f9ea44ef89
Highlights: - new reserved IRQ and associated handler: VPPIEvent - VPPI events are virtual interrupts we can forward to VMs; currently there is only one event: virtual timer interrupt - VGICMaintenance and VPPIEvent can both receive late interrupts from hardware, which are now discarded instead of being delivered to current thread - given only one possible VPPI event, simplifier tends to mop up more than it should, making some proofs fragile w.r.t. adding a new VPPI event - the order of some lemmas/specs needed shuffling, as now VCPU code needs some interrupt code, which uses VCPU code |
||
|---|---|---|
| .. | ||
| asmrefine | ||
| autocorres | ||
| c-parser | ||
| haskell-translator | ||
| proofcount | ||
| README.md | ||
| ROOTS | ||
| tests.xml | ||
README.md
Proof Tools
This directory contains proof tools, most of which are used in one or more of the seL4 proofs. Each has its own directory:
-
asmrefine - Generic Isabelle/HOL part of the binary verification tool, for use in the seL4 Assembly Refinement Proof.
-
autocorres - Tool for easing manual proofs about C code, described in this PLDI '14 paper.
-
c-parser - Tool for translating C code into Isabelle/HOL, used to give seL4's C code its semantics in e.g. the seL4 C Refinement Proof.
-
haskell-translator - Tool for translating Haskell into Isabelle/HOL, used to generate the seL4 design specification.
-
proofcount - Tool for collecting metrics from finished proofs.