Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
Iris
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Model registry
Operate
Terraform modules
Monitor
Service Desk
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Yixuan Chen
Iris
Commits
6e275ac6
Commit
6e275ac6
authored
9 years ago
by
Robbert Krebbers
Browse files
Options
Downloads
Plain Diff
Merge branch 'master' of gitlab.mpi-sws.org:FP/iris-coq
parents
c938bc45
94959291
No related branches found
Branches containing commit
No related tags found
No related merge requests found
Changes
4
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
algebra/upred.v
+4
-0
4 additions, 0 deletions
algebra/upred.v
heap_lang/heap.v
+18
-13
18 additions, 13 deletions
heap_lang/heap.v
program_logic/auth.v
+2
-2
2 additions, 2 deletions
program_logic/auth.v
program_logic/invariants.v
+2
-2
2 additions, 2 deletions
program_logic/invariants.v
with
26 additions
and
17 deletions
algebra/upred.v
+
4
−
0
View file @
6e275ac6
...
@@ -615,6 +615,10 @@ Lemma sep_intro_True_l P Q R : True ⊑ P → R ⊑ Q → R ⊑ (P ★ Q).
...
@@ -615,6 +615,10 @@ Lemma sep_intro_True_l P Q R : True ⊑ P → R ⊑ Q → R ⊑ (P ★ Q).
Proof
.
by
intros
;
rewrite
-
(
left_id
True
%
I
uPred_sep
R
);
apply
sep_mono
.
Qed
.
Proof
.
by
intros
;
rewrite
-
(
left_id
True
%
I
uPred_sep
R
);
apply
sep_mono
.
Qed
.
Lemma
sep_intro_True_r
P
Q
R
:
R
⊑
P
→
True
⊑
Q
→
R
⊑
(
P
★
Q
)
.
Lemma
sep_intro_True_r
P
Q
R
:
R
⊑
P
→
True
⊑
Q
→
R
⊑
(
P
★
Q
)
.
Proof
.
by
intros
;
rewrite
-
(
right_id
True
%
I
uPred_sep
R
);
apply
sep_mono
.
Qed
.
Proof
.
by
intros
;
rewrite
-
(
right_id
True
%
I
uPred_sep
R
);
apply
sep_mono
.
Qed
.
Lemma
sep_elim_True_l
P
Q
R
:
True
⊑
P
→
(
P
★
R
)
⊑
Q
→
R
⊑
Q
.
Proof
.
by
intros
HP
;
rewrite
-
HP
left_id
.
Qed
.
Lemma
sep_elim_True_r
P
Q
R
:
True
⊑
P
→
(
R
★
P
)
⊑
Q
→
R
⊑
Q
.
Proof
.
by
intros
HP
;
rewrite
-
HP
right_id
.
Qed
.
Lemma
wand_intro_l
P
Q
R
:
(
Q
★
P
)
⊑
R
→
P
⊑
(
Q
-★
R
)
.
Lemma
wand_intro_l
P
Q
R
:
(
Q
★
P
)
⊑
R
→
P
⊑
(
Q
-★
R
)
.
Proof
.
rewrite
comm
;
apply
wand_intro_r
.
Qed
.
Proof
.
rewrite
comm
;
apply
wand_intro_r
.
Qed
.
Lemma
wand_elim_r
P
Q
:
(
P
★
(
P
-★
Q
))
⊑
Q
.
Lemma
wand_elim_r
P
Q
:
(
P
★
(
P
-★
Q
))
⊑
Q
.
...
...
This diff is collapsed.
Click to expand it.
heap_lang/heap.v
+
18
−
13
View file @
6e275ac6
...
@@ -84,7 +84,7 @@ Section heap.
...
@@ -84,7 +84,7 @@ Section heap.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
-
wp_alloc_pst
;
first
(
apply
sep_mono
;
first
done
);
try
eassumption
.
rewrite
-
wp_alloc_pst
;
first
(
apply
sep_mono
;
first
done
);
try
done
;
[]
.
apply
later_mono
,
forall_intro
=>
l
.
rewrite
(
forall_elim
l
)
.
apply
wand_intro_l
.
apply
later_mono
,
forall_intro
=>
l
.
rewrite
(
forall_elim
l
)
.
apply
wand_intro_l
.
rewrite
-
(
exist_intro
l
)
!
left_id
.
rewrite
always_and_sep_l
-
assoc
.
rewrite
-
(
exist_intro
l
)
!
left_id
.
rewrite
always_and_sep_l
-
assoc
.
apply
const_elim_sep_l
=>
Hfresh
.
apply
const_elim_sep_l
=>
Hfresh
.
...
@@ -119,8 +119,10 @@ Section heap.
...
@@ -119,8 +119,10 @@ Section heap.
P
⊑
(
▷
(
∀
l
,
heap_mapsto
HeapI
γ
l
v
-★
Q
(
LocV
l
)))
→
P
⊑
(
▷
(
∀
l
,
heap_mapsto
HeapI
γ
l
v
-★
Q
(
LocV
l
)))
→
P
⊑
wp
E
(
Alloc
e
)
Q
.
P
⊑
wp
E
(
Alloc
e
)
Q
.
Proof
.
Proof
.
intros
HN
?
Hctx
HP
.
rewrite
-
(
right_id
True
%
I
(
★
)
%
I
(
P
))
(
auth_empty
γ
)
pvs_frame_l
.
intros
HN
?
Hctx
HP
.
eapply
sep_elim_True_r
.
apply
wp_strip_pvs
.
eapply
wp_alloc_heap
with
(
σ
:=
∅
);
try
eassumption
.
{
eapply
(
auth_empty
γ
)
.
}
rewrite
pvs_frame_l
.
apply
wp_strip_pvs
.
eapply
wp_alloc_heap
with
(
σ
:=
∅
);
try
done
;
[|]
.
{
eauto
with
I
.
}
{
eauto
with
I
.
}
rewrite
HP
comm
.
apply
sep_mono
.
rewrite
HP
comm
.
apply
sep_mono
.
-
rewrite
/
heap_own
.
f_equiv
.
apply
:
map_eq
=>
l
.
by
rewrite
lookup_fmap
!
lookup_empty
.
-
rewrite
/
heap_own
.
f_equiv
.
apply
:
map_eq
=>
l
.
by
rewrite
lookup_fmap
!
lookup_empty
.
...
@@ -166,12 +168,13 @@ Section heap.
...
@@ -166,12 +168,13 @@ Section heap.
P
⊑
wp
E
(
Store
(
Loc
l
)
e
)
Q
.
P
⊑
wp
E
(
Store
(
Loc
l
)
e
)
Q
.
Proof
.
Proof
.
rewrite
/
heap_ctx
/
heap_own
.
intros
Hl
Hval
HN
Hctx
HP
.
rewrite
/
heap_ctx
/
heap_own
.
intros
Hl
Hval
HN
Hctx
HP
.
eapply
(
auth_fsa
(
heap_inv
HeapI
)
(
wp_fsa
_)
(
λ
_:(),
alter
(
λ
_,
Excl
v
)
l
));
simpl
;
eauto
.
eapply
(
auth_fsa
(
heap_inv
HeapI
)
(
wp_fsa
_)
(
λ
_:(),
alter
(
λ
_,
Excl
v
)
l
));
simpl
;
eauto
.
rewrite
HP
=>{
HP
Hctx
HN
}
.
apply
sep_mono
;
first
done
.
rewrite
HP
=>{
HP
Hctx
HN
}
.
apply
sep_mono
;
first
done
.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
-
wp_store_pst
;
first
(
apply
sep_mono
;
first
done
);
try
eassumpti
on
;
last
first
.
rewrite
-
wp_store_pst
;
first
(
apply
sep_mono
;
first
done
);
try
d
on
e
;
last
first
.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
apply
later_mono
,
wand_intro_l
.
apply
later_mono
,
wand_intro_l
.
...
@@ -189,12 +192,13 @@ Section heap.
...
@@ -189,12 +192,13 @@ Section heap.
+
by
rewrite
lookup_alter
/
to_heap
!
lookup_fmap
lookup_insert
Hl
/=.
+
by
rewrite
lookup_alter
/
to_heap
!
lookup_fmap
lookup_insert
Hl
/=.
+
rewrite
lookup_alter_ne
//
!
lookup_fmap
lookup_insert_ne
//.
}
+
rewrite
lookup_alter_ne
//
!
lookup_fmap
lookup_insert_ne
//.
}
rewrite
!
EQ
.
apply
sep_mono
;
last
done
.
rewrite
!
EQ
.
apply
sep_mono
;
last
done
.
f_equiv
.
apply
:
map_eq
=>
l'
.
move
:
(
Hv
0
%
nat
l'
)
.
destruct
(
decide
(
l
=
l'
));
simplify_map_equality
.
f_equiv
.
apply
:
map_eq
=>
l'
.
move
:
(
Hv
0
%
nat
l'
)
.
destruct
(
decide
(
l
=
l'
));
simplify_map_equality
.
-
rewrite
/
from_heap
/
to_heap
lookup_insert
lookup_omap
!
lookup_op
.
-
rewrite
/
from_heap
/
to_heap
lookup_insert
lookup_omap
!
lookup_op
.
rewrite
!
lookup_fmap
lookup_insert
Hl
.
rewrite
!
lookup_fmap
lookup_insert
Hl
.
case
(
hf
!!
l'
)=>[[?||]|];
auto
;
contradiction
.
case
(
hf
!!
l'
)=>[[?||]|];
auto
;
contradiction
.
-
rewrite
/
from_heap
/
to_heap
lookup_insert_ne
//
!
lookup_omap
!
lookup_op
!
lookup_fmap
.
-
rewrite
/
from_heap
/
to_heap
lookup_insert_ne
//
!
lookup_omap
.
rewrite
lookup_insert_ne
//.
rewrite
!
lookup_op
!
lookup_fmap
lookup_insert_ne
//.
Qed
.
Qed
.
Lemma
wp_store
N
E
γ
l
v'
e
v
P
Q
:
Lemma
wp_store
N
E
γ
l
v'
e
v
P
Q
:
...
@@ -204,7 +208,8 @@ Section heap.
...
@@ -204,7 +208,8 @@ Section heap.
P
⊑
(
heap_mapsto
HeapI
γ
l
v'
★
▷
(
heap_mapsto
HeapI
γ
l
v
-★
Q
(
LitV
LitUnit
)))
→
P
⊑
(
heap_mapsto
HeapI
γ
l
v'
★
▷
(
heap_mapsto
HeapI
γ
l
v
-★
Q
(
LitV
LitUnit
)))
→
P
⊑
wp
E
(
Store
(
Loc
l
)
e
)
Q
.
P
⊑
wp
E
(
Store
(
Loc
l
)
e
)
Q
.
Proof
.
Proof
.
rewrite
/
heap_mapsto
=>
Hval
HN
Hctx
HP
.
eapply
wp_store_heap
;
try
eassumption
;
last
first
.
rewrite
/
heap_mapsto
=>
Hval
HN
Hctx
HP
.
eapply
wp_store_heap
;
try
done
;
last
first
.
-
rewrite
HP
.
apply
sep_mono
;
first
done
.
by
rewrite
insert_singleton
.
-
rewrite
HP
.
apply
sep_mono
;
first
done
.
by
rewrite
insert_singleton
.
-
by
rewrite
lookup_insert
.
-
by
rewrite
lookup_insert
.
Qed
.
Qed
.
...
@@ -223,7 +228,7 @@ Section heap.
...
@@ -223,7 +228,7 @@ Section heap.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
-
wp_cas_fail_pst
;
first
(
apply
sep_mono
;
first
done
);
try
eassumpti
on
;
last
first
.
rewrite
-
wp_cas_fail_pst
;
first
(
apply
sep_mono
;
first
done
);
try
d
on
e
;
last
first
.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
apply
later_mono
,
wand_intro_l
.
apply
later_mono
,
wand_intro_l
.
