Frama-C-discuss mailing list archives

This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] Specification Examples

Hello,

Le ven 10 oct 2008 11:39:59 CEST,
"Christoph Weber" <Christoph.Weber@first.fraunhofer.de> a ?crit :

> Thank you for the advice, it worked under the Helium release.
> 
> After searching the ACSL_1.3 PDF i found the \separated(...) function.
> 
> My question is if its posible to use it in a following manner :
> 
> /*@
>         requires \separated(a, b);
> */
> void array_cpy(int* a, int n, int* b);
> 
>  or do i have to be more specific, say like this:
> /*@
>         requires \forall int i,j;  \separated(a[i] b[j]);
> */
> void array_cpy(int* a, int n, int* b);
> 
> 

Neither ;-)

- \separated(a,b) indicates that the locations pointed to by a and b
(both seen as pointer to int) do not overlap.

- \separated(a[i],b[j]) is ill-formed: \separated takes addresses as
arguments not the values themselves. You should use
\separated(a+i,b+j).

Note that the latter is equivalent to the following precondition which
uses (indefinite) ranges of addresses: 
//@ requires \separated(a+(..),b+(..));


-- 
E tutto per oggi, a la prossima volta.
Virgile