adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof
History
Joel Beeren 4601f2a1ab Genericise deletion actions that occur after empty_slot 
This patch adds a generic "post_cap_deletion" step that is called by
finalise_slot. Previous to this, the only caps which had actions
required at this stage were IRQHandlerCaps -- it was required that the
IRQ bitmap be updated after the cap itself was removed (as the
invariants state that for any existing IRQHandlerCap, the corresponding
bit in the IRQ bitmap must be set).

By genericising this, we add the capacity for new, arch-specific post
cap deletion actions to occur in the future.
 		2018-02-23 09:12:55 +11:00
..
access-control Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
asmrefine Isabelle2017: remove String_Compare 2017-10-30 12:23:26 +11:00
bisim Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
capDL-api Removes all trailing whitespaces 2017-07-12 15:13:51 +10:00
crefine Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
drefine Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
infoflow Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
invariant-abstract Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
refine Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
sep-capDL Removes all trailing whitespaces 2017-07-12 15:13:51 +10:00
Makefile ckernel: Use correct dependencies when building CKernel 2017-09-21 13:23:04 +10:00
README.md integrate separation kernel config proofs 2014-08-13 22:08:46 +10:00
ROOT infoflow: add InfoFlow_Image_Toplevel 2017-11-27 21:00:14 +11:00
tests.xml theory_imports: depend on c-kernel instead of CParser 2017-09-12 14:47:24 +10:00

README.md

Formal Proofs about seL4

This directory contains the formal proofs about seL4, which mostly prove properties about the various seL4 specifications.

Each such proof lives in its own subdirectory: