proofmode.v 8.9 KB
Newer Older
1
From iris.program_logic Require Export weakestpre.
Robbert Krebbers's avatar
Robbert Krebbers committed
2
From iris.proofmode Require Import coq_tactics.
3
From iris.proofmode Require Export tactics.
4
From iris.heap_lang Require Export tactics lifting.
5
Set Default Proof Using "Type".
Robbert Krebbers's avatar
Robbert Krebbers committed
6
7
Import uPred.

8
9
10
11
12
13
14
Ltac wp_simpl :=
  try iStartProof;
  try lazymatch goal with
  | |- envs_entails ?Δ (wp ?E ?e ?Q) =>
      let e' := eval simpl in e in change (envs_entails Δ (wp E e' Q))
  end.

15
Lemma tac_wp_pure `{heapG Σ} Δ Δ' E e1 e2 φ Φ :
16
17
  PureExec φ e1 e2 
  φ 
18
  IntoLaterNEnvs 1 Δ Δ' 
19
20
  envs_entails Δ' (WP e2 @ E {{ Φ }}) 
  envs_entails Δ (WP e1 @ E {{ Φ }}).
21
Proof.
22
  rewrite /envs_entails=> ??? HΔ'. rewrite into_laterN_env_sound /=.
23
  rewrite HΔ' -wp_pure_step_later //.
24
Qed.
25

26
Lemma tac_wp_value `{heapG Σ} Δ E Φ e v :
27
  IntoVal e v 
28
  envs_entails Δ (Φ v)  envs_entails Δ (WP e @ E {{ Φ }}).
29
30
31
Proof. rewrite /envs_entails=> ? ->. by apply wp_value. Qed.

Ltac wp_value_head := eapply tac_wp_value; [apply _|lazy beta].
Robbert Krebbers's avatar
Robbert Krebbers committed
32

33
Tactic Notation "wp_pure" open_constr(efoc) :=
Robbert Krebbers's avatar
Robbert Krebbers committed
34
  iStartProof;
35
  lazymatch goal with
Robbert Krebbers's avatar
Robbert Krebbers committed
36
37
38
39
40
41
42
43
44
45
  | |- envs_entails _ (wp ?E ?e ?Q) =>
    let e := eval simpl in e in
    reshape_expr e ltac:(fun K e' =>
      unify e' efoc;
      eapply (tac_wp_pure _ _ _ (fill K e'));
      [apply _                        (* PureExec *)
      |try fast_done                  (* The pure condition for PureExec *)
      |apply _                        (* IntoLaters *)
      |simpl_subst; try wp_value_head (* new goal *)
      ])
46
47
   || fail "wp_pure: cannot find" efoc "in" e "or" efoc "is not a reduct"
  | _ => fail "wp_pure: not a 'wp'"
48
49
  end.

50
51
52
53
54
55
56
57
58
59
60
61
Tactic Notation "wp_if" := wp_pure (If _ _ _).
Tactic Notation "wp_if_true" := wp_pure (If (Lit (LitBool true)) _ _).
Tactic Notation "wp_if_false" := wp_pure (If (Lit (LitBool false)) _ _).
Tactic Notation "wp_unop" := wp_pure (UnOp _ _).
Tactic Notation "wp_binop" := wp_pure (BinOp _ _ _).
Tactic Notation "wp_op" := wp_unop || wp_binop.
Tactic Notation "wp_rec" := wp_pure (App _ _).
Tactic Notation "wp_lam" := wp_rec.
Tactic Notation "wp_let" := wp_lam.
Tactic Notation "wp_seq" := wp_lam.
Tactic Notation "wp_proj" := wp_pure (Fst _) || wp_pure (Snd _).
Tactic Notation "wp_case" := wp_pure (Case _ _ _).
62
Tactic Notation "wp_match" := wp_case; wp_let.
63

64
65
66
Lemma tac_wp_bind `{heapG Σ} K Δ E Φ e :
  envs_entails Δ (WP e @ E {{ v, WP fill K (of_val v) @ E {{ Φ }} }})%I 
  envs_entails Δ (WP fill K e @ E {{ Φ }}).
67
Proof. rewrite /envs_entails=> ->. by apply: wp_bind. Qed.
68

Robbert Krebbers's avatar
Robbert Krebbers committed
69
70
71
Ltac wp_bind_core K :=
  lazymatch eval hnf in K with
  | [] => idtac
72
  | _ => apply (tac_wp_bind K); simpl
Robbert Krebbers's avatar
Robbert Krebbers committed
73
74
  end.

