From ce1c2de044c91624370411e23acab13b0381949b Mon Sep 17 00:00:00 2001 From: mikebarnett Date: Wed, 15 Jul 2009 21:03:41 +0000 Subject: Initial set of files. --- Test/test21/EmptyList.bpl | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 Test/test21/EmptyList.bpl (limited to 'Test/test21/EmptyList.bpl') diff --git a/Test/test21/EmptyList.bpl b/Test/test21/EmptyList.bpl new file mode 100644 index 00000000..a6b90638 --- /dev/null +++ b/Test/test21/EmptyList.bpl @@ -0,0 +1,47 @@ + + +type List _; + +function NIL() returns (List a); +function Cons(a, List a) returns (List a); + +function car(List a) returns (a); +function cdr(List a) returns (List a); + +axiom (forall x:a, l:List a :: car(Cons(x, l)) == x); +axiom (forall x:a, l:List a :: cdr(Cons(x, l)) == l); + +axiom (forall x:a, l:List a :: Cons(x, l) != NIL()); + +var l:List bool; + +var m:List int; +var mar:[int](List int); + +procedure P() returns () + requires m != NIL(); + requires mar[0] == m && (forall i:int :: i > 0 ==> mar[i] == cdr(mar[i-1])); + modifies l, m, mar; { + + l := Cons(true, NIL()); + + assert l != NIL(); + l := cdr(l); + + assert l == NIL(); + l := Cons(true, l); + l := Cons(false, l); + + assert car(mar[1]) == car(cdr(m)); + mar[0] := NIL(); + assert mar[0] != m; + + assert !car(l) && car(cdr(l)); + l := cdr(cdr(l)); + + assert (forall i:int :: i > 0 ==> mar[i] == cdr(mar[i-1])); // error +} + +procedure Q() returns () { + assert Cons(NIL(), NIL()) != NIL(); // warning, but provable +} \ No newline at end of file -- cgit v1.2.3