Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
why3
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
113
Issues
113
List
Boards
Labels
Service Desk
Milestones
Merge Requests
13
Merge Requests
13
Packages & Registries
Packages & Registries
Container Registry
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Why3
why3
Commits
68a92927
Commit
68a92927
authored
Aug 29, 2018
by
Andrei Paskevich
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
doc/syntaxref.tex: in progress
parent
c637af6d
Changes
11
Hide whitespace changes
Inline
Sidebyside
Showing
11 changed files
with
236 additions
and
66 deletions
+236
66
Makefile.in
Makefile.in
+2
1
doc/expr1.bnf
doc/expr1.bnf
+36
0
doc/expr2.bnf
doc/expr2.bnf
+16
6
doc/expr3.bnf
doc/expr3.bnf
+12
0
doc/ident.bnf
doc/ident.bnf
+3
1
doc/qualid.bnf
doc/qualid.bnf
+3
3
doc/syntaxref.tex
doc/syntaxref.tex
+122
31
doc/term1.bnf
doc/term1.bnf
+3
3
doc/term2.bnf
doc/term2.bnf
+4
2
doc/term3.bnf
doc/term3.bnf
+28
15
doc/type.bnf
doc/type.bnf
+7
4
No files found.
Makefile.in
View file @
68a92927
...
...
@@ 1875,7 +1875,8 @@ ifeq (@enable_doc@,yes)
doc
:
doc/manual.pdf doc/html/index.html
BNF
=
ident qualid attribute constant operator
type
\
formula term1 term2 term3 theory theory2
\
term1 term2 term3 expr1 expr2 expr3
\
formula theory theory2
\
why_file spec
expr
expr2 module whyml_file term_old_at
BNFTEX
=
$
(
BNF:%
=
doc/generated/%_bnf.tex
)
...
...
doc/expr1.bnf
0 → 100644
View file @
68a92927
\begin{syntax}
expr ::= integer ; integer constant
 real ; real constant
 "true"  "false" ; Boolean constant
 "()" ; empty tuple
 qualid ; qualified identifier
 qualifier? "(" expr ")" ; qualified expression
 qualifier? "begin" expr "end" ; \textit{idem}
 tightop expr ; tight operator
 "{" exprfield+ "}" ; record
 "{" expr "with" exprfield+ "}"
; record update
 expr "." lqualid ; record field access
 expr "[" expr "]" "'"* ; collection access
 expr "[" expr "<" expr "]" "'"* ; collection update
 expr "[" expr ".." expr "]" "'"* ; collection slice
 expr "[" expr ".." "]" "'"* ; rightopen slice
 expr "[" ".." expr "]" "'"* ; leftopen slice
 expr expr+ ; application
 prefixop expr ; prefix operator
 expr infixop4 expr ; infix operator 4
 expr infixop3 expr ; infix operator 3
 expr infixop2 expr ; infix operator 2
 expr infixop1 expr ; infix operator 1
 "not" expr ; negation
 expr "&&" expr ; lazy conjunction
 expr "" expr ; lazy disjunction
 expr ":" type ; type cast
 attribute+ expr ; attributes
 "ghost" expr ; ghost expression
 expr ("," expr)+ ; tuple
 expr "<" expr ; assignment
 ... ; continued in Fig.~\ref{fig:bnf:expr2}
\
exprfield ::= lqualid "=" expr ";" ; field \texttt{=} value %
\end{syntax}
doc/expr2.bnf
View file @
68a92927
\begin{syntax}
recdefn ::= fundefn ("with" fundefn)* ;
expr ::= ... ; see Fig.~\ref{fig:bnf:expr1}
 "if" expr "then" expr ("else" expr)? ; conditional
 "match" expr "with" exprcase+ "end" ; pattern matching
 expr ";" expr ; sequence
 "let" pattern "=" expr "in" expr ; letbinding
 "let" fundefn "in" expr ; function definition
 "let" "rec" recdefn "in" expr ; recursive definition
 "fun" binder+ spec* ">" spec* expr ; unnamed function
\
fundefn ::= "ghost"? lident label* funbody ;
prototype ::= lidentext attribute* binder+
\
funbody ::= binder+ (":" type)? spec* "=" spec* expr ;
exprcase ::= "" pattern ">" expr
\
binder ::= "ghost"? lident label*
 param
recdefn ::= fundefn ("with" fundefn)* ;
\
param ::= "(" ("ghost"? lident label*)+ ":" type ")"
fundefn ::= "ghost"? kind? lidentext attribute* funbody ;
\
kind ::= "function"  "predicate"  "lemma" ;
\
funbody ::= binder+ (":" rettype)? spec* "=" spec* expr %
\end{syntax}
doc/expr3.bnf
0 → 100644
View file @
68a92927
\begin{syntax}
expr ::= ... ; see Fig.~\ref{fig:bnf:expr1} and \ref{fig:bnf:expr2}
 "if" expr "then" expr "else" expr ; conditional
 "let" pattern "=" expr "in" expr ; letbinding
 "let" prototype "=" expr "in" expr ; mapping binding
 "match" expr "with" exprcase+ "end" ; pattern matching
 "fun" binder+ ">" expr ; mapping definition
\
prototype ::= lidentext attribute* binder+
\
exprcase ::= "" pattern ">" expr %
\end{syntax}
doc/ident.bnf
View file @
68a92927
...
