Frama-C-discuss mailing list archives
This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Frama-c-discuss] [Jessie] Issue with behavior in contracts
- Subject: [Frama-c-discuss] [Jessie] Issue with behavior in contracts
- From: dmentre at linux-france.org (David MENTRE)
- Date: Tue, 3 Mar 2009 17:30:20 +0100
Hello, I would like to define the behaviour of read() syscall. I'm using the following contract: /*@ requires fd >= 0; requires count > 0; requires \valid((char*)buf+(0..count-1)); behavior error: assigns global_error_number; ensures \result < 0; behavior end_of_file: assigns \nothing; ensures \result == 0; behavior normal: assigns ((char*)buf)[0..count-1]; ensures ((char*)buf)[0] >= 0 && ((char*)buf)[0] < 256; ensures \result > 0; */ // complete behaviors error, end_of_file, normal; ssize_t read(int fd, void *buf, size_t count); The "complete" clause is commented-out as Jessie does not support it. The error behaviour states the error case, when \result < 0 and thus only a global error number is assigned. The end_of_file behaviour states the case when \result==0, nothing is assigned. The normal behaviour states the case when some characters are returned, the buffer is assigned and the first character is a byte (it would be useful to specify that buf[0..count-1] is assigned with bytes, but as far as I know Jessie does not support \lambda construct). The code seems to work, as I am able to prove some properties and assertions in my code with Alt-Ergo. However, when I run frama-c -jessie-analysis, I have the following error message: No code for function read, default assigns generated Is my contract for read() really taken into account? In that case, is it a spurious error message? If not, how can I write the contract to specify what I mean? Should I use other forms for logical formula? Please find attached the complete source code. Sincerely yours, david -------------- next part -------------- A non-text attachment was scrubbed... Name: dev-random-pass-gen.c Type: application/octet-stream Size: 5365 bytes Desc: not available Url : http://lists.gforge.inria.fr/pipermail/frama-c-discuss/attachments/20090303/f4eb48bf/attachment-0002.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: check_specs.h Type: application/octet-stream Size: 1253 bytes Desc: not available Url : http://lists.gforge.inria.fr/pipermail/frama-c-discuss/attachments/20090303/f4eb48bf/attachment-0003.obj
- Follow-Ups:
- [Frama-c-discuss] [Jessie] Issue with behavior in contracts
- From: dmentre at linux-france.org (David MENTRE)
- [Frama-c-discuss] [Jessie] Issue with behavior in contracts
- From: Claude.Marche at inria.fr (Claude Marché)
- [Frama-c-discuss] [Jessie] Issue with behavior in contracts
- Prev by Date: [Frama-c-discuss] Best approach when specifying regular C functions from stdlib?
- Next by Date: [Frama-c-discuss] [Jessie] Issue with offset in static strings
- Previous by thread: [Frama-c-discuss] Issue with non terminating function
- Next by thread: [Frama-c-discuss] [Jessie] Issue with behavior in contracts
- Index(es):