mirror of
https://github.com/FreeRTOS/FreeRTOS-Kernel.git
synced 2025-10-17 10:17:45 -04:00
Copying CBMC proofs from aws/amazon-freertos repo ./tools/cbmc to this repo ./FreeRTOS/Test/CBMC as is.
The commit ID in aws/amazon-freertos is 0c8e0217f2a43bdeb364b58ae01c6c259e03ef1b.
This commit is contained in:
parent
9f316c246b
commit
8156f64d1c
174 changed files with 9245 additions and 0 deletions
67
FreeRTOS/Test/CBMC/include/cbmc.h
Normal file
67
FreeRTOS/Test/CBMC/include/cbmc.h
Normal file
|
@ -0,0 +1,67 @@
|
|||
/*
|
||||
* CBMC models a pointer as an object id and an offset into that
|
||||
* object. The top bits of a pointer encode the object id and the
|
||||
* remaining bits encode the offset. This means there is a bound on
|
||||
* the maximum offset into an object in CBMC, and hence a bound on the
|
||||
* size of objects in CBMC.
|
||||
*/
|
||||
#define CBMC_BITS 7
|
||||
#define CBMC_MAX_OBJECT_SIZE (0xFFFFFFFF >> CBMC_BITS)
|
||||
|
||||
enum CBMC_LOOP_CONDITION { CBMC_LOOP_BREAK, CBMC_LOOP_CONTINUE, CBMC_LOOP_RETURN };
|
||||
|
||||
// CBMC specification: capture old value for precondition /
|
||||
// postcondition checking
|
||||
|
||||
#define OLDVAL(var) _old_ ## var
|
||||
#define SAVE_OLDVAL(var,typ) const typ OLDVAL(var) = var
|
||||
|
||||
// CBMC specification: capture old value for values passed by
|
||||
// reference in function abstractions
|
||||
|
||||
#define OBJ(var) (*var)
|
||||
#define OLDOBJ(var) _oldobj_ ## var
|
||||
#define SAVE_OLDOBJ(var,typ) const typ OLDOBJ(var) = OBJ(var)
|
||||
|
||||
// CBMC debugging: printfs for expressions
|
||||
|
||||
#define __CPROVER_printf(var) { uint32_t ValueOf_ ## var = (uint32_t) var; }
|
||||
#define __CPROVER_printf2(str,exp) { uint32_t ValueOf_ ## str = (uint32_t) (exp); }
|
||||
|
||||
// CBMC debugging: printfs for pointer expressions
|
||||
|
||||
#define __CPROVER_printf_ptr(var) { uint8_t *ValueOf_ ## var = (uint8_t *) var; }
|
||||
#define __CPROVER_printf2_ptr(str,exp) { uint8_t *ValueOf_ ## str = (uint8_t *) (exp); }
|
||||
|
||||
/*
|
||||
* An assertion that pvPortMalloc returns NULL when asked to allocate 0 bytes.
|
||||
* This assertion is used in some of the Task proofs.
|
||||
*/
|
||||
#define __CPROVER_assert_zero_allocation() \
|
||||
__CPROVER_assert( pvPortMalloc(0) == NULL, \
|
||||
"pvPortMalloc allows zero-allocated memory.")
|
||||
|
||||
/*
|
||||
* A stub for pvPortMalloc that nondeterministically chooses to return
|
||||
* either NULL or an allocation of the requested space. The stub is
|
||||
* guaranteed to return NULL when asked to allocate 0 bytes.
|
||||
* This stub is used in some of the Task proofs.
|
||||
*/
|
||||
void *pvPortMalloc( size_t xWantedSize )
|
||||
{
|
||||
if ( xWantedSize == 0 )
|
||||
{
|
||||
return NULL;
|
||||
}
|
||||
return nondet_bool() ? malloc( xWantedSize ) : NULL;
|
||||
}
|
||||
|
||||
void vPortFree( void *pv )
|
||||
{
|
||||
(void)pv;
|
||||
free(pv);
|
||||
}
|
||||
|
||||
BaseType_t nondet_basetype();
|
||||
UBaseType_t nondet_ubasetype();
|
||||
TickType_t nondet_ticktype();
|
Loading…
Add table
Add a link
Reference in a new issue