Skip to content

Jessie + alt-ergo unsound in presence of division

ID0000571: This issue was created automatically from Mantis Issue 571. Further discussion may take place here.


Id Project Category View Due Date Updated
ID0000571 Frama-C Plug-in > jessie public 2010-08-24 2010-09-29
Reporter pascal Assigned To pascal Resolution no change required
Priority normal Severity major Reproducibility always
Platform - OS - OS Version -
Product Version Frama-C Boron-20100401 Target Version - Fixed in Version -

Description :

A shorter example than the previous ones of functions named "search", where Jessie + Alt-ergo emit an unsound result:

/*@ requires 0 < x <= 1000000000 ; ensures \result / 2 > x; / int function1(int x) { return (2x + 1); }

frama-c -jessie t.c

With Frama-C 20100401, Why 2.26, Alt-ergo 0.91, the post-condition is proved, when it is in fact false for all arguments that satisfy the pre-condition.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information