1. 12 Apr, 2017 1 commit
  2. 28 Feb, 2017 1 commit
    • Clément Fumex's avatar
      Add the ability to · f0547868
      Clément Fumex authored
      * declare range types and float types,
      * use integer (resp. real) literals for those types through casting,
      * specify how to print them in drivers.
      
      Change in syntax
      * use
      
        type t = < range 1 2 >   (* integers from 1 to 2 *)
        type t' = < float 4 12 > (* float with 4 bits in exponent and 12 in mantissa *)
      
        the two projections :
        t'int
        t''real
      
        and the predicate :
        t''isFinite
      
      * Restrict the use of "'" in whyml:
        Users are not allowed to introduce names where a quote symbol
        is followed by a letter. Thus, the following identifiers are
        valid:
      
        t'
        toto'0''
        toto'_phi
      
        whereas toto'phi is not.
      
      Note: we do not yet support negative numbers in range declaration
      and casting of a literal.
      f0547868
  3. 15 Mar, 2016 2 commits
  4. 25 Nov, 2015 1 commit
  5. 13 Oct, 2015 1 commit
  6. 06 Oct, 2015 1 commit
  7. 11 Aug, 2015 1 commit
  8. 16 Jul, 2015 1 commit
    • David Hauzar's avatar
      Adding information about the line that corresponds to the VC check · 68b3134d
      David Hauzar authored
      to the counter-example model.
      
      This line must be marked with the label "model_vc".
      If VC line is postcondition, it can be marked with the label
      "model_func" or "model_func:func_name". Terms corresponding to
      old values of arguments will be marked with @old, term corresponding
      to the function result will be marked with @result or
      func_name@result if func_name was given.
      
      Pretty printing of model element names in counter-example.
      Possibility to print differently model elements corresponding to
      function result, old values of function arguments and other model
      elements.
      68b3134d
  9. 18 Jun, 2015 1 commit
  10. 27 Apr, 2015 1 commit
  11. 21 Mar, 2015 1 commit
  12. 20 Mar, 2015 1 commit
  13. 19 Mar, 2015 1 commit
  14. 05 Jan, 2015 1 commit
  15. 25 Oct, 2014 1 commit
  16. 22 Oct, 2014 1 commit
  17. 20 Sep, 2014 2 commits
  18. 07 Apr, 2014 1 commit
  19. 14 Mar, 2014 1 commit
  20. 05 Mar, 2014 1 commit
  21. 17 Feb, 2014 1 commit
  22. 16 Feb, 2014 1 commit
  23. 14 Feb, 2014 3 commits
    • Andrei Paskevich's avatar
      WhyML: change the syntax of "abstract" · 4fd8b24d
      Andrei Paskevich authored
      The old syntax:   abstract expr [spec]...
      
      The semicolon binds more loosely than "abstract" and
      the specification clauses are optional, so that
      "abstract e1; e2" is the same as "(abstract e1); e2"
      and "abstract e1; e2; ensures {...}" is a syntax error.
      
      The new syntax:   abstract [spec]... expr end
      
      This allows to put sequences of expressions under "abstract"
      without ambiguity and moves the specification clauses to the
      beginning. In other words, "abstract" becomes a "begin" with
      a specification attached. The spec-at-the-top is consistent
      with the syntax of functions and the whole seems to be more
      natural for the intented use of "abstract" (a logical cut).
      4fd8b24d
    • Andrei Paskevich's avatar
      WhyML: admit terminating semi-colons when there is no ambiguity · e66e2a3f
      Andrei Paskevich authored
      Examples:
      
        begin ... expr; end
      
        let fn x y = ... expr ; in ...
      
        match ... with pat -> ... expr ; | pat -> ... expr ; end
      
      In this way, it's much easier to add and remove additional
      assertions at the end of ()-typed blocks.
      e66e2a3f
    • Andrei Paskevich's avatar
      0931fc96
  24. 12 Feb, 2014 1 commit
  25. 20 Jan, 2014 1 commit
    • Andrei Paskevich's avatar
      WhyML: add "diverges", "reads {}", and "writes {}" effect clauses · 83858597
      Andrei Paskevich authored
      - "diverges" states that the computation may not terminate (which
        does not mean that is always diverges: just as any other effect
        annotation, this clause states a possibility of a side effect).
      
