Add a small test from the IronClad notebook

2 files changed, 27 insertions, 0 deletions

diff --git a/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy b/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy
new file mode 100644
index 00000000..09032453
--- /dev/null
+++ b/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy
@@ -0,0 +1,23 @@
+// RUN: %dafny /compile:0 /print:"%t.print" /dprint:"%t.dprint" /autoTriggers:1 /printTooltips "%s" > "%t"

+// RUN: %diff "%s.expect" "%t"

+

+// This example was listed in IronClad's notebook as one place were z3 picked

+// much too liberal triggers. THe Boogie code for this is shown below:

+//

+// forall k#2: Seq Box :: $Is(k#2, TSeq(TInt)) && $IsAlloc(k#2, TSeq(TInt), $Heap)

+//                   ==> Seq#Equal(_module.__default.HashtableLookup($Heap, h1#0, k#2),

+//                                 _module.__default.HashtableLookup($Heap, h2#0, k#2))

+//

+// and z3 would pick $Is(k#2, TSeq(TInt)) or $IsAlloc(k#2, TSeq(TInt), $Heap) as

+// triggers.

+

+type Key = seq<int>

+type Value = seq<int>

+

+type Hashtable = map<Key, Value>

+function HashtableLookup(h: Hashtable, k: Key): Value

+

+lemma HashtableAgreement(h1:Hashtable, h2:Hashtable, k:Key)

+  requires forall k :: HashtableLookup(h1,k) == HashtableLookup(h2,k) {

+    assert true || (k in h1) == (k in h2);

+}

diff --git a/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy.expect b/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy.expect
new file mode 100644
index 00000000..46ec143e
--- /dev/null
+++ b/Test/triggers/auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy.expect
@@ -0,0 +1,4 @@
+auto-triggers-fix-an-issue-listed-in-the-ironclad-notebook.dfy(21,11): Info: Selected triggers:

+   {HashtableLookup(h2, k)}, {HashtableLookup(h1, k)}

+

+Dafny program verifier finished with 3 verified, 0 errors