Tobias Reinhard
22dc5c1287
Added proof idea and TODOs. Need to refactor single-core list predicates.
2022-11-29 13:53:53 -05:00
Tobias Reinhard
e8b8234416
Renamed predicates to comply with naming conventions
2022-11-29 09:47:50 -05:00
Tobias Reinhard
014acb9a00
Refactored lock predicates to improve readability.
2022-11-29 09:37:23 -05:00
Tobias Reinhard
c0df2a2894
Adapted proof of prvSelectHighestPriorityTask to use new DLS representation and opening & closing lemmas.
2022-11-28 10:55:39 -05:00
Tobias Reinhard
53189c46d4
Added new version of DLS opening lemma that reduces case splits in DLS proofs. Proved 3/4 of it.
2022-11-26 12:15:34 -05:00
Tobias Reinhard
49af8fd30f
Finished verification of iteration updates in prvSelectHighestPriorityTask.
2022-11-23 15:18:11 -05:00
Tobias Reinhard
9d1b47c5e5
Added lemmas to simplify opening and closing DLS for cases of the form pxTask->pxNext
2022-11-23 13:53:10 -05:00
Tobias Reinhard
f44473b47c
Applied closing lemmas.
2022-11-23 11:34:47 -05:00
Tobias Reinhard
397cb12abb
Added lemmas to reason about updates to pointers in the ready list of the form pxTaskItem = pxTaskItem->pxNext
2022-11-22 13:08:22 -05:00
Tobias Reinhard
538f29caeb
Closed some predicates to simplify proof state.
2022-11-22 10:17:37 -05:00
Tobias Reinhard
f7e537a19f
Restructured proof.
...
New proof opens the DLS predicate to justify accesses to `pxTaskItem->next` and proves that `pxTaskItem->next` points to a valid list item.
2022-11-22 10:10:41 -05:00
Tobias Reinhard
49643b6f5e
Partial proof justifying that updates of pxTaskItem in inner search loop in prvSelectHighestPriorityTask are safe.
2022-11-22 07:18:45 -05:00
Tobias Reinhard
35aef80072
Proved that pxTaskItem points to valid list item before inner search loop.
2022-11-21 14:02:23 -05:00
Tobias Reinhard
de3657239f
Added minimal loop invariant to inner search loop in prvSelectHighestPriorityTask.
2022-11-21 11:32:25 -05:00
Tobias Reinhard
92a925bb59
Verified selection of initial task item in search loop in prvSelectHighestPriorityTask.
2022-11-21 09:45:22 -05:00
Tobias Reinhard
cf65065a0c
Used single-core list predicate xLIST to express access permissions to ready lists in readyLists_p.
2022-11-18 16:27:38 -05:00
Tobias Reinhard
1888670656
Removed unneeded precondition
2022-11-18 13:35:06 -05:00
Tobias Reinhard
e629319b9f
Relaxed contract of xTaskGetCurrentTaskHandle.
2022-11-18 09:32:24 -05:00
Tobias Reinhard
c9e61fce49
Introduced initial formulation of predicate to capture shared ready lists.
2022-11-18 09:22:31 -05:00
Tobias Reinhard
6dcaef48d6
Added loop invariant to main search loop in prvSelectHighestPriorityTask.
2022-11-17 14:24:44 -05:00
Tobias Reinhard
9b2871bc92
Formulated first version of contract for prvSelectHighestPriorityTask and adapted proof of vTaskSwitchContext accordingly.
2022-11-17 12:55:01 -05:00
Tobias Reinhard
fb01980b63
Verified new contract for xTaskGetCurrentTaskHandle.
2022-11-17 12:08:38 -05:00
Tobias Reinhard
63a8d73ecc
Apdated proof for vTaskSwitchContext to rely on the proof of taskCHECK_FOR_STACK_OVERFLOW
2022-11-17 10:23:39 -05:00
Tobias Reinhard
d3bda01f16
Verified macro taskCHECK_FOR_STACK_OVERFLOW.
2022-11-17 09:20:21 -05:00
Tobias Reinhard
2f0b8bc82f
Added proof steps outlining the verification of stack inspection. Also added TODOs concerning rewrites necessary for the verification of the macro.
