--- layout: fc_discuss_archives title: Message 5 from Frama-C-discuss on September 2017 ---
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Frama-c-discuss] Proving properties with land?



-- Loïc Correnson (2017-09-04)
> Properties on bitwise operations are difficult to prove by simply using SMT solvers.

To qualify this a bit, that's true for properties over mathematical integers like the following:

> /*@ lemma alignment: \forall integer x, y; x <= y && y % 4 == 0 ==>
> ((x + 3) & 4) <= y;
>  @*/

but if you consider only fixed-size bitvectors (like machine 32 or 64 bits integers) then SMT solvers have very efficient dedicated solvers.

Then, the issue is that you need to exploit these, which is not the case today for WP, unless this has changed recently.

--
Yannick Moy, Senior Software Engineer, AdaCore



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gforge.inria.fr/pipermail/frama-c-discuss/attachments/20170904/d21b2847/attachment.html>