--- layout: fc_discuss_archives title: Message 14 from Frama-C-discuss on July 2010 ---
I'm extremely happy to see such a demonstration of how useful is to use type integer instead of int in the annotations. Many thanks! By the way, I have no idea at all why *p versus p[0] makes a difference. Is it reproducible ? - Claude Pariente Dillon wrote: > Hello, > > >> /*@ requires n > 0; >> requires \valid(p+ (0..n-1)); >> assigns \nothing; >> ensures \forall int i; >> 0 <= i <= n-1 ==> \result >= p[i]; >> ensures \exists int e; >> > > Changing this last line into "ensures \exists integer e;" > permits to prove all the POs (with Alt-ergo 0.9 + (Z3 2.4 or CVC3 2.2)), > whatever the declaration of p (int*p, or int p[0]). > > HTH! > Dillon > > _______________________________________________ > Frama-c-discuss mailing list > Frama-c-discuss at lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/frama-c-discuss > -- Claude March? | tel: +33 1 72 92 59 69 INRIA Saclay - ?le-de-France | mobile: +33 6 33 14 57 93 Parc Orsay Universit? | fax: +33 1 74 85 42 29 4, rue Jacques Monod - B?timent N | http://www.lri.fr/~marche/ F-91893 ORSAY Cedex |