1. 27 Jul, 2016 2 commits
  2. 14 Jun, 2016 1 commit
  3. 27 May, 2016 4 commits
  4. 21 Mar, 2016 1 commit
  5. 03 Mar, 2016 1 commit
  6. 20 Feb, 2016 1 commit
  7. 17 Feb, 2016 2 commits
  8. 13 Feb, 2016 1 commit
  9. 11 Feb, 2016 1 commit
  10. 04 Feb, 2016 1 commit
  11. 22 Jan, 2016 1 commit
  12. 16 Jan, 2016 1 commit
  13. 12 Jan, 2016 1 commit
  14. 15 Dec, 2015 1 commit
  15. 18 Nov, 2015 1 commit
  16. 16 Nov, 2015 1 commit
  17. 03 Feb, 2017 1 commit
  18. 22 Apr, 2015 1 commit
  19. 08 Feb, 2015 2 commits
  20. 27 Jan, 2015 1 commit
    • Robbert Krebbers's avatar
      Let the malloc expression non-deterministically yield NULL. · fdcc90dd
      Robbert Krebbers authored
      * This behavior is "implementation defined" and can be turned on and off
        using the Boolean field "alloc_can_fail" of the class "Env".
      * The expression "EAlloc" is now an r-value of pointer type instead of an
        l-value.
      * The executable semantics for expressions is now non-deterministic. Hence,
        some proofs had to be revised.
      fdcc90dd
  21. 17 Dec, 2014 1 commit
  22. 23 Nov, 2014 1 commit
  23. 06 Nov, 2014 1 commit
  24. 30 Sep, 2014 1 commit
  25. 03 Sep, 2014 1 commit
  26. 06 Aug, 2014 1 commit
  27. 04 Aug, 2014 1 commit
  28. 25 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Fix bugs in pointer operations · baaee9e0
      Robbert Krebbers authored
      * Equality comparison of NULL and non NULL pointers should be defined
      * Pointer comparisons, casts, and truth should only be defined for pointers
        that are alive
      * Treat dead pointers as indeterminate values in refinements. The proofs that
        all operations preserve refinement indicate that dead pointers can be indeed
        by replaced by anything without affecting the program's behavior.
      baaee9e0
  29. 23 Jun, 2014 1 commit
  30. 16 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Changes in preparation of the C type system and C front-end language · 3503a91f
      Robbert Krebbers authored
      Major changes:
      * Make void a base type, and include a proper void base value. This is necessary
        because expressions (free, functions without return value) can yield a void.
        We now also allow void casts conforming to the C standard.
      * Various missing lemmas about typing, weakening, decidability, ...
      * The operations "free" and "alloc" now operate on l-values instead of r-values.
        This removes some duplication.
      * Improve notations of expressions and statements. Change the presence of the
        operators conforming to the C standard.
      
      Small changes:
      * Use the classes "Typed" and "TypeCheck" for validity of indexes in memory.
        This gives more uniform notations.
      * New tactic "typed_inversion" performs inversion on an inductive predicate
        of type "Typed" and folds the premises.
      * Remove a horrible hack in the definitions of the classes "FMap", "MBind",
        "OMap", "Alter" that was used to let "simpl" behave better. Instead, we have
        defined a tactic "csimpl" that folds the results after performing an
        ordinary "simpl".
      * Fast operation to remove duplicates from lists using hashsets.
      * Make various type constructors (mainly finite map implementations) universe
        polymorphic by packing them into an inductive. This way, the whole C syntax
        can live in type, avoiding the need for (slow) universe checks.
      3503a91f
  31. 22 May, 2014 1 commit
    • Robbert Krebbers's avatar
      Various changes. · bb9d75d9
      Robbert Krebbers authored
      * Parametrize refinements with memories. This way, refinements imply typing,
        for example [w1 ⊑{Γ,f@m1↦m2} w2 : τ → (Γ,m1) ⊢ w1 : τ]. This relieves us from
        various hacks.
      * Use addresses instead of index/references pairs for lookup and alter
        operations on memories.
      * Prove various disjointness properties.
      bb9d75d9
  32. 02 May, 2014 2 commits
  33. 24 Jun, 2013 1 commit