Frama-C-discuss mailing list archives
This page gathers the archives of the old Frama-C-discuss archives, that was hosted by Inria's gforge before its demise at the end of 2020. To search for mails newer than September 2020, please visit the page of the new mailing list on Renater.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Frama-c-discuss] Jessie - behavior
- Subject: [Frama-c-discuss] Jessie - behavior
- From: matthieu.lemerre at cea.fr (Matthieu Lemerre)
- Date: Mon, 25 Feb 2013 10:08:37 +0100
- In-reply-to: <CAEtoXR2tM783b24PJ85zzfAEPAOuoS+yUg55PJw381QrJ519vQ@mail.gmail.com>
- References: <CAEtoXR3imsb5AQrVyX1hfv5icna4f5UoRa1jZORouUzQ9riMnQ@mail.gmail.com> <CAOH62JgJdKQF_Bmr3ZSj-8VT-O4SJCUT4qp8f1oFGJzhkqKx9A@mail.gmail.com> <CAEtoXR2tM783b24PJ85zzfAEPAOuoS+yUg55PJw381QrJ519vQ@mail.gmail.com>
Hello, There is no way in your code to know that value may be different from zero at the point of the division (i.e. when status is TRUE at the beginning of the function); this explains why the prover cannot prove this. Your code is correct only if you assume that value is different from zero at the beginning of the function, so you have to add a precondition like the following one: /*@ requires value != 0; */ Matthieu Rovedy Aparecida Busquim e Silva <rovedy at ig.com.br> writes: > Hi, > > Thank for your correction about the line @ requires (status == TRUE) || > (status == FALSE). > I corrected it. > > About the caracter @, the error was only in the email. The space is because > I have changed the blocks of annotations to test them > and I forgot to fix in the email. Sorry. > > Now, I am sending the 3 screens that are associated with the mencioned > problem: > - Screen1 without annotation > - Screen2 with the short annotation > - Screen3 with the complete annotation. > > Could you help me to understand this question? > > Thansk a lot, > Rovedy > > > 2013/2/22 Pascal Cuoq <pascal.cuoq at gmail.com> > >> On Fri, Feb 22, 2013 at 10:09 PM, Rovedy Aparecida Busquim e Silva >> <rovedy at ig.com.br> wrote: >> >> > /* @ requires status == TRUE || FALSE; >> > ... >> >> This is not how you express that status is either TRUE or FALSE in ACSL. >> Write it as you would in C, status == TRUE || status == FALSE. >> >> Besides, you left a space between the '*' character and the '@' character. >> This causes the entire annotation to be ignored. >> >> Pascal >> >> _______________________________________________ >> Frama-c-discuss mailing list >> Frama-c-discuss at lists.gforge.inria.fr >> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/frama-c-discuss >> > _______________________________________________ > Frama-c-discuss mailing list > Frama-c-discuss at lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/frama-c-discuss
- References:
- [Frama-c-discuss] Jessie - behavior
- From: rovedy at ig.com.br (Rovedy Aparecida Busquim e Silva)
- [Frama-c-discuss] Jessie - behavior
- From: pascal.cuoq at gmail.com (Pascal Cuoq)
- [Frama-c-discuss] Jessie - behavior
- From: rovedy at ig.com.br (Rovedy Aparecida Busquim e Silva)
- [Frama-c-discuss] Jessie - behavior
- Prev by Date: [Frama-c-discuss] Jessie - behavior
- Next by Date: [Frama-c-discuss] To post in frama-c discussion list
- Previous by thread: [Frama-c-discuss] Jessie - behavior
- Next by thread: [Frama-c-discuss] To post in frama-c discussion list
- Index(es):