blob: 97df7ce204e91040eb5387575396b4ebb0fc0fe7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
// RUN: %boogie -noinfer -typeEncoding:m -useArrayTheory "%s" > "%t"
// RUN: %diff "%s.expect" "%t"
type X;
const nil: X;
var {:layer 0,1} l: X;
var {:layer 0,1} x: int;
function {:builtin "MapConst"} MapConstBool(bool) : [X]bool;
function {:inline} {:linear "tid"} TidCollector(x: X) : [X]bool
{
MapConstBool(false)[x := true]
}
procedure {:yields} {:layer 1} Allocate() returns ({:linear "tid"} xl: X)
ensures {:layer 1} xl != nil;
{
yield;
call xl := AllocateLow();
yield;
}
procedure {:yields} {:layer 1} main()
{
var {:linear "tid"} tid: X;
var val: int;
yield;
while (*)
{
call tid := Allocate();
havoc val;
async call foo(tid, val);
yield;
}
yield;
}
procedure {:yields} {:layer 0,1} Lock(tid: X);
ensures {:atomic} |{A: assume l == nil; l := tid; return true; }|;
procedure {:yields} {:layer 0,1} Unlock();
ensures {:atomic} |{A: l := nil; return true; }|;
procedure {:yields} {:layer 0,1} Set(val: int);
ensures {:atomic} |{A: x := val; return true; }|;
procedure {:yields} {:layer 0,1} AllocateLow() returns ({:linear "tid"} xl: X);
ensures {:atomic} |{ A: assume xl != nil; return true; }|;
procedure {:yields} {:layer 1} foo({:linear_in "tid"} tid': X, val: int)
requires {:layer 1} tid' != nil;
{
var {:linear "tid"} tid: X;
tid := tid';
yield;
call Lock(tid);
call tid := Yield(tid);
call Set(val);
call tid := Yield(tid);
assert {:layer 1} x == val;
call tid := Yield(tid);
call Unlock();
yield;
}
procedure {:yields} {:layer 1} Yield({:linear_in "tid"} tid': X) returns ({:linear "tid"} tid: X)
requires {:layer 1} tid' != nil;
ensures {:layer 1} tid == tid';
ensures {:layer 1} old(l) == tid ==> old(l) == l && old(x) == x;
{
tid := tid';
yield;
assert {:layer 1} tid != nil;
assert {:layer 1} (old(l) == tid ==> old(l) == l && old(x) == x);
}
|
