--- layout: fc_discuss_archives title: Message 14 from Frama-C-discuss on July 2010 ---
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] *p and p[0]



I'm extremely happy to see such a demonstration of how useful is
to use type integer instead of int in the annotations. Many thanks!

By the way, I have no idea at all why *p versus p[0] makes a difference.
Is it reproducible ?

- Claude



Pariente Dillon wrote:
> Hello,
>
>   
>> /*@ requires n > 0;
>>     requires \valid(p+ (0..n-1));
>>     assigns \nothing;
>>     ensures \forall int i;
>>                  0 <= i <= n-1 ==> \result >= p[i];
>>     ensures \exists int e;
>>     
>
> Changing this last line into "ensures \exists integer e;"
> permits to prove all the POs (with Alt-ergo 0.9 + (Z3 2.4 or CVC3 2.2)),
> whatever the declaration of p (int*p, or int p[0]).
>
> HTH!
> Dillon
>
> _______________________________________________
> Frama-c-discuss mailing list
> Frama-c-discuss at lists.gforge.inria.fr
> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/frama-c-discuss
>   


-- 
Claude March?                          | tel: +33 1 72 92 59 69           
INRIA Saclay - ?le-de-France           | mobile: +33 6 33 14 57 93 
Parc Orsay Universit?                  | fax: +33 1 74 85 42 29   
4, rue Jacques Monod - B?timent N      | http://www.lri.fr/~marche/
F-91893 ORSAY Cedex                    |