Skip to content

Simpler syncer specs

Ralf Jung requested to merge uncurried-specs into master

This simplifies the syncer specs. The sequential syncer only is slightly improved, by changing

  Definition synced R (f' f: val) :=
    (□ ∀ P Q (x: val), ({{ R ★ P x }} f x {{ v, R ★ Q x v }}) →
                       ({{ P x }} f' x {{ v, Q x v }}))%I.

such that P, Q don't factor in a dependency on x any more. Since all three are quantified at the same time, the two specs are equivalent -- and the one where P is not a predicate and Q is exactly the postcondition is arguably simpler:

  Definition synced R (f f': val) :=
    (□ ∀ P Q (x: val), ({{ R ★ P }} f x {{ v, R ★ Q v }}) →
                       ({{ P }} f' x {{ Q }}))%I.

For the atomic spec, the changes are deeper. The currying on some location l is entirely removed. is_atomic_syncer better mirrors is_syncer from the sequential version. And finally, we use "original" atomic triples and not some modified version thereof (so atomic_triple_base is killed).

TODO: Fix atomic_pcas.v, it relied on the location currying done by atomic_sync.v. However, I don't entirely grok that file. @zhangz could you give that a look?

Merge request reports