Skip to content
This repository has been archived by the owner on Aug 2, 2022. It is now read-only.

Proof of runtime packages #51

Merged
merged 12 commits into from
Jul 18, 2019
Merged

Proof of runtime packages #51

merged 12 commits into from
Jul 18, 2019

Conversation

jklmnn
Copy link
Member

@jklmnn jklmnn commented Jul 18, 2019

Prove the runtime packages in the minimal runtime. For those packages that require code that is not SPARK compatible SPARK has been turned off with a comment. System.Parameters cannot be SPARK but SPARK also cannot be turned off explicitly as its types could not be used in SPARK code then. In Interfaces.C the long double has been disabled as it is not supported in SPARK.
The System.Arith64 has been proven for Add_With_Ovflo_Check and Subtract_With_Ovflo_Check for the absence of runtime errors. The missing functions and the two unproven lemmas are handled in #50. Since the properties of the conversion functions rest on assumptions about the binary integer representation they have been moved to a separate package to support unit tests.

@senier senier merged commit b2903fa into project_3 Jul 18, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants