41:07 +10:00
Thomas Sewell
b5f796184a
Repair spec/refine, I think.
2015-07-15 17:25:47 +10:00
Thomas Sewell
53e1c0c7df
Update to SimplExport, fixes.
2015-07-15 11:48:39 +10:00
Thomas Sewell
44799b7663
Really add all necessary PGlobalValid assertions.
2015-07-15 11:48:39 +10:00
Thomas Sewell
e9180d5cb5
Repair refine/crefine for WCET annotations.
2015-07-14 14:23:29 +10:00