

@2838

7 years 
garnier 
Closing some more cases



@2837

7 years 
tranquil 
* filled in evaluation of LTL/LIN's extended instrucitons



@2835

7 years 
sacerdot 
Included Uses.ma which is required by the untrusted code.
The …



@2832

7 years 
sacerdot 
Added abstraction in front of cases daemon for code extraction.



@2830

7 years 
sacerdot 
Added abstractions in front of cases daemon for code extraction.



@2828

7 years 
sacerdot 
1. New semantics.ma file that puts together all semantics.
It …



@2825

7 years 
garnier 
Progress, Clight to Cminor



@2824

7 years 
tranquil 
* moved sum on lists notation to extranat
* used sum on lists to …



@2823

7 years 
tranquil 
* corrected bug in ERTL semantics (both delframe and newframe did the …



@2822

7 years 
garnier 
A consitent proof state for Clight to Cminor, with some progress (and …



@2821

7 years 
tranquil 
* implemented preclassified system for joint (in joint/joint_fullexec.ma)



@2820

7 years 
sacerdot 
Proof obligation closed.



@2819

7 years 
sacerdot 
Proof obligation closed.



@2818

7 years 
sacerdot 
"Repaired", using non computational daemons.



@2817

7 years 
sacerdot 
Repaired after Paolo's commit.



@2816

7 years 
sacerdot 
Repaired after Paolo's commit.



@2811

7 years 
sacerdot 
Preclassified system for RTLabs.



@2809

7 years 
sacerdot 
…



@2808

7 years 
tranquil 
added local_stacksize to joint internal functions to accomodate for …



@2807

7 years 
mckinna 
Yet another ErrorMessage?
Removed corresponding axiom in …



@2806

7 years 
tranquil 
new b_graph_translate obligations



@2802

7 years 
sacerdot 
New file Clight_classified_system with the classified system for …



@2801

7 years 
piccolo 
Partial commit not yet finished



@2800

7 years 
campbell 
Tidy up Measurable.ma a little, get rid of obsolete comments.



@2799

7 years 
tranquil 
* added taaf_to_taa, conversion from trace_any_any_free to …



@2796

7 years 
tranquil 
* added global notation for existence in Type[1] (\exists[1] x.P)
* in …



@2795

7 years 
sacerdot 
Added new function Measurable.observe_all_in_measurable to be used to …



@2794

7 years 
mckinna 
Minor tweaks/tidying up



@2793

7 years 
campbell 
Oops, gave fields wrong order during initialisation.



@2786

7 years 
piccolo 
Splitted ERTLtoERTLptrOK.ma and added new file with commutation lemmas



@2785

7 years 
piccolo 
Traces.ma repaired



@2784

7 years 
sacerdot 
Repaired after Mauro's commit.



@2783

7 years 
piccolo 
modified joint_closed_internal_function definition (added condition on …



@2782

7 years 
sacerdot 
1. Paolo's bv_of_nat/nat_of_bv in BitVector? used to work with the …



@2781

7 years 
sacerdot 
One more computational daemon closed.



@2774

7 years 
sacerdot 
1. the compiler now outputs both the stack cost model and the max …



@2772

7 years 
sacerdot 
Useless code removed.



@2771

7 years 
sacerdot 
Some speed up in Policy.ma.



@2770

7 years 
mckinna 
WARNING: another big commit, touching many files in ASM/*.ma
This …



@2769

7 years 
mckinna 
Mistakenly commented out
both as_cost_get_label (needed; OK)
as well …



@2768

7 years 
mckinna 
Nightmare: file no longer typechecks,
because defn as_cost_get_labels …



@2767

7 years 
mckinna 
WARNING: BIG commit, which pushes code_size_opt check into …



@2766

7 years 
mckinna 
pruned redundant dependency on Clight/Cexec?.ma



@2765

7 years 
sacerdot 
1. correctness.ma repaired
2. we used the OC_preclassified_system to …



@2764

7 years 
sacerdot 
preclassified_system for object code



@2763

7 years 
sacerdot 
All daemons in compiler.ma closed (i.e. proof obligations added
to the …



@2762

7 years 
sacerdot 
All repaired up to compiler.ma.
Note: one daemon is left for one …



@2761

7 years 
sacerdot 
Unused (but not useless) code commented out.



@2760

7 years 
sacerdot 
1. Many files repaired.
2. 3 new daemons: 2 in Assembly.ma, 1 in …



@2757

7 years 
tranquil 
many things are still broken, but there is a partial backtrack on …



@2756

7 years 
sacerdot 
WARNING: this commit breaks things, sorry, Paolo is going to fix …



@2755

7 years 
tranquil 
* changed primitives of abstract status (with stuf that is probably …



@2754

7 years 
sacerdot 
1. WARNING: I commented out one of James's function used in …



@2753

7 years 
mckinna 
Further tidying up thanks to Claudio's strong_decidable intervention; …



@2752

7 years 
mckinna 
Fixed TODO regarding length of list_instr
Added ASM/CodeMemory.ma to …



@2751

7 years 
mckinna 
Added
 AssemblyTooLarge? : ErrorMessage?
to complete compiler.ma



@2750

7 years 
mckinna 
Miscellany on 2^{16 bounds, memory, lemmas+definitions.
Completes …}



@2745

7 years 
sacerdot 
1. Complexity of policy computation lowered from O(n^{2) to O(n)
2. …}



@2741

7 years 
sacerdot 
File used only by untrusted code.
Implemented in Matita to exploit …



@2739

7 years 
sacerdot 
The graph colouring algorithm takes in input also the function.



@2737

7 years 
garnier 
Commit of current proof state for Clight to Cminor translation.



@2734

7 years 
mckinna 
yet another puzzling automation failure, in the repaired case:
"" …



@2732

7 years 
sacerdot 
Unused code removed.



@2728

7 years 
sacerdot 
listb.ma => listb_extra.ma for extraction



@2727

7 years 
campbell 
Remove a couple of redundant hypotheses.



@2726

7 years 
campbell 
Show max stack preserved in FEMeasurable.



@2725

7 years 
campbell 
Add observables to FEMeasurable proof; fix silly typo.



@2724

7 years 
campbell 
Add RTLabs cost labelling checks to compiler.ma.



@2723

7 years 
campbell 
Library name typo fixed.



@2722

7 years 
campbell 
It's easier to keep the real function identifier in frontend …



@2720

7 years 
tranquil 
implemented back end ops that were still axioms



@2716

7 years 
sacerdot 
utilities/deqsets.ma => utilities/deqsets_extra.ma for extraction



@2715

7 years 
sacerdot 
Policy.ma repaired



@2714

7 years 
sacerdot 
PolicyStep?.ma repaired



@2713

7 years 
sacerdot 
PolicyFront?.ma repaired



@2712

7 years 
tranquil 
changed some fields of joint_internal_function's invariant
fixed linearise



@2711

7 years 
sacerdot 
…



@2710

7 years 
sacerdot 
ASMCosts.ma repaired



@2709

7 years 
sacerdot 
LINToAsm repaired



@2708

7 years 
tranquil 
fixed linearise and LINToASM
LINToASM has now correct transformation …



@2707

7 years 
sacerdot 
Assembly repaired.



@2706

7 years 
mckinna 
repaired contentious broken automation
at end of subgoal 9 of case (* …



@2705

7 years 
sacerdot 
More progress in ASM towards implementing the new pseudoinstructions.



@2704

7 years 
tranquil 
moved JMP from instructions to preinstructions, and added MovSuccessor? …



@2703

7 years 
mckinna 
now includes defn of costlabel_map



@2702

7 years 
sacerdot 
1. proof closed in ASM/UtilBranch
2. more passes integrated in the …



@2701

7 years 
sacerdot 
Automation failure fixed by replacing with hand made proof.



@2700

7 years 
sacerdot 
1. exponential function dropped in favour of standard library
2. …



@2699

7 years 
mckinna 
simplified dependencies somewhat



@2698

7 years 
mckinna 
simplified dependencies



@2697

7 years 
sacerdot 
Compiler fixed to include the ERTLptrToLTL pass.



@2696

7 years 
sacerdot 
I can't get this right... :(



@2695

7 years 
sacerdot 
Renamed again.



@2694

7 years 
tranquil 
completed ERTLptrToLTL



@2693

7 years 
sacerdot 
1. Stuff moved to correct places.
2. ERTLptr pass added



@2692

7 years 
garnier 
Add some more constraints in clight_cminor_data.



@2691

7 years 
sacerdot 
ERTLtoERTLptr* moved to the proper place



@2690

7 years 
campbell 
Most of the measurable subtrace preservation proof done.



@2689

7 years 
tranquil 
* fixed passes up to linearisation



@2688

7 years 
tranquil 
* in Arithmeticcs.ma: commented include that breaks script in latest …


