blob: c70df9163dce0b1b9b4e27421b06d7ac02d7ce04 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
// Concrete language syntax for a Dafny extension with refinement.
// Counter example.
// 6/28/2010
class A {
var n : int;
method Init() modifies this;
{ n := 0;}
method Inc() modifies this;
{ n := n + 1;}
method Dec()
modifies this;
requires n > 0;
{ n := n - 1;}
method Test1(p: int) returns (i: int)
{
assume true;
}
method Test2() returns (o: object)
{ o := this; }
}
class B refines A {
var inc : int, dec : int;
replaces n by n == inc - dec;
// transforms n into inc - dec;
refines Init() modifies this;
{ inc := 0; dec := 0;}
refines Inc() modifies this;
{ inc := inc + 1; }
refines Dec()
modifies this;
requires inc > dec;
{ dec := dec + 1; }
refines Test1(p: int) returns (i: int)
{
i := p;
}
}
// Carrol Morgan's calculator
// 7/2/2010 Kuat
class ACalc {
var vals: seq<int>;
method reset()
modifies this;
{
vals := [];
}
method add(x: int)
modifies this;
{
vals := [x] + vals;
}
method mean() returns (m: int)
requires |vals| > 0;
{
m := seqsum(vals)/|vals|;
}
static function method seqsum(x:seq<int>) : int
decreases x;
{
if (x == []) then 0 else x[0] + seqsum(x[1..])
}
}
class CCalc refines ACalc {
var sum: int;
var num: int;
replaces vals by sum == seqsum2(vals) && num == |vals|;
refines reset()
modifies this;
{
sum := 0;
num := 0;
}
refines add(x: int)
modifies this;
{
sum := sum + x;
num := num + 1;
}
refines mean() returns (m: int)
requires num > 0;
{
m := sum/num;
}
static function method seqsum2(x:seq<int>) : int
decreases x;
{
if (x == []) then 0 else x[0] + seqsum2(x[1..])
}
}
|