      - "reads {}" states that the computation does not access any variable
        except those that are listed elsewhere in the specification (or the
        proper function arguments, if "reads" is in a function spec).
      
      - "writes {}" states that the computation does not modify any mutable
        value.
      
      - If a function definition or an abstract computation may diverge,
        but there is no "diverges" clause in the specification, a warning
        is produced. If a function definition or an abstract computation
        always terminates, but there is a "diverges" clause in the spec,
        an error is produced.
      
      - If there is a "reads" or a "writes" clause in a function definition
        or an abstract computation, then every modified value must be listed
        in "writes" and every accessed external variable not mentioned in
        the spec must be listed in "reads". (Notice that this is a stricter
        requirement than before, when the presence of a "writes" clause
        did not require to specify "reads".) However, one does not have to
        write "reads {}" or "writes {}" if the corresponding lists are empty.
      83858597
  26. 24 Nov, 2013 1 commit
  27. 22 Nov, 2013 1 commit
    • Andrei Paskevich's avatar
      WhyML: introduce "val ... in ..." construction · 7ecd3139
      Andrei Paskevich authored
      This is a syntactic sugar for higher-order "any", for which
      I can't find reasonably unambiguous syntax. One can write
        val x : int <spec> in <expr>
      or
        val f (x : int) : int <spec> in <expr>
      or
        val f <spec> (x : int) : int <spec> in <expr>
      for a function which is created via some effectful computation.
      This is a generalized form of top-level "val" which only admits
      latent effects (as in the second form above).
      7ecd3139
  28. 20 Nov, 2013 2 commits
  29. 19 Nov, 2013 4 commits
  30. 27 Oct, 2013 1 commit
    • Andrei Paskevich's avatar
      accept untyped variables under quantifiers · 02fcd207
      Andrei Paskevich authored
      It is a matter of ongoing discussion how much type information we
      require from the user for the sake of readability of specification.
      Since types of quantified variables are important part of axioms
      and lemmas, we required them for the same reason we require the
      full prototypes for functions and predicates. However, when we
      typecheck program annotations, explicit types in quantifiers may
      quickly become an annoyance. Let's say, we define a polymorphic
      function "fn":
      
        let fn x y
          requires { forall z:'a. ... -> z = x }
        = ...
      
      Since in programs we [are going to] accept implicit type variables,
      the user may omit the types of "x" and "y", and they will be inferred
      by the typechecker. Now, if we are obliged to write the type of "z"
      in the postcondition, we cannot simply write 'a, because it will not
      unify with the implicit type of "x" (remember that programs are typed
      independently of specs). So, if we write the type of "z", we also have
      to write the type of "x". This is annoying and may even lead to errors
      if, by mistake, the user chooses 'a for the type of "x" and thus
      freezes 'a in all function definitions in "fn" while they were
      polymorphic in 'a till then.
      
      For this reason, it seems reasonable to accept untyped variables
      under quantifiers (DISCUSS: should we accept them only in specs?).
      However, we still require type variables in logic to be explicitly
      named (unless they come from the program, then they are accepted),
      and thus polymorphic axioms and lemmas would still have to have
      the explicitly typed quantified variables.
      02fcd207
  31. 19 Oct, 2013 1 commit
    • Andrei Paskevich's avatar
      switch Typing to the new Dterm-based API · 460e93f8
      Andrei Paskevich authored
      Also:
      
      - Make [Highord.pred 'a] an alias for [Highord.func 'a bool],
      rename [Highorg.(@!)] to [(@)], remove [Highorg.(@?)], remove
      the quantifiers [\!] and [\?] and only leave [\] which is the
      only true lambda now;
      
      - Allow mixing bool and Prop in logic, Dterm will introduce
      coercions where necessary (trying to minimize the number of
      if-then-else in the term context).
      460e93f8
  32. 27 May, 2013 1 commit