new (simple) example: all_distinct

4243f4c8 · Jean-Christophe Filliâtre · 2142447e · 4243f4c8 · 4243f4c8
Commit 4243f4c8 authored Jun 03, 2014 by Jean-Christophe Filliâtre
Hide whitespace changes
Inline Side-by-side

Showing with 314 additions and 0 deletions

examples/all_distinct.mlw examples/all_distinct.mlw +37 -0

examples/all_distinct/why3session.xml examples/all_distinct/why3session.xml +277 -0

No files found.
--- a/examples/all_distinct.mlw
+++ b/examples/all_distinct.mlw
+
+(** Check an array of integers for duplicate values,
+    using the fact that values are in interval [0,m-1]. *)
+
+module AllDistinct
+
+  use import int.Int
+  use import ref.Ref
+  use import array.Array
+
+  constant m: int
+  axiom m_nonneg: 0 <= m
+
+  exception Duplicate
+
+  let all_distinct (a: array int) : bool
+    requires { forall i: int. 0 <= i < length a -> 0 <= a[i] < m }
+    ensures  { result <-> forall i j: int. 0 <= i < length a ->
+                          0 <= j < length a -> i <> j -> a[i] <> a[j] }
+  =
+   let dejavu = Array.make m False in
+   try
+     for k = 0 to Array.length a - 1 do
+       invariant { forall i j: int. 0 <= i < k ->
+                   0 <= j < k -> i <> j -> a[i] <> a[j] }
+       invariant { forall x: int. 0 <= x < m ->
+                   dejavu[x] <-> exists i: int. 0 <= i < k /\ a[i] = x }
+       let v = a[k] in
+       if dejavu[v] then raise Duplicate;
+       dejavu[v] <- True
+     done;
+     True
+   with Duplicate ->
+     False
+   end
+
+end
--- a/examples/all_distinct/why3session.xml
+++ b/examples/all_distinct/why3session.xml
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE why3session PUBLIC "-//Why3//proof session v2//EN" "http://why3.lri.fr/why3session.dtd">
+<why3session shape_version="4">
+ <prover
+  id="0"
+  name="Alt-Ergo"
+  version="0.95.2"/>
+ <file
+  name="../all_distinct.mlw"
+  verified="true"
+  expanded="true">
+  <theory
+   name="AllDistinct"
+   locfile="../all_distinct.mlw"
+   loclnum="2" loccnumb="7" loccnume="18"
+   verified="true"
+   expanded="true">
+   <goal
+    name="WP_parameter all_distinct"
+    locfile="../all_distinct.mlw"
+    loclnum="13" loccnumb="6" loccnume="18"
+    expl="VC for all_distinct"
+    sum="2dd788033a12483e49fe5c453e5c66b0"
+    proved="true"
+    expanded="true"
+    shape="Nainfix =agetV1V5agetV1V6INainfix =V5V6Iainfix &lt;V6V0Aainfix &lt;=c0V6Iainfix &lt;V5V0Aainfix &lt;=c0V5FIainfix =agetV1V8V7Aainfix &lt;V8ainfix +V3c1Aainfix &lt;=c0V8Eqainfix =agetV4V7aTrueIainfix &lt;V7amAainfix &lt;=c0V7FANainfix =agetV1V9agetV1V10INainfix =V9V10Iainfix &lt;V10ainfix +V3c1Aainfix &lt;=c0V10Iainfix &lt;V9ainfix +V3c1Aainfix &lt;=c0V9FAiainfix =agetV1V15V14Aainfix &lt;V15ainfix +V11c1Aainfix &lt;=c0V15Eqainfix =agetV13V14aTrueIainfix &lt;V14amAainfix &lt;=c0V14FANainfix =agetV1V16agetV1V17INainfix =V16V17Iainfix &lt;V17ainfix +V11c1Aainfix &lt;=c0V17Iainfix &lt;V16ainfix +V11c1Aainfix &lt;=c0V16FIainfix =V13asetV4V12aTrueAainfix &lt;=c0V2FAainfix &lt;V12V2Aainfix &lt;=c0V12NNainfix =agetV1V18agetV1V19INainfix =V18V19Iainfix &lt;V19V0Aainfix &lt;=c0V19Iainfix &lt;V18V0Aainfix &lt;=c0V18Fainfix =agetV4V12aTrueAainfix &lt;V12V2Aainfix &lt;=c0V12Aainfix &lt;=c0V2LagetV1V11Aainfix &lt;V11V0Aainfix &lt;=c0V11Iainfix =agetV1V21V20Aainfix &lt;V21V11Aainfix &lt;=c0V21Eqainfix =agetV4V20aTrueIainfix &lt;V20amAainfix &lt;=c0V20FANainfix =agetV1V22agetV1V23INainfix =V22V23Iainfix &lt;V23V11Aainfix &lt;=c0V23Iainfix &lt;V22V11Aainfix &lt;=c0V22FIainfix &lt;=V11V3Aainfix &lt;=c0V11FFAainfix =agetV1V25V24Aainfix &lt;V25c0Aainfix &lt;=c0V25Eqainfix =agetaconstaFalseV24aTrueIainfix &lt;V24amAainfix &lt;=c0V24FANainfix =agetV1V26agetV1V27INainfix =V26V27Iainfix &lt;V27c0Aainfix &lt;=c0V27Iainfix &lt;V26c0Aainfix &lt;=c0V26FIainfix &lt;=c0V3ANainfix =agetV1V28agetV1V29INainfix =V28V29Iainfix &lt;V29V0Aainfix &lt;=c0V29Iainfix &lt;V28V0Aainfix &lt;=c0V28FIainfix &gt;c0V3Lainfix -V0c1Iainfix &lt;=c0V2Aainfix &gt;=V2c0LamIainfix &lt;agetV1V30amAainfix &lt;=c0agetV1V30Iainfix &lt;V30V0Aainfix &lt;=c0V30FAainfix &lt;=c0V0F">
+    <label
+     name="expl:VC for all_distinct"/>
+    <transf
+     name="split_goal_wp"
+     proved="true"
+     expanded="true">
+     <goal
+      name="WP_parameter all_distinct.1"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="1. array creation size"
+      sum="e409467aef4501f49ef0b31f69392a64"
+      proved="true"
+      expanded="false"
+      shape="array creation sizeainfix &gt;=V2c0LamIainfix &lt;agetV1V3amAainfix &lt;=c0agetV1V3Iainfix &lt;V3V0Aainfix &lt;=c0V3FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.2"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="2. postcondition"
+      sum="a686f0179d61e1aa1dd9abad1d86a8c0"
+      proved="true"
+      expanded="false"
+      shape="postconditionNainfix =agetV1V4agetV1V5INainfix =V4V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix &lt;V4V0Aainfix &lt;=c0V4FIainfix &gt;c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V6amAainfix &lt;=c0agetV1V6Iainfix &lt;V6V0Aainfix &lt;=c0V6FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.3"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="3. loop invariant init"
+      sum="979f7d5fc90ebf35435d98d4d779e332"
+      proved="true"
+      expanded="false"
+      shape="loop invariant initNainfix =agetV1V4agetV1V5INainfix =V4V5Iainfix &lt;V5c0Aainfix &lt;=c0V5Iainfix &lt;V4c0Aainfix &lt;=c0V4FIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V6amAainfix &lt;=c0agetV1V6Iainfix &lt;V6V0Aainfix &lt;=c0V6FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.4"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="4. loop invariant init"
+      sum="9b678598e766b742918899915696f18c"
+      proved="true"
+      expanded="false"
+      shape="loop invariant initainfix =agetV1V5V4Aainfix &lt;V5c0Aainfix &lt;=c0V5Eqainfix =agetaconstaFalseV4aTrueIainfix &lt;V4amAainfix &lt;=c0V4FIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V6amAainfix &lt;=c0agetV1V6Iainfix &lt;V6V0Aainfix &lt;=c0V6FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.5"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="5. index in array bounds"
+      sum="6b0042177a1993e3480136baec876282"
+      proved="true"
+      expanded="false"