75
76
77
Tactic Notation "wp_bind" open_constr(efoc) :=
  iStartProof;
  lazymatch goal with
78
  | |- envs_entails _ (wp ?E ?e ?Q) =>
79
80
    reshape_expr e ltac:(fun K e' => unify e' efoc; wp_bind_core K)
    || fail "wp_bind: cannot find" efoc "in" e
81
82
83
84
  | _ => fail "wp_bind: not a 'wp'"
  end.

(** Heap tactics *)
Robbert Krebbers's avatar
Robbert Krebbers committed
85
Section heap.
86
Context `{heapG Σ}.
87
88
89
Implicit Types P Q : iProp Σ.
Implicit Types Φ : val  iProp Σ.
Implicit Types Δ : envs (iResUR Σ).
Robbert Krebbers's avatar
Robbert Krebbers committed
90

91
Lemma tac_wp_alloc Δ Δ' E j K e v Φ :
92
  IntoVal e v 
93
  IntoLaterNEnvs 1 Δ Δ' 
Robbert Krebbers's avatar
Robbert Krebbers committed
94
  ( l,  Δ'',
95
    envs_app false (Esnoc Enil j (l  v)) Δ' = Some Δ'' 
96
97
    envs_entails Δ'' (WP fill K (Lit (LitLoc l)) @ E {{ Φ }})) 
  envs_entails Δ (WP fill K (Alloc e) @ E {{ Φ }}).
Robbert Krebbers's avatar
Robbert Krebbers committed
98
Proof.
99
100
  rewrite /envs_entails=> ?? HΔ.
  rewrite -wp_bind. eapply wand_apply; first exact: wp_alloc.
101
  rewrite left_id into_laterN_env_sound; apply later_mono, forall_intro=> l.
Robbert Krebbers's avatar
Robbert Krebbers committed
102
103
104
105
  destruct (HΔ l) as (Δ''&?&HΔ'). rewrite envs_app_sound //; simpl.
  by rewrite right_id HΔ'.
Qed.

106
Lemma tac_wp_load Δ Δ' E i K l q v Φ :
107
  IntoLaterNEnvs 1 Δ Δ' 
Robbert Krebbers's avatar
Robbert Krebbers committed
108
  envs_lookup i Δ' = Some (false, l {q} v)%I 
109
110
  envs_entails Δ' (WP fill K (of_val v) @ E {{ Φ }}) 
  envs_entails Δ (WP fill K (Load (Lit (LitLoc l))) @ E {{ Φ }}).
Robbert Krebbers's avatar
Robbert Krebbers committed
111
Proof.
112
113
  rewrite /envs_entails=> ???.
  rewrite -wp_bind. eapply wand_apply; first exact: wp_load.
114
  rewrite into_laterN_env_sound -later_sep envs_lookup_split //; simpl.
Robbert Krebbers's avatar
Robbert Krebbers committed
115
116
117
  by apply later_mono, sep_mono_r, wand_mono.
Qed.

118
Lemma tac_wp_store Δ Δ' Δ'' E i K l v e v' Φ :
119
  IntoVal e v' 
120
  IntoLaterNEnvs 1 Δ Δ' 
Robbert Krebbers's avatar
Robbert Krebbers committed
121
122
  envs_lookup i Δ' = Some (false, l  v)%I 
  envs_simple_replace i false (Esnoc Enil i (l  v')) Δ' = Some Δ'' 
123
124
  envs_entails Δ'' (WP fill K (Lit LitUnit) @ E {{ Φ }}) 
  envs_entails Δ (WP fill K (Store (Lit (LitLoc l)) e) @ E {{ Φ }}).
Robbert Krebbers's avatar
Robbert Krebbers committed
125
Proof.
126
127
  rewrite /envs_entails=> ?????.
  rewrite -wp_bind. eapply wand_apply; first by eapply wp_store.
128
  rewrite into_laterN_env_sound -later_sep envs_simple_replace_sound //; simpl.
Robbert Krebbers's avatar
Robbert Krebbers committed
129
130
131
  rewrite right_id. by apply later_mono, sep_mono_r, wand_mono.
Qed.

