Frama-C-discuss mailing list archives

This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] \at in ACSL assertions

  • Subject: [Frama-c-discuss] \at in ACSL assertions
  • From: anne.pacalet at inria.fr (Anne Pacalet)
  • Date: Mon, 15 Nov 2010 17:18:20 +0100
  • In-reply-to: <1289837441.1984.78.camel@guillaume-laptop>
  • References: <AANLkTimyk_961c8Xk6_U33TAxabBGSeoaRB+EtM-OiBR@mail.gmail.com> <20101115145125.5bad24be@is010235> <4CE13E87.5030807@adacore.com> <2035721159.552419.1289831625935.JavaMail.root@zmbs3.inria.fr> <1289832872.1984.60.camel@guillaume-laptop> <2038674242.558849.1289835496349.JavaMail.root@zmbs3.inria.fr> <1289836319.1984.68.camel@guillaume-laptop> <1036151116.560170.1289836597250.JavaMail.root@zmbs3.inria.fr> <1289837441.1984.78.camel@guillaume-laptop>
Le 15/11/2010 17:10, Guillaume Melquiond a ?crit :
> As a matter of fact, that's exactly the current ACSL interpretation. The
> annotation above is syntactic sugar for
>
> Here42:
> //@ assert \at(x,Here42)>  \at(y,Here42);
>
> and it precisely states that for any program state at label Here42, the
> value of variable x in that state is greater than the value of variable
> y in that state.

Yes : but what I tried to say is that x and y values are considered
both to be in the same state.

When you said :
 > It is not obvious to me that \at(v,l) is the value of variable v
 > the last time the program reached label l. It could also be
 > any value of v any time the program reached l.

it seemed to me that you proposed to merge several states...

-- 
Anne.