-
Notifications
You must be signed in to change notification settings - Fork 108
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Prove cancelBadgedSends_ccorres
#816
Conversation
7a59da0
to
fda6c62
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall I'm quite happy with this, this was one of the functions I thought would be hardest in the whole IPC set.
We should remove the vcg_step
by proving an annotation rule for While that can be used with subst
and use that before vcg
, but otherwise I'm happy for this to go ahead (modulo the small cleanup bits).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice!
Still not quite a fan of the function_spec_extra_info
, but am outvoted and I guess function_spec2
is a kind of precedent. Don't forget to squash.
Signed-off-by: Michael McInerney <[email protected]>
2248196
to
8d857c6
Compare
Test with seL4/seL4#1302