...
@@ -238,7 +243,7 @@ Section heap.
...
@@ -238,7 +243,7 @@ Section heap.
P
⊑
(
heap_mapsto
HeapI
γ
l
v'
★
▷
(
heap_mapsto
HeapI
γ
l
v'
-★
Q
'
false
))
→
P
⊑
(
heap_mapsto
HeapI
γ
l
v'
★
▷
(
heap_mapsto
HeapI
γ
l
v'
-★
Q
'
false
))
→
P
⊑
wp
E
(
Cas
(
Loc
l
)
e1
e2
)
Q
.
P
⊑
wp
E
(
Cas
(
Loc
l
)
e1
e2
)
Q
.
Proof
.
Proof
.
rewrite
/
heap_mapsto
=>???
.
eapply
wp_cas_fail_heap
;
try
eassumption
.
rewrite
/
heap_mapsto
=>???
.
eapply
wp_cas_fail_heap
;
try
done
;
[]
.
by
simplify_map_equality
.
by
simplify_map_equality
.
Qed
.
Qed
.
...
@@ -256,7 +261,7 @@ Section heap.
...
@@ -256,7 +261,7 @@ Section heap.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
apply
forall_intro
=>
hf
.
apply
wand_intro_l
.
rewrite
/
heap_inv
.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
-
assoc
.
apply
const_elim_sep_l
=>
Hv
/=.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
{
1
}[(
▷
ownP
_)
%
I
]
pvs_timeless
!
pvs_frame_r
.
apply
wp_strip_pvs
.
rewrite
-
wp_cas_suc_pst
;
first
(
apply
sep_mono
;
first
done
);
try
eassumpti
on
;
last
first
.
rewrite
-
wp_cas_suc_pst
;
first
(
apply
sep_mono
;
first
done
);
try
d
on
e
;
last
first
.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
{
move
:
(
Hv
0
%
nat
l
)
.
rewrite
lookup_omap
lookup_op
lookup_fmap
Hl
/=.
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
case
_:(
hf
!!
l
)=>[[?||]|];
by
auto
.
}
apply
later_mono
,
wand_intro_l
.
apply
later_mono
,
wand_intro_l
.
...
@@ -289,7 +294,7 @@ Section heap.
...
@@ -289,7 +294,7 @@ Section heap.
P
⊑
(
heap_mapsto
HeapI
γ
l
v1
★
▷
(
heap_mapsto
HeapI
γ
l
v2
-★
Q
'
true
))
→
P
⊑
(
heap_mapsto
HeapI
γ
l
v1
★
▷
(
heap_mapsto
HeapI
γ
l
v2
-★
Q
'
true
))
→
P
⊑
wp
E
(
Cas
(
Loc
l
)
e1
e2
)
Q
.
P
⊑
wp
E
(
Cas
(
Loc
l
)
e1
e2
)
Q
.
Proof
.
Proof
.
rewrite
/
heap_mapsto
=>????
HP
.
eapply
wp_cas_suc_heap
;
try
eassumpti
on
;
last
first
.
rewrite
/
heap_mapsto
=>????
HP
.
eapply
wp_cas_suc_heap
;
try
d
on
e
;
last
first
.
-
rewrite
HP
.
apply
sep_mono
;
first
done
.
by
rewrite
insert_singleton
.
-
rewrite
HP
.
apply
sep_mono
;
first
done
.
by
rewrite
insert_singleton
.
-
by
simplify_map_equality
.
-
by
simplify_map_equality
.
Qed
.
Qed
.
...
...
This diff is collapsed.
Click to expand it.
program_logic/auth.v
+
2
−
2
View file @
6e275ac6
...
@@ -32,8 +32,8 @@ Section auth.
...
@@ -32,8 +32,8 @@ Section auth.
Lemma
auth_alloc
N
a
:
Lemma
auth_alloc
N
a
:
✓
a
→
φ
a
⊑
pvs
N
N
(
∃
γ
,
auth_ctx
AuthI
γ
N
φ
∧
auth_own
AuthI
γ
a
)
.
