--- layout: fc_discuss_archives title: Message 36 from Frama-C-discuss on October 2008 ---
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] Specification Examples



Hello,

Le ven 10 oct 2008 11:39:59 CEST,
"Christoph Weber" <Christoph.Weber@first.fraunhofer.de> a ?crit :

> Thank you for the advice, it worked under the Helium release.
> 
> After searching the ACSL_1.3 PDF i found the \separated(...) function.
> 
> My question is if its posible to use it in a following manner :
> 
> /*@
>         requires \separated(a, b);
> */
> void array_cpy(int* a, int n, int* b);
> 
>  or do i have to be more specific, say like this:
> /*@
>         requires \forall int i,j;  \separated(a[i] b[j]);
> */
> void array_cpy(int* a, int n, int* b);
> 
> 

Neither ;-)

- \separated(a,b) indicates that the locations pointed to by a and b
(both seen as pointer to int) do not overlap.

- \separated(a[i],b[j]) is ill-formed: \separated takes addresses as
arguments not the values themselves. You should use
\separated(a+i,b+j).

Note that the latter is equivalent to the following precondition which
uses (indefinite) ranges of addresses: 
//@ requires \separated(a+(..),b+(..));


-- 
E tutto per oggi, a la prossima volta.
Virgile