Frama-C-discuss mailing list archives

This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] \at in ACSL assertions

  • Subject: [Frama-c-discuss] \at in ACSL assertions
  • From: virgile.prevosto at cea.fr (Virgile Prevosto)
  • Date: Mon, 15 Nov 2010 17:24:47 +0100
  • In-reply-to: <1289837441.1984.78.camel@guillaume-laptop>
  • References: <AANLkTimyk_961c8Xk6_U33TAxabBGSeoaRB+EtM-OiBR@mail.gmail.com> <20101115145125.5bad24be@is010235> <4CE13E87.5030807@adacore.com> <2035721159.552419.1289831625935.JavaMail.root@zmbs3.inria.fr> <1289832872.1984.60.camel@guillaume-laptop> <2038674242.558849.1289835496349.JavaMail.root@zmbs3.inria.fr> <1289836319.1984.68.camel@guillaume-laptop> <1036151116.560170.1289836597250.JavaMail.root@zmbs3.inria.fr> <1289837441.1984.78.camel@guillaume-laptop>
Le lun. 15 nov. 2010 17:10:41 CET,
Guillaume Melquiond <guillaume.melquiond at inria.fr> a ?crit :

> As a matter of fact, that's exactly the current ACSL interpretation. The
> annotation above is syntactic sugar for
> 
> Here42:
> //@ assert \at(x,Here42) > \at(y,Here42);
> 
> and it precisely states that for any program state at label Here42, the
> value of variable x in that state is greater than the value of variable
> y in that state.

Well, if we are taking your interpretation literally, I think that
the assert means rather 'any value that x can have in state Here42 is
greater than any value that y can have in state Here42' which is not
the same thing (assuming we got there at least twice of course) as
fixing an arbitrary state Here42 and evaluating x and y in the same
state

-- 
Virgile Prevosto
Ing?nieur-Chercheur, CEA, LIST
Laboratoire de S?ret? des Logiciels
+33/0 1 69 08 82 98