+      shape="index in array boundsainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V7V6Aainfix &lt;V7V5Aainfix &lt;=c0V7Eqainfix =agetV4V6aTrueIainfix &lt;V6amAainfix &lt;=c0V6FANainfix =agetV1V8agetV1V9INainfix =V8V9Iainfix &lt;V9V5Aainfix &lt;=c0V9Iainfix &lt;V8V5Aainfix &lt;=c0V8FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V10amAainfix &lt;=c0agetV1V10Iainfix &lt;V10V0Aainfix &lt;=c0V10FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.01"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.6"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="6. type invariant"
+      sum="20d6fe1c4863f2ecd03cb8f8606e2a9d"
+      proved="true"
+      expanded="false"
+      shape="type invariantainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V8V7Aainfix &lt;V8V5Aainfix &lt;=c0V8Eqainfix =agetV4V7aTrueIainfix &lt;V7amAainfix &lt;=c0V7FANainfix =agetV1V9agetV1V10INainfix =V9V10Iainfix &lt;V10V5Aainfix &lt;=c0V10Iainfix &lt;V9V5Aainfix &lt;=c0V9FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V11amAainfix &lt;=c0agetV1V11Iainfix &lt;V11V0Aainfix &lt;=c0V11FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.7"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="7. index in array bounds"
+      sum="9ecc0fba671ceb87e7ebfae6408c0aa1"
+      proved="true"
+      expanded="false"
+      shape="index in array boundsainfix &lt;V6V2Aainfix &lt;=c0V6Iainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V8V7Aainfix &lt;V8V5Aainfix &lt;=c0V8Eqainfix =agetV4V7aTrueIainfix &lt;V7amAainfix &lt;=c0V7FANainfix =agetV1V9agetV1V10INainfix =V9V10Iainfix &lt;V10V5Aainfix &lt;=c0V10Iainfix &lt;V9V5Aainfix &lt;=c0V9FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V11amAainfix &lt;=c0agetV1V11Iainfix &lt;V11V0Aainfix &lt;=c0V11FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.8"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="8. postcondition"
+      sum="75ecf978dc9db137b8cef95b44836b37"
+      proved="true"
+      expanded="false"
+      shape="postconditionNNainfix =agetV1V7agetV1V8INainfix =V7V8Iainfix &lt;V8V0Aainfix &lt;=c0V8Iainfix &lt;V7V0Aainfix &lt;=c0V7FIainfix =agetV4V6aTrueIainfix &lt;V6V2Aainfix &lt;=c0V6Aainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V10V9Aainfix &lt;V10V5Aainfix &lt;=c0V10Eqainfix =agetV4V9aTrueIainfix &lt;V9amAainfix &lt;=c0V9FANainfix =agetV1V11agetV1V12INainfix =V11V12Iainfix &lt;V12V5Aainfix &lt;=c0V12Iainfix &lt;V11V5Aainfix &lt;=c0V11FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V13amAainfix &lt;=c0agetV1V13Iainfix &lt;V13V0Aainfix &lt;=c0V13FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.01"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.9"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="9. index in array bounds"
+      sum="969ccdcc137ba44dad6f17c1b5382c28"
+      proved="true"
+      expanded="false"
+      shape="index in array boundsainfix &lt;V6V2Aainfix &lt;=c0V6INainfix =agetV4V6aTrueIainfix &lt;V6V2Aainfix &lt;=c0V6Aainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V8V7Aainfix &lt;V8V5Aainfix &lt;=c0V8Eqainfix =agetV4V7aTrueIainfix &lt;V7amAainfix &lt;=c0V7FANainfix =agetV1V9agetV1V10INainfix =V9V10Iainfix &lt;V10V5Aainfix &lt;=c0V10Iainfix &lt;V9V5Aainfix &lt;=c0V9FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V11amAainfix &lt;=c0agetV1V11Iainfix &lt;V11V0Aainfix &lt;=c0V11FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.10"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="10. loop invariant preservation"