...
@@ 5,5 +5,7 @@
\
lident ::= ("a"  "z") suffix*  "_" suffix+
\
uident ::= ("A"  "Z") suffix* %
uident ::= ("A"  "Z") suffix*
\
qident ::= "'" ("a"  "z") suffix* %
\end{syntax}
doc/qualid.bnf
View file @
68a92927
\begin{syntax}
qualifier ::= (uident ".")
*
qualifier ::= (uident ".")
+
\
lqualid ::= qualifier lident
lqualid ::= qualifier
?
lident
\
uqualid ::= qualifier uident %
uqualid ::= qualifier
?
uident %
\end{syntax}
doc/syntaxref.tex
View file @
68a92927
...
...
@@ 4,10 +4,10 @@
In this chapter, we describe the syntax and semantics of
\whyml
.
This chapter is not yet fully updated to the new syntax of
\why
1.00, so it not distributed for the moment.
\endinput
%
This chapter is not yet fully updated to the new syntax of
%
\why 1.00, so it not distributed for the moment.
%
%
\endinput
\section
{
Lexical Conventions
}
\label
{
sec:lexer
}
...
...
@@ 44,8 +44,10 @@ Notice that the exponent in hexadecimal real constants is written in base 10.
Identifiers are composed of letters, digits, the underscore character,
and the quotation mark.
%, as shown in Figure~\ref{fig:bnf:ident}.
The syntax distinguishes identifiers that start with a lowercase letter
or an underscore (
\nonterm
{
lident
}{}
\spacefalse
) and identifiers that
start with an uppercase letter (
\nonterm
{
uident
}{}
\spacefalse
):
or an underscore (
\nonterm
{
lident
}{}
\spacefalse
), identifiers that
start with an uppercase letter (
\nonterm
{
uident
}{}
\spacefalse
),
and identifiers that start with a quotation mark
(
\nonterm
{
qident
}{}
\spacefalse
, used exclusively for type variables):
%\begin{figure}[ht]
\begin{center}
\input
{
./generated/ident
_
bnf.tex
}
\end{center}
%\caption{Syntax for identifiers.}
...
...
@@ 119,7 +121,7 @@ The syntax for type expressions is the following:
\begin{center}
\input
{
./generated/type
_
bnf.tex
}
\end{center}
Builtin types are
\texttt
{
int
}
(arbitrary precision integers),
\texttt
{
real
}
(real numbers),
\texttt
{
bool
}
, the arrow type
(also called the
\textit
{
mapping type
}
, rightassociative
),
(also called the
\textit
{
mapping type
}
),
and the tuple types.
The empty tuple type is also called the
\textit
{
unit type
}
and can be written as
\texttt
{
unit
}
.
...
...
@@ 165,18 +167,6 @@ behind the scenes.
\label
{
fig:bnf:term1
}
\end{figure}
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/term2
_
bnf.tex
}
\end{center}
\caption
{
\whyml
terms (part II).
}
\label
{
fig:bnf:term2
}
\end{figure}
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/term3
_
bnf.tex
}
\end{center}
\caption
{
\whyml
terms (part III).
}
\label
{
fig:bnf:term3
}
\end{figure}
The syntax of
\whyml
terms is given in
Figures~
\ref
{
fig:bnf:term1
}

\ref
{
fig:bnf:term3
}
.
The constructions are listed in the order of
...
...
@@ 240,10 +230,16 @@ is parsed as the conjunction of three inequalities \texttt{0 <= i},
\texttt
{
i < j
}
, and
\texttt
{
j < length a
}
.
Just as with normal identifiers,
we can put a qualifier prefix in front of a parenthesised operator
(e.g.~
\texttt
{
Map.S.([]) m i
}
) or in front of a term in parentheses
(e.g.~
\texttt
{
Map.S.(m[i])
}
, though parentheses can be omitted
if the term is a record or a record update).
we can put a qualifier prefix in front of a parenthesised operator,
e.g.~
\texttt
{
Map.S.([]) m i
}
, or in front of a parenthesised term,
e.g.~
\texttt
{
Map.S.(m[i])
}
, though parentheses can be omitted
if the term is a record or a record update.
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/term2
_
bnf.tex
}
\end{center}
\caption
{
\whyml
terms (part II).
}
\label
{
fig:bnf:term2
}
\end{figure}
The propositional connectives in
\whyml
formulas are listed in
Figure~
\ref
{
fig:bnf:term2
}
. The nonstandard connectives 
...
...
@@ 255,8 +251,8 @@ transformations of \why and provide integrated proofs for
The semantics of these connectives
follows the rules below:
\begin{itemize}
\item
A proof
of
\texttt
{
A
\&\&
B
}
is split into
separate
proofs of
\texttt
{
A
}
and
\texttt
{
A > B
}
.
\item
A proof
task for
\texttt
{
A
\&\&
B
}
is split into
separate
tasks for
\texttt
{
A
}
and
\texttt
{
A > B
}
.
If
\texttt
{
A
\&\&
B
}
occurs as a premise, it behaves
as a normal conjunction.
\item
A case analysis over
\texttt
{
A  B
}
is split into
...
...
@@ 264,16 +260,16 @@ disjoint cases \texttt{A} and \texttt{not A {/\char92} B}.
If
\texttt
{
A  B
}
occurs as a goal, it behaves
as a normal disjunction.
\item
An occurrence of
\texttt
{
A by B
}
generates a side condition
\texttt
{
B > A
}
(the proof justifies the
conclus
ion).
\texttt
{
B > A
}
(the proof justifies the
affirmat
ion).
When
\texttt
{
A by B
}
occurs as a premise,
it is reduced to
\texttt
{
A
}
(the proof is discarded).
When
\texttt
{
A by B
}
occurs as a goal,
it is reduced to
\texttt
{
B
}
(the proof is verified).
\item
An occurrence of
\texttt
{
A so B
}
generates a side condition
\texttt
{
A > B
}
(the premise justifies the con
sequence
).
\texttt
{
A > B
}
(the premise justifies the con
clusion
).
When
\texttt
{
A so B
}
occurs as a premise,
it
behaves as a conjunction
\texttt
{
A
{
/
\char
92
}
B
}
(we use both the premise and the con
sequence
).
it
is reduced to the conjunction
\mbox
{
\texttt
{
A
{
/
\char
92
}
B
}
}
(we use both the premise and the con
clusion
).
When
\texttt
{
A so B
}
occurs as a goal,
it is reduced to
\texttt
{
A
}
(the premise is verified).
\end{itemize}
...
...
@@ 281,8 +277,8 @@ For example, full splitting of the goal
\texttt
{
(A by (exists x. B so C))
\&\&
D
}
produces four subgoals:
\texttt
{
exists x. B
}
(the premise is verified),
\texttt
{
forall x. B > C
}
(the premise justifies the con
sequence
),
\texttt
{
(exists x. B
{
/
\char
92
}
C) > A
}
(the proof justifies the
conclus
ion),
\texttt
{
forall x. B > C
}
(the premise justifies the con
clusion
),
\texttt
{
(exists x. B
{
/
\char
92
}
C) > A
}
(the proof justifies the
affirmat
ion),
and finally,
\texttt
{
A > D
}
(the proof of
\texttt
{
A
}
is discarded
and
\texttt
{
A
}
is used to prove
\texttt
{
D
}
).
...
...
@@ 331,6 +327,101 @@ To reduce ambiguity, \whyml forbids to place
a nonparenthesised implication at the righthand side
of an equivalence:
\texttt
{
A <> B > C
}
is rejected.
