 09 Jan, 2013 1 commit


Robbert Krebbers authored
The development now corresponds exactly to the FoSSaCS 2013 paper. Also, the prelude is updated to the one of the master branch.

 10 Oct, 2012 1 commit


Robbert Krebbers authored
* Introduce a type class and notation for disjointness. * Define unions of finite maps (a lot of theory has still to be moved from memory to fin_maps). * Prove the Hoare rule for function calls with arguments. * Prove the Hoare rule to add sets of functions. * Some additional theory on lifting of assertions.

 04 Sep, 2012 1 commit


Robbert Krebbers authored

 30 Aug, 2012 1 commit


Robbert Krebbers authored

 29 Aug, 2012 1 commit


Robbert Krebbers authored
improve some definitions, simplify some proofs.

 21 Aug, 2012 1 commit


Robbert Krebbers authored
The main changes are: * Function calls in the operational semantics * Mutually recursive function calls in the axiomatic semantics * A general definition of the interpretation of the axiomatic semantics so as to improve reusability (useful for function calls, and also for expressions in future versions) * Type classes for stack independent, memory independent, and memory extensible assertions, and a lot of instances to automatically derive these properties. * Many additional lemmas on the memory and more robust tactics to simplify goals involving is_free and mem_disjoint * Proof of preservation of statements in the smallstep semantics * Some new tactics: feed, feed destruct, feed inversion, etc... * More robust tactic scripts using bullets and structured scripts * Truncate most lines at 80 characters

 21 Jun, 2012 1 commit


Robbert Krebbers authored

 14 Jun, 2012 2 commits


Robbert Krebbers authored

Robbert Krebbers authored
Before, it just ensured that whenever one can split up the memory into two parts before running the program, the framing part can be split off when the program is finished. Now it also ensure that it can be split off at any moment during the execution of the program. When we extend to nondeterministic expressions/sequence points we certainly need this for the Hoare judgment for expressions, as C allows evaluation of them to interleave. However, for consistency, and further extensions, it is nice to have this property for statements too.

 11 Jun, 2012 1 commit


Robbert Krebbers authored