✓
a
→
φ
a
⊑
pvs
N
N
(
∃
γ
,
auth_ctx
AuthI
γ
N
φ
∧
auth_own
AuthI
γ
a
)
.
Proof
.
Proof
.
intros
Ha
.
rewrite
-
(
right_id
True
%
I
(
★
)
%
I
(
φ
_))
.
intros
Ha
.
eapply
sep_elim_True_r
.
rewrite
(
own_alloc
AuthI
(
Auth
(
Excl
a
)
a
)
N
)
//
;
[]
.
{
by
eapply
(
own_alloc
AuthI
(
Auth
(
Excl
a
)
a
)
N
)
.
}
rewrite
pvs_frame_l
.
apply
pvs_strip_pvs
.
rewrite
pvs_frame_l
.
apply
pvs_strip_pvs
.
rewrite
sep_exist_l
.
apply
exist_elim
=>
γ
.
rewrite
-
(
exist_intro
γ
)
.
rewrite
sep_exist_l
.
apply
exist_elim
=>
γ
.
rewrite
-
(
exist_intro
γ
)
.
transitivity
(
▷
auth_inv
AuthI
γ
φ
★
auth_own
AuthI
γ
a
)
%
I
.
transitivity
(
▷
auth_inv
AuthI
γ
φ
★
auth_own
AuthI
γ
a
)
%
I
.
...
...
This diff is collapsed.
Click to expand it.
program_logic/invariants.v
+
2
−
2
View file @
6e275ac6
...
@@ -97,14 +97,14 @@ Lemma pvs_open_close E N P Q R :
...
@@ -97,14 +97,14 @@ Lemma pvs_open_close E N P Q R :
R
⊑
inv
N
P
→
R
⊑
inv
N
P
→
R
⊑
(
▷
P
-★
pvs
(
E
∖
nclose
N
)
(
E
∖
nclose
N
)
(
▷
P
★
Q
))
→
R
⊑
(
▷
P
-★
pvs
(
E
∖
nclose
N
)
(
E
∖
nclose
N
)
(
▷
P
★
Q
))
→
R
⊑
pvs
E
E
Q
.
R
⊑
pvs
E
E
Q
.
Proof
.
intros
.
by
apply
:
(
inv_fsa
pvs_fsa
)
;
try
eassumption
.
Qed
.
Proof
.
intros
.
by
apply
:
(
inv_fsa
pvs_fsa
)
.
Qed
.
Lemma
wp_open_close
E
e
N
P
(
Q
:
val
Λ
→
iProp
Λ
Σ
)
R
:
Lemma
wp_open_close
E
e
N
P
(
Q
:
val
Λ
→
iProp
Λ
Σ
)
R
:
atomic
e
→
nclose
N
⊆
E
→
atomic
e
→
nclose
N
⊆
E
→
R
⊑
inv
N
P
→
R
⊑
inv
N
P
→
R
⊑
(
▷
P
-★
wp
(
E
∖
nclose
N
)
e
(
λ
v
,
▷
P
★
Q
v
))
→
R
⊑
(
▷
P
-★
wp
(
E
∖
nclose
N
)
e
(
λ
v
,
▷
P
★
Q
v
))
→
R
⊑
wp
E
e
Q
.
R
⊑
wp
E
e
Q
.
Proof
.
intros
.
apply
:
(
inv_fsa
(
wp_fsa
e
))
;
eassumption
.
Qed
.
Proof
.
intros
.
by
apply
:
(
inv_fsa
(
wp_fsa
e
))
.
Qed
.
Lemma
inv_alloc
N
P
:
▷
P
⊑
pvs
N
N
(
inv
N
P
)
.
Lemma
inv_alloc
N
P
:
▷
P
⊑
pvs
N
N
(
inv
N
P
)
.
Proof
.
by
rewrite
/
inv
(
pvs_allocI
N
);
last
apply
coPset_suffixes_infinite
.
Qed
.
Proof
.
by
rewrite
/
inv
(
pvs_allocI
N
);
last
apply
coPset_suffixes_infinite
.
Qed
.
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment