summaryrefslogtreecommitdiff
path: root/Test/hofs/WhileLoop.dfy
blob: f79562e9f2bd70bac891e653dce21490e2e38f81 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
// RUN: %dafny /print:"%t.print" "%s" > "%t"
// RUN: %diff "%s.expect" "%t"

class Ref<A> {
  var val: A;
}

method Nice(n: int) {
  var f : int -> int := x => x;
  var i := new Ref<int>;
  i.val := 0;
  while (i.val < n)
    invariant forall u :: f.requires(u);
    invariant forall u :: f.reads(u) == {};
    invariant forall u :: f(u) == u + i.val;
  {
    i.val := i.val + 1;
    f := x => f(x) + 1;
  }
}


method OneShot(n: int) {
  var f : int -> int := x => x;
  var i := 0;
  while (i < n)
    invariant forall u :: f.requires(u);
    invariant forall u :: f(u) == u + i;
  {
    i := i + 1;
    f := x reads f.reads(x) -> f(x) + 1;
  }
}

method HeapQuant(n: int) {
  var f : int -> int := x => x;
  var i := new Ref<int>;
  ghost var r := 0;
  i.val := 0;
  while (i.val < n)
    invariant forall u {:heapQuantifier} :: f.requires(u);
    invariant forall u {:heapQuantifier} :: f.reads(u) == {};
    invariant r == i.val;
    invariant forall u {:heapQuantifier} :: f(u) == u + r;
  {
    i.val, r := i.val + 1, r + 1;
    f := x => f(x) + 1;
  }
}