In Figure~
\ref
{
fig:bnf:term3
}
, we find the more advanced
term constructions: conditionals, letbindings, pattern
matching, and local function definitions,
either via the
\texttt
{
letin
}
construction or the
\texttt
{
fun
}
keyword. The pure logical functions
defined in this way are called
\emph
{
mappings
}
;
they are firstclass values of ``arrow'' type
\texttt
{$
\tau
_
1
$
>
$
\tau
_
2
$}
.
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/term3
_
bnf.tex
}
\end{center}
\caption
{
\whyml
terms (part III).
}
\label
{
fig:bnf:term3
}
\end{figure}
The patterns are similar to those of OCaml, though the
\texttt
{
when
}
clauses and numerical constants are not supported. Unlike OCaml,
\texttt
{
as
}
has a higher precedence than the comma: in the pattern
\texttt
{
(
$
p
_
1
$
,
$
p
_
2
$
as x)
}
, variable
\texttt
{
x
}
is bound to
the value matched by pattern
$
p
_
2
$
. Also notice the closing
\texttt
{
end
}
after the
\texttt
{
matchwith
}
term.
A
\texttt
{
letin
}
construction with a nontrivial pattern is
translated as a
\texttt
{
matchwith
}
term with a single branch.
Inside logical terms, pattern matching must be exhaustive:
\whyml
rejects a term like
\texttt
{
let Some x = o in
$
\dots
$}
,
where
\texttt
{
o
}
is a variable of an option type.
In program expressions, nonexhaustive pattern matching
is accepted and a proof obligation is generated to show
that the values not covered cannot occur in execution.
The syntax of parameters (nonterminal
\nonterm
{
param
}{}
in Figure~
\ref
{
fig:bnf:term3
}
)
in userdefined symbols
%
firstclass mappings,
toplevel logical functions and predicates,
or executable program functions
%
is rather flexible in
\whyml
.
Like in OCaml, the user can specify the name of a parameter
without its type and let the type be inferred from the
definition. Unlike in OCaml, the user can also specify
the type of the parameter without giving its name.
This is used when the symbol declaration does not
contain the actual definition or specification of
the symbol, and thus only the type signature is of
relevance.
For example, one can declare an abstract binary function
simply by writing
\texttt
{
function mem int int : int
}
.
Ghost patterns, ghost variables after
\texttt
{
as
}
,
and ghost binders in function definitions are only used
in program code, and not allowed in logical terms.
\section
{
Program expressions
}
\label
{
sec:exprs
}
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/expr1
_
bnf.tex
}
\end{center}
\caption
{
\whyml
program expressions (part I).
}
\label
{
fig:bnf:expr1
}
\end{figure}
The syntax of program expressions is given in
Figures~
\ref
{
fig:bnf:expr1
}

\ref
{
fig:bnf:expr3
}
.
As before, the constructions are listed in the order of decreasing
precedence. The rules for tight, prefix, infix, and bracket operators
are the same as for logical terms. In particular, the infix operators
from group~1 can be chained. Notice that binary operators
\texttt
{
\&\&
}
and
\texttt
{

}
denote here the usual lazy conjunction and disjunction,
respectively.
Two new operators make appearance in Figure~
\ref
{
fig:bnf:expr1
}
.
One is
\texttt
{
ghost
}
that marks the subordinate expression as
ghost code added for verification purposes. Ghost code will be
removed from the final code intended for execution, and therefore
cannot influence the computation of the program results nor the
content of the observable memory.
The other new operation is assignment which can be used to update
in place a mutable field of a record or an element of a collection.
The first form can be executed simultaneously
on a tuple of values:
\texttt
{
x.f, y.g < a, b
}
. The second
form,
\texttt
{
a[i] < v
}
, amounts to a call of the ternary
bracket operator
\texttt
{
([]<)
}
and cannot be used in a
multiple assignment.
\begin{figure}
[ht]
\begin{center}
\input
{
./generated/expr2
_
bnf.tex
}
\end{center}
\caption
{
\whyml
program expressions (part II).
}
\label
{
fig:bnf:expr2
}
\end{figure}
\newpage
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
...
...
doc/term1.bnf
View file @
68a92927
...
...
@@ 4,8 +4,8 @@
 "true"  "false" ; Boolean constant
 "()" ; empty tuple
 qualid ; qualified identifier
 qualifier "(" term ")" ; qualified term
 qualifier "begin" term "end" ; \textit{idem}
 qualifier
?