+      sum="ad3649a7a572b05e5b90ec8c8b776628"
+      proved="true"
+      expanded="false"
+      shape="loop invariant preservationNainfix =agetV1V8agetV1V9INainfix =V8V9Iainfix &lt;V9ainfix +V5c1Aainfix &lt;=c0V9Iainfix &lt;V8ainfix +V5c1Aainfix &lt;=c0V8FIainfix =V7asetV4V6aTrueAainfix &lt;=c0V2FIainfix &lt;V6V2Aainfix &lt;=c0V6INainfix =agetV4V6aTrueIainfix &lt;V6V2Aainfix &lt;=c0V6Aainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V11V10Aainfix &lt;V11V5Aainfix &lt;=c0V11Eqainfix =agetV4V10aTrueIainfix &lt;V10amAainfix &lt;=c0V10FANainfix =agetV1V12agetV1V13INainfix =V12V13Iainfix &lt;V13V5Aainfix &lt;=c0V13Iainfix &lt;V12V5Aainfix &lt;=c0V12FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V14amAainfix &lt;=c0agetV1V14Iainfix &lt;V14V0Aainfix &lt;=c0V14FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.11"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="11. loop invariant preservation"
+      sum="1a4b0d8936e0435262858b14d46973bd"
+      proved="true"
+      expanded="false"
+      shape="loop invariant preservationainfix =agetV1V9V8Aainfix &lt;V9ainfix +V5c1Aainfix &lt;=c0V9Eqainfix =agetV7V8aTrueIainfix &lt;V8amAainfix &lt;=c0V8FIainfix =V7asetV4V6aTrueAainfix &lt;=c0V2FIainfix &lt;V6V2Aainfix &lt;=c0V6INainfix =agetV4V6aTrueIainfix &lt;V6V2Aainfix &lt;=c0V6Aainfix &lt;=c0V2LagetV1V5Iainfix &lt;V5V0Aainfix &lt;=c0V5Iainfix =agetV1V11V10Aainfix &lt;V11V5Aainfix &lt;=c0V11Eqainfix =agetV4V10aTrueIainfix &lt;V10amAainfix &lt;=c0V10FANainfix =agetV1V12agetV1V13INainfix =V12V13Iainfix &lt;V13V5Aainfix &lt;=c0V13Iainfix &lt;V12V5Aainfix &lt;=c0V12FIainfix &lt;=V5V3Aainfix &lt;=c0V5FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V14amAainfix &lt;=c0agetV1V14Iainfix &lt;V14V0Aainfix &lt;=c0V14FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.02"/>
+      </proof>
+     </goal>
+     <goal
+      name="WP_parameter all_distinct.12"
+      locfile="../all_distinct.mlw"
+      loclnum="13" loccnumb="6" loccnume="18"
+      expl="12. postcondition"
+      sum="64404a2eb2ff46b86331a8ee7eaae118"
+      proved="true"
+      expanded="false"
+      shape="postconditionNainfix =agetV1V5agetV1V6INainfix =V5V6Iainfix &lt;V6V0Aainfix &lt;=c0V6Iainfix &lt;V5V0Aainfix &lt;=c0V5FIainfix =agetV1V8V7Aainfix &lt;V8ainfix +V3c1Aainfix &lt;=c0V8Eqainfix =agetV4V7aTrueIainfix &lt;V7amAainfix &lt;=c0V7FANainfix =agetV1V9agetV1V10INainfix =V9V10Iainfix &lt;V10ainfix +V3c1Aainfix &lt;=c0V10Iainfix &lt;V9ainfix +V3c1Aainfix &lt;=c0V9FFIainfix &lt;=c0V3Lainfix -V0c1Iainfix &lt;=c0V2Iainfix &gt;=V2c0LamIainfix &lt;agetV1V11amAainfix &lt;=c0agetV1V11Iainfix &lt;V11V0Aainfix &lt;=c0V11FAainfix &lt;=c0V0F">
+      <label
+       name="expl:VC for all_distinct"/>
+      <proof
+       prover="0"
+       timelimit="6"
+       memlimit="1000"
+       obsolete="false"
+       archived="false">
+       <result status="valid" time="0.01"/>
+      </proof>
+     </goal>
+    </transf>
+   </goal>
+  </theory>
+ </file>
+</why3session>