1. 17 Feb, 2016 2 commits
  2. 13 Feb, 2016 2 commits
    • Robbert Krebbers's avatar
      Use new Import/Export syntax everywhere. · 7dd32d7d
      Robbert Krebbers authored
      Also, make our redefinition of done more robust under different
      orders of Importing modules.
    • Robbert Krebbers's avatar
      Make reflexivity hints work for evars. · 86803d3a
      Robbert Krebbers authored
      Since Coq 8.4 did not backtrack on eauto premises, we used to ensure
      that hints like
        Hint Extern 0 (?x ≡{_}≡ ?y) => reflexivity.
      were not used for goals involving evars by writing ?x ≡{_}≡ ?y instead
      of _ ≡{_}≡ _.
      This seems to be a legacy issue that no longer applies to Coq 8.5, so
      I have removed these restrictions making these hints thus more powerful.
  3. 11 Feb, 2016 1 commit
  4. 20 Jan, 2016 1 commit
  5. 12 Jan, 2016 1 commit
  6. 15 Dec, 2015 1 commit
  7. 18 Nov, 2015 1 commit
  8. 16 Nov, 2015 1 commit
  9. 11 Nov, 2015 1 commit
  10. 01 Feb, 2017 1 commit
    • Robbert Krebbers's avatar
      Port to Coq 8.5 beta 2. · 02f213ce
      Robbert Krebbers authored
      The port makes the following notable changes:
      * The carrier types of separation algebras and integer environments are no
        longer in Set. Now they have a type at a fixed type level above Set. This
        both works better in 8.5 and makes the formalization more general.
        I have tried putting them at polymorphic type levels, but that increased the
        compilation time by an order of magnitude.
      * I am using a custom f_equal tactic written in Ltac to circumvent bug #4069.
        That bug has been fixed, so this custom tactic can be removed when the next
        beta of 8.5 is out.
  11. 04 Jun, 2015 1 commit
  12. 25 Feb, 2015 1 commit
  13. 16 Feb, 2015 1 commit
  14. 08 Feb, 2015 2 commits
    • Robbert Krebbers's avatar
      Update copyright headers. · 5a73c4ed
      Robbert Krebbers authored
    • Robbert Krebbers's avatar
      Support function pointers and use a state monad in the frontend. · b2109c25
      Robbert Krebbers authored
      Important changes in the core semantics:
      * Types extended with function types. Since function types are a special kind
        of pointer types, types now have an additional mutual part called "ptr_type".
      * Pointers extended with function pointers. Theses are just names that refer
        to an actual function in the function environment.
      * Typing environments extended to assign argument and return types to function
        names. Before we used a separate environment for these, but since the
        argument and return types are already needed to type function pointers, this
        environment would appear in pretty much every typing judgment.
      As a side-effect, the frontend has been rewritten entirely. The important
      changes are:
      * Type checking of expressions is more involved: there is a special kind of
        expression type corresponding to a function designator.
      * To handle things like block scoped extern function, more state-fullness was
        needed. To prepare for future extensions, the entire frontend now uses a
        state monad.
  15. 29 Jan, 2015 2 commits
  16. 25 Jan, 2015 1 commit
  17. 16 Dec, 2014 1 commit
    • Robbert Krebbers's avatar
      Allow frozen pointer annotations to be refined. · 26917d00
      Robbert Krebbers authored
      The refinement relation on addresses allows union references to be refined:
        (β2 → β1) → RUnion i s β1 ⊆ RUnion i s β2
      The result is that frozen values are below their unfrozen variant, which made
      it possible to prove that constant propagation (see constant_propagation.v) can
      be performed on the level of the memory model.
  18. 30 Sep, 2014 1 commit
  19. 24 Sep, 2014 1 commit
  20. 06 Sep, 2014 1 commit
  21. 03 Sep, 2014 1 commit
  22. 06 Aug, 2014 1 commit
  23. 10 Jul, 2014 1 commit
  24. 25 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Fix bugs in pointer operations · baaee9e0
      Robbert Krebbers authored
      * Equality comparison of NULL and non NULL pointers should be defined
      * Pointer comparisons, casts, and truth should only be defined for pointers
        that are alive
      * Treat dead pointers as indeterminate values in refinements. The proofs that
        all operations preserve refinement indicate that dead pointers can be indeed
        by replaced by anything without affecting the program's behavior.
  25. 23 Jun, 2014 1 commit
  26. 16 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Changes in preparation of the C type system and C front-end language · 3503a91f
      Robbert Krebbers authored
      Major changes:
      * Make void a base type, and include a proper void base value. This is necessary
        because expressions (free, functions without return value) can yield a void.
        We now also allow void casts conforming to the C standard.
      * Various missing lemmas about typing, weakening, decidability, ...
      * The operations "free" and "alloc" now operate on l-values instead of r-values.
        This removes some duplication.
      * Improve notations of expressions and statements. Change the presence of the
        operators conforming to the C standard.
      Small changes:
      * Use the classes "Typed" and "TypeCheck" for validity of indexes in memory.
        This gives more uniform notations.
      * New tactic "typed_inversion" performs inversion on an inductive predicate
        of type "Typed" and folds the premises.
      * Remove a horrible hack in the definitions of the classes "FMap", "MBind",
        "OMap", "Alter" that was used to let "simpl" behave better. Instead, we have
        defined a tactic "csimpl" that folds the results after performing an
        ordinary "simpl".
      * Fast operation to remove duplicates from lists using hashsets.
      * Make various type constructors (mainly finite map implementations) universe
        polymorphic by packing them into an inductive. This way, the whole C syntax
        can live in type, avoiding the need for (slow) universe checks.
  27. 06 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Miscellaneous changes to the memory · ab930b45
      Robbert Krebbers authored
      * Remove generic path_typed instance for lists. For the zippers in the
        operational semantics, it goes the other way around.
      * Remove constructor lemmas for values/memory_trees and use a generic tactic
        instead. This tactic uses the standard constructor tactic, but folds the
        type classes afterward.
  28. 05 Jun, 2014 1 commit
    • Robbert Krebbers's avatar
      Preparation to port the master branch · d60affc0
      Robbert Krebbers authored
      Major changes:
      * A data structure to collect locked addresses in memory.
      * Operations to lock and unlock addresses.
      * Remove [ctree_Forall] and express it using [Forall] and [ctree_flatten]. This
        saves a lot of lines of code.
      * Add a [void] value. This value cannot be typed, but will be used as a dummy
        return value for functions with return type [void].
      Minor changes:
      * Various deciders in preparation of the executable semantics.
      * Improve naming and notations.
      * Remove obsolete stuff.
  29. 24 May, 2014 1 commit
  30. 22 May, 2014 1 commit
    • Robbert Krebbers's avatar
      Various changes. · bb9d75d9
      Robbert Krebbers authored
      * Parametrize refinements with memories. This way, refinements imply typing,
        for example [w1 ⊑{Γ,f@m1↦m2} w2 : τ → (Γ,m1) ⊢ w1 : τ]. This relieves us from
        various hacks.
      * Use addresses instead of index/references pairs for lookup and alter
        operations on memories.
      * Prove various disjointness properties.
  31. 04 May, 2014 1 commit
  32. 02 May, 2014 2 commits
  33. 09 Sep, 2013 1 commit
  34. 15 Aug, 2013 1 commit
  35. 24 Jun, 2013 1 commit