diff options
author | Dan Rosén <danr@chalmers.se> | 2014-08-11 14:57:27 -0700 |
---|---|---|
committer | Dan Rosén <danr@chalmers.se> | 2014-08-11 14:57:27 -0700 |
commit | 4cbe4583b329a39dee2b4b456758cafbe7e2fa79 (patch) | |
tree | 6bb2377f06036fd41d939d168365d4e47cc7a327 /Test/dafny0/Definedness.dfy | |
parent | c377658acba5472b6d0c1e1452ce4c4c8f1fc28e (diff) |
Add higher-order-functions and some other goodies
* The reads clause now needs to be self framing.
* The requires clause now needs to be framed by the reads clause.
* There are one-shot lambdas, with a single arrow, but they will probably be
removed.
* There is a {:heapQuantifier} attribute to quantifiers, but they will
probably be removed.
* Add smart handling of type variables
* Add < and > for datatype & type parameter
Diffstat (limited to 'Test/dafny0/Definedness.dfy')
-rw-r--r-- | Test/dafny0/Definedness.dfy | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/Test/dafny0/Definedness.dfy b/Test/dafny0/Definedness.dfy index 67cfa710..fc724097 100644 --- a/Test/dafny0/Definedness.dfy +++ b/Test/dafny0/Definedness.dfy @@ -59,7 +59,7 @@ class SoWellformed { modifies s;
ensures next.xyz < 100; // error: may not be well-defined (if this in s and body sets next to null)
{
-
+
}
method R(a: SoWellformed, s: set<SoWellformed>) returns (c: bool, d: SoWellformed)
requires next != null && this !in s;
@@ -220,14 +220,14 @@ function Postie1(c: Mountain): Mountain }
function Postie2(c: Mountain): Mountain
- requires c != null && c.x == 5;
+ requires c != null && c.x == 5; reads c;
ensures Postie2(c).x == 5; // error: well-formedness error (null dereference)
{
c
}
function Postie3(c: Mountain): Mountain // all is cool
- requires c != null && c.x == 5;
+ requires c != null && c.x == 5; reads c;
ensures Postie3(c) != null && Postie3(c).x < 10;
ensures Postie3(c).x == 5;
{
@@ -235,7 +235,7 @@ function Postie3(c: Mountain): Mountain // all is cool }
function Postie4(c: Mountain): Mountain
- requires c != null && c.x <= 5;
+ requires c != null && c.x <= 5; reads c;
ensures Postie4(c) != null && Postie4(c).x < 10;
ensures Postie4(c).x == 5; // error: postcondition might not hold
{
|