Skip to content

Commit

Permalink
Added some guidance on how to read the proof.
Browse files Browse the repository at this point in the history
  • Loading branch information
tobireinhard committed Jan 4, 2023
1 parent 1eb83cd commit e52ae50
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions Test/VeriFast/tasks/vTaskSwitchContext/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -198,6 +198,16 @@ Both scripts expect the command line arguments explained below.
- \<FONT_SIZE\> is an optional argument specifying the IDE's font size.


# Reading the Proof
The most important parts that we have to understand in order to understand what the proof are the following, in this order:
- The locking discipline, cf. `proof/port_locking_contracts.h`
- The lock invariants, cf. `proof/lock_predicates.h`. The invariants use the ready list and task predicates defined in `proof/ready_list_predicates.h` and `task_predicates.h`.
- The contracts for the functions we verified, i.e., `vTaskSwitchContext` and `prvSelectHighestPriorityTask`, cf. `src/tasks.c`.
We propose to first skim the files mentioned above, in the provided order to get an overview of how the proof is structured.




# Maintaining the Proof
This directory contains annotated copies of FreeRTOS source and header files.
The annotations in these files tell VeriFast which functions it should verify and what the proof looks like.
Expand Down

0 comments on commit e52ae50

Please sign in to comment.