"(" term ")" ; qualified term
 qualifier
?
"begin" term "end" ; \textit{idem}
 tightop term ; tight operator
 "{" termfield+ "}" ; record
 "{" term "with" termfield+ "}"
...
...
@@ 28,7 +28,7 @@
\
termfield ::= lqualid "=" term ";" ; field \texttt{=} value
\
qualid ::= qualifier (lidentext  uident) ; qualified identifier
qualid ::= qualifier
?
(lidentext  uident) ; qualified identifier
\
lidentext ::= lident ; lowercase identifier
 "(" identop ")" ; operator identifier
...
...
doc/term2.bnf
View file @
68a92927
...
...
@@ 10,7 +10,7 @@
 term ">" term ; implication
 term "<>" term ; equivalence
 term ":" type ; type cast
 attribute
term ; attribute
 attribute
+ term ; attributes
 term ("," term)+ ; tuple
 quantifier quantvars triggers? "." term ; quantifier
 ... ; continued in Fig.~\ref{fig:bnf:term3}
...
...
@@ 19,7 +19,9 @@
\
quantvars ::= quantcast ("," quantcast)*
\
quantcast ::= lident+ (":" type)?
quantcast ::= boundvar+ (":" type)?
\
boundvar ::= lident attribute*
\
triggers ::= "[" trigger ("" trigger)* "]" ;
\
...
...
doc/term3.bnf
View file @
68a92927
\begin{syntax}
term ::= ... ; see Fig.~\ref{fig:bnf:term1} and \ref{fig:bnf:term2}
 "if" term "then" term "else" term
; conditional
 "fun" binders ">" term ; mapping
 "let" termlet "in" term ; local binding
 "if" term "then" term "else" term ; conditional
 "match" term "with" termcase+ "end" ; pattern matching
\
binders ::= ~... ;
\
termlet ::= pattern "=" term ;
 ~...
 "let" pattern "=" term "in" term ; letbinding
 "let" symbol param+ "=" term "in" term ; mapping definition
 "fun" param+ ">" term ; unnamed mapping
\
termcase ::= "" pattern ">" term
\
pattern ::= "_" ; catchall
 "()" ; empty tuple
 "(" pattern ")" ; parentheses
 "{" patfield+ "}" ; record
 "ghost"? tag? lident ; variable
 uident pattern* ; constructor
 pattern "," pattern ; tuple
 pattern "as" lident ; binding
 "{" (lqualid "=" pattern ";")+ "}" ; record pattern
 boundvar ; variable
 uqualid pattern* ; constructor
 "ghost" pattern ; ghost subpattern
 pattern "as" "ghost"? boundvar ; named subpattern
 pattern "," pattern ; tuple pattern
 pattern "" pattern ; ``or'' pattern
\
patfield ::= lqualid "=" pattern ";"
symbol ::= lidentext attribute* ; userdefined symbol
\
param ::=
typearg ; unnamed typed
 paramname ; (un)named untyped
 "(" "ghost"? type ")" ; unnamed typed
 "(" "ghost"? paramname ")" ; (un)named untyped
 "(" "ghost"? paramname+ ":" type ")" ; multivariable typed
\
paramname ::= "_" ; unnamed parameter
 boundvar ; named parameter %
\end{syntax}
%  lqualid ; unnamed sorttyped
%  "'" lident ; unnamed variabletyped
%  "(" type ("," type)+ ")" ; unnamed tupletyped
%  "{" type "}" ; unnamed snapshottyped
%  "(" "ghost"? type ")" ; unnamed typed
%  "(" "ghost"? (boundvar  "_")+ (":" type)? ")" ; multivariable param %
doc/type.bnf
View file @
68a92927
\begin{syntax}
type ::= lqualid type* ; type symbol
 "'" lident ; type variable
 type ">" type ; mapping type
type ::= lqualid typearg+ ; polymorphic type symbol
 type ">" type ; mapping type (rightassociative)
 typearg
\
typearg ::= lqualid ; monomorphic type symbol (sort)
 qident ; type variable
 "()" ; unit type
 "(" type ("," type)+ ")" ; tuple type
 "{" type "}" ; snapshot type
 "(" type ")"
; parentheses %
 "(" type ")"
\end{syntax}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment