Skip to content

lemma functions for match_string - #14

Closed
SetSplin wants to merge 15 commits into
evdenis:masterfrom
SetSplin:master
Closed

SetSplin wants to merge 15 commits into
evdenis:masterfrom
SetSplin:master

Conversation

@SetSplin

Copy link
Copy Markdown
Contributor

No description provided.

@evdenis
evdenis force-pushed the master branch 4 times, most recently from 4541855 to e5926d1 Compare September 7, 2020 22:49
@evdenis
evdenis force-pushed the master branch 4 times, most recently from 120a130 to 440fee7 Compare October 7, 2020 14:59
evdenis added a commit that referenced this pull request Sep 18, 2026
Describe a readable prefix ending at n or the first NULL, with a length
that fits the int index. This admits the documented (size_t)-1 sentinel
mode without permitting signed overflow. State the first-match and
missing-result properties directly instead of recursive array models.

Turn strcmp_corollary into a proved ghost function and call it explicitly.
Its conditional postcondition covers equal strings too, keeping both
proof branches reachable. Update the obsolete lemma notes in the READMEs.

WP proves 193/193 goals with RTE under the documented unsigned-wraparound
policy; all 45 smoke tests pass. The executable algorithm is unchanged.

PR: #14
evdenis added a commit that referenced this pull request Sep 18, 2026
Describe a readable prefix ending at n or the first NULL, with a length
that fits the int index. This admits the documented (size_t)-1 sentinel
mode without permitting signed overflow. State the first-match and
missing-result properties directly instead of recursive array models.

Turn strcmp_corollary into a proved ghost function and call it explicitly.
Its conditional postcondition covers equal strings too, keeping both
proof branches reachable. Update the obsolete lemma notes in the READMEs.

WP proves 193/193 goals with RTE under the documented unsigned-wraparound
policy; all 45 smoke tests pass. The executable algorithm is unchanged.

PR: #14
evdenis added a commit that referenced this pull request Sep 18, 2026
Describe a readable prefix ending at n or the first NULL, with a length
that fits the int index. This admits the documented (size_t)-1 sentinel
mode without permitting signed overflow. State the first-match and
missing-result properties directly instead of recursive array models.

Turn strcmp_corollary into a proved ghost function and call it explicitly.
Its conditional postcondition covers equal strings too, keeping both
proof branches reachable. Update the obsolete lemma notes in the READMEs.

WP proves 193/193 goals with RTE under the documented unsigned-wraparound
policy; all 45 smoke tests pass. The executable algorithm is unchanged.

PR: #14
@evdenis

evdenis commented Sep 18, 2026

Copy link
Copy Markdown
Owner

Superseded by #19.

@evdenis evdenis closed this Sep 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants