blob: 301ef00d7cbc80f0693e00bdd8b0b2fbeb5ffa8c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
// RUN: %dafny /compile:0 "%s" > "%t"
// RUN: %diff "%s.expect" "%t"
// Edited B6 to include GetChar and PutChar
//This is the Queue from Benchmark 3.
//restriction:we assume streams are finite
//what else can we specify?
class Queue<T> {
var contents: seq<T>;
method Init()
modifies this;
ensures |contents| == 0;
method Enqueue(x: T)
modifies this;
ensures contents == old(contents) + [x];
method Dequeue() returns (x: T)
requires 0 < |contents|;
modifies this;
ensures contents == old(contents)[1..] && x == old(contents)[0];
function Head(): T
requires 0 < |contents|;
reads this;
{ contents[0] }
function Get(i: int): T
requires 0 <= i < |contents|;
reads this;
{ contents[i] }
}
class Stream {
ghost var footprint:set<object>;
var stream:seq<int>;
var isOpen:bool;
function Valid():bool
reads this, footprint;
{
null !in footprint && this in footprint && isOpen
}
method GetCount() returns (c:int)
requires Valid();
ensures 0 <= c;
{
c := |stream|;
}
method Create() //writing
modifies this;
ensures Valid() && fresh(footprint - {this});
ensures stream == [];
{
stream := [];
footprint := {this};
isOpen := true;
}
method Open() //reading
modifies this;
ensures Valid() && fresh(footprint - {this});
{
footprint := {this};
isOpen := true;
}
method PutChar(x:int )
requires Valid();
modifies footprint;
ensures Valid() && fresh(footprint - old(footprint));
ensures stream == old(stream) + [x];
{
stream:= stream + [x];
}
method GetChar()returns(x:int)
requires Valid() && 0 < |stream|;
modifies footprint;
ensures Valid() && fresh(footprint - old(footprint));
ensures x ==old(stream)[0];
ensures stream == old(stream)[1..];
{
x := stream[0];
stream := stream[1..];
}
method AtEndOfStream() returns(eos:bool)
requires Valid();
ensures eos <==> |stream| == 0;
{
eos := |stream| == 0;
}
method Close()
requires Valid();
modifies footprint;
{
isOpen := false;
}
}
class Client {
method Sort(q: Queue<int>) returns (r: Queue<int>)
requires q != null;
modifies q;
ensures r != null && fresh(r);
ensures |r.contents| == |old(q.contents)|;
ensures forall i, j :: 0 <= i < j < |r.contents| ==> r.Get(i) <= r.Get(j);
// the final Queue is a permutation of the input Queue
ensures multiset(r.contents) == multiset(old(q.contents));
method Main()
{
var rd := new Stream;
rd.Open();
var q := new Queue<int>;
while (true)
invariant rd.Valid() && fresh(rd.footprint) && fresh(q);
decreases |rd.stream|;
{
var eos := rd.AtEndOfStream();
if (eos) {
break;
}
var ch := rd.GetChar();
q.Enqueue(ch);
}
rd.Close();
q := Sort(q);
var wr := new Stream;
wr.Create();
while (0 < |q.contents|)
invariant wr.Valid() && fresh(wr.footprint) && fresh(q) && q !in wr.footprint;
{
var ch := q.Dequeue();
wr.PutChar(ch);
}
wr.Close();
}
}
|