2022-11-16 16:08:15 -05:00
Tobias Reinhard
c3c350f8dc
vTaskSwitchContext now has access to the current task's stack.
2022-11-16 15:31:49 -05:00
Tobias Reinhard
b330847935
Added preliminary post condition for vTaskSwitchContext
2022-11-16 14:26:37 -05:00
Tobias Reinhard
4eb2fa573e
Wrote contracts for lock release operations.
2022-11-16 14:18:03 -05:00
Tobias Reinhard
54523ecdce
Included global variables pxCurrentTCBs and pxYieldingPendings in interrupt invariant.
2022-11-16 13:53:22 -05:00
Tobias Reinhard
d63a8f83cd
Renamed predicate encapsulating access permissions to core local variables to coreLocalInterruptInv_p.
2022-11-16 11:31:12 -05:00
Tobias Reinhard
327423ef67
TCB of currently scheduled task on core C is interrupt protected on core C. Updated invariants to reflect that.
2022-11-16 11:25:37 -05:00
Tobias Reinhard
360afe4374
Cleaned up lock predicate header.
2022-11-16 10:37:12 -05:00
Tobias Reinhard
d95976ebe5
Added info about available tasks to lock predicate.
2022-11-16 10:28:31 -05:00
Tobias Reinhard
7a5119e324
Nightly build of Nov 14, 2022 broke old proof for vTaskCreate. Ignoring these proofs for now.
2022-11-15 09:31:56 -05:00
Tobias Reinhard
d2f10a6b25
vTaskSwitchContexxt assumes that that interrupts have been deactivated.
2022-11-15 08:28:21 -05:00
Tobias Reinhard
a7fdaca373
Reverted manual rewrites involving const pointers. Automatic rewrites are in place.
2022-11-13 14:52:14 -05:00
Tobias Reinhard
a470fec6d0
Added automatic deletion of void casts (used to suppress warnings) and linked to filed VeriFast issue 335.
2022-11-13 14:46:17 -05:00
Tobias Reinhard
7c9711cb88
Reverted manual VF rewrites concerning const pointers. Respective rewrites are applied during preprocessing.
2022-11-11 15:44:23 -05:00
Tobias Reinhard
29e14be203
Verified minimal contract for xTaskGetCurrentTaskHandle.
2022-11-10 14:36:04 -05:00
Tobias Reinhard
63d8c5afa8
Rewrote side-effectful assertion such that VeriFast can process it.
2022-11-10 12:51:20 -05:00
Tobias Reinhard
7e75d7aa8f
Refined lock predicates and contracts for lock macros to match expected locking discipline.
2022-11-10 12:50:48 -05:00
Tobias Reinhard
3d4ad64692
Switched to new verification target vTaskSwitchContext.
2022-11-07 14:42:11 -05:00
Tobias Reinhard
9fa8c76447
Paused partial proof for xTaskCreate.
2022-11-07 14:40:08 -05:00
Tobias Reinhard
91eb6eefaa
Included reference to core ID in interrupt predicates and added distinction between global and core local variables.
2022-11-07 14:21:42 -05:00
Tobias Reinhard
06d2611aa9
Made config macros from FreeRTOSConfig.h available to VeriFast proof.
2022-11-04 16:16:08 -04:00
Tobias Reinhard
8897e3fe6e
Added specification for enabling and disabling interrupts.
2022-11-04 15:49:24 -04:00
Tobias Reinhard
66d71c5b47
Started to verify taskENTER_CRITICAL.
2022-11-04 14:23:39 -04:00
Tobias Reinhard
5c9750eac4
Verified vListInitialiseItem.
2022-11-04 11:24:25 -04:00
Tobias Reinhard
94e0f21574
Added rewrite to remove const qualifiers from pointers.
2022-11-04 11:15:15 -04:00
Tobias Reinhard
2404a2f253
Added flag to skip very expensive part of the proof for prvInitialiseNewTask.
...
When the symbol `VERIFAST_SKIP_BITVECTOR_PROOF__STACK_ALIGNMENT` is defined in the preprocessor script, we skip the verification of the stack alignment. This part of the proof involves bit vector arithmetic and hence takes long to verify.
2022-11-03 15:40:12 -04:00
