Frama-C-discuss mailing list archives

This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] Lemma from ACSL doc doesn't verify

  • Subject: [Frama-c-discuss] Lemma from ACSL doc doesn't verify
  • From: Boris.Hollas at de.bosch.com (Hollas Boris (CR/AEY1))
  • Date: Wed, 25 Nov 2009 15:20:57 +0100
This is from the ACSL documentation, 2.6.2:

//@ lemma mean_property: \forall integer x,y; x <= (x+y)/2 <= y;

It doesn't verify with Alt-Ergo or Z3, which is correct since the lemma doesn't hold. However,

//@ lemma mean_property: \forall integer x,y; x <= y  ==>  x <= (x+y)/2 <= y;

still doesn't verify, as well as

//@ lemma mean_property: \forall int l, h; l <= l + (h-l)/2 <= h;

The latter is known by VCC without explicit specification. I therefore assume that Z3 knows about this fact. How does Jessie handle such formulas, are they passed to the SMT solver?

I use Beryllium 1.

-Boris