132
Lemma tac_wp_cas_fail Δ Δ' E i K l q v e1 v1 e2 Φ :
Robbert Krebbers's avatar
Robbert Krebbers committed
133
  IntoVal e1 v1  AsVal e2 
134
  IntoLaterNEnvs 1 Δ Δ' 
Robbert Krebbers's avatar
Robbert Krebbers committed
135
  envs_lookup i Δ' = Some (false, l {q} v)%I  v  v1 
136
137
  envs_entails Δ' (WP fill K (Lit (LitBool false)) @ E {{ Φ }}) 
  envs_entails Δ (WP fill K (CAS (Lit (LitLoc l)) e1 e2) @ E {{ Φ }}).
Robbert Krebbers's avatar
Robbert Krebbers committed
138
Proof.
139
140
  rewrite /envs_entails=> ??????.
  rewrite -wp_bind. eapply wand_apply; first exact: wp_cas_fail.
141
  rewrite into_laterN_env_sound -later_sep envs_lookup_split //; simpl.
Robbert Krebbers's avatar
Robbert Krebbers committed
142
143
144
  by apply later_mono, sep_mono_r, wand_mono.
Qed.

145
Lemma tac_wp_cas_suc Δ Δ' Δ'' E i K l v e1 v1 e2 v2 Φ :
146
  IntoVal e1 v1  IntoVal e2 v2 
147
  IntoLaterNEnvs 1 Δ Δ' 
148
  envs_lookup i Δ' = Some (false, l  v)%I  v = v1 
Robbert Krebbers's avatar
Robbert Krebbers committed
149
  envs_simple_replace i false (Esnoc Enil i (l  v2)) Δ' = Some Δ'' 
150
151
  envs_entails Δ'' (WP fill K (Lit (LitBool true)) @ E {{ Φ }}) 
  envs_entails Δ (WP fill K (CAS (Lit (LitLoc l)) e1 e2) @ E {{ Φ }}).
Robbert Krebbers's avatar
Robbert Krebbers committed
152
Proof.
153
154
  rewrite /envs_entails=> ???????; subst.
  rewrite -wp_bind. eapply wand_apply; first exact: wp_cas_suc.
155
  rewrite into_laterN_env_sound -later_sep envs_simple_replace_sound //; simpl.
Robbert Krebbers's avatar
Robbert Krebbers committed
156
157
158
159
160
  rewrite right_id. by apply later_mono, sep_mono_r, wand_mono.
Qed.
End heap.

Tactic Notation "wp_apply" open_constr(lem) :=
161
162
  iPoseProofCore lem as false true (fun H =>
    lazymatch goal with
163
    | |- envs_entails _ (wp ?E ?e ?Q) =>
164
      reshape_expr e ltac:(fun K e' =>
165
        wp_bind_core K; iApplyHyp H; try iNext; wp_simpl) ||
166
167
168
169
170
      lazymatch iTypeOf H with
      | Some (_,?P) => fail "wp_apply: cannot apply" P
      end
    | _ => fail "wp_apply: not a 'wp'"
    end).
Robbert Krebbers's avatar
Robbert Krebbers committed
171
172

Tactic Notation "wp_alloc" ident(l) "as" constr(H) :=
173
  iStartProof;
174
  lazymatch goal with
175
  | |- envs_entails _ (wp ?E ?e ?Q) =>
176
    first
177
      [reshape_expr e ltac:(fun K e' =>
178
         eapply (tac_wp_alloc _ _ _ H K); [apply _|..])
179
      |fail 1 "wp_alloc: cannot find 'Alloc' in" e];
180
    [apply _
181
182
183
    |first [intros l | fail 1 "wp_alloc:" l "not fresh"];
      eexists; split;
        [env_cbv; reflexivity || fail "wp_alloc:" H "not fresh"
184
        |wp_simpl; try wp_value_head]]
185
  | _ => fail "wp_alloc: not a 'wp'"
Robbert Krebbers's avatar
Robbert Krebbers committed
186
  end.
187

188
189
Tactic Notation "wp_alloc" ident(l) :=
  let H := iFresh in wp_alloc l as H.
Robbert Krebbers's avatar
Robbert Krebbers committed
190
191

Tactic Notation "wp_load" :=
192
  iStartProof;
193
  lazymatch goal with
194
  | |- envs_entails _ (wp ?E ?e ?Q) =>
195
    first
196
      [reshape_expr e ltac:(fun K e' => eapply (tac_wp_load _ _ _ _ K))
197
      |fail 1 "wp_load: cannot find 'Load' in" e];
198
199
200
    [apply _
    |let l := match goal with |- _ = Some (_, (?l {_} _)%I) => l end in
     iAssumptionCore || fail "wp_load: cannot find" l "↦ ?"
201
    |wp_simpl; try wp_value_head]
202
  | _ => fail "wp_load: not a 'wp'"
Robbert Krebbers's avatar
Robbert Krebbers committed
203
204
205
  end.

Tactic Notation "wp_store" :=
206
  iStartProof;
207
  lazymatch goal with
208
  | |- envs_entails _ (wp ?E ?e ?Q) =>
209
    first
210
      [reshape_expr e ltac:(fun K e' =>
211
         eapply (tac_wp_store _ _ _ _ _ K); [apply _|..])
212
      |fail 1 "wp_store: cannot find 'Store' in" e];
213
    [apply _
214
215
216
    |let l := match goal with |- _ = Some (_, (?l {_} _)%I) => l end in
     iAssumptionCore || fail "wp_store: cannot find" l "↦ ?"
    |env_cbv; reflexivity
217
    |wp_simpl; try first [wp_pure (Seq (Lit LitUnit) _)|wp_value_head]]
218
  | _ => fail "wp_store: not a 'wp'"
Robbert Krebbers's avatar
Robbert Krebbers committed
219
220
221
  end.

Tactic Notation "wp_cas_fail" :=
222
  iStartProof;
223
  lazymatch goal with
224
  | |- envs_entails _ (wp ?E ?e ?Q) =>
225
    first
226
      [reshape_expr e ltac:(fun K e' =>
227
         eapply (tac_wp_cas_fail _ _ _ _ K); [apply _|apply _|..])
228
      |fail 1 "wp_cas_fail: cannot find 'CAS' in" e];
229
    [apply _
230
231
232
    |let l := match goal with |- _ = Some (_, (?l {_} _)%I) => l end in
     iAssumptionCore || fail "wp_cas_fail: cannot find" l "↦ ?"
    |try congruence
233
    |wp_simpl; try wp_value_head]
234
  | _ => fail "wp_cas_fail: not a 'wp'"
Robbert Krebbers's avatar
Robbert Krebbers committed
235
236
237
  end.

Tactic Notation "wp_cas_suc" :=
238
  iStartProof;
239
  lazymatch goal with
240
  | |- envs_entails _ (wp ?E ?e ?Q) =>
241
    first
242
      [reshape_expr e ltac:(fun K e' =>
243
         eapply (tac_wp_cas_suc _ _ _ _ _ K); [apply _|apply _|..])
244
      |fail 1 "wp_cas_suc: cannot find 'CAS' in" e];
245
    [apply _
246
247
248
249
    |let l := match goal with |- _ = Some (_, (?l {_} _)%I) => l end in
     iAssumptionCore || fail "wp_cas_suc: cannot find" l "↦ ?"
    |try congruence
    |env_cbv; reflexivity
250
    |wp_simpl; try wp_value_head]
251
  | _ => fail "wp_cas_suc: not a 'wp'"
Robbert Krebbers's avatar
Robbert Krebbers committed
252
  end.