Frama-C-discuss mailing list archives

This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] *p and p[0]

I'm extremely happy to see such a demonstration of how useful is
to use type integer instead of int in the annotations. Many thanks!

By the way, I have no idea at all why *p versus p[0] makes a difference.
Is it reproducible ?

- Claude



Pariente Dillon wrote:
> Hello,
>
>   
>> /*@ requires n > 0;
>>     requires \valid(p+ (0..n-1));
>>     assigns \nothing;
>>     ensures \forall int i;
>>                  0 <= i <= n-1 ==> \result >= p[i];
>>     ensures \exists int e;
>>     
>
> Changing this last line into "ensures \exists integer e;"
> permits to prove all the POs (with Alt-ergo 0.9 + (Z3 2.4 or CVC3 2.2)),
> whatever the declaration of p (int*p, or int p[0]).
>
> HTH!
> Dillon
>
> _______________________________________________
> Frama-c-discuss mailing list
> Frama-c-discuss at lists.gforge.inria.fr
> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/frama-c-discuss
>   


-- 
Claude March?                          | tel: +33 1 72 92 59 69           
INRIA Saclay - ?le-de-France           | mobile: +33 6 33 14 57 93 
Parc Orsay Universit?                  | fax: +33 1 74 85 42 29   
4, rue Jacques Monod - B?timent N      | http://www.lri.fr/~marche/
F-91893 ORSAY Cedex                    |