src/HOL/Boogie/Examples/Boogie_Max.thy
author boehmes
Tue, 03 Nov 2009 17:54:24 +0100
changeset 33419 8ae45e87b992
child 33424 a3b002e2cd55
permissions -rw-r--r--
added HOL-Boogie
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
33419
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     1
(*  Title:      HOL/Boogie/Examples/Boogie_Dijkstra.thy
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     2
    Author:     Sascha Boehme, TU Muenchen
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     3
*)
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     4
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     5
header {* Boogie example: get the greatest element of a list *}
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     6
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     7
theory Boogie_Max
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     8
imports Boogie
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
     9
begin
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    10
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    11
text {*
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    12
We prove correct the verification condition generated from the following
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    13
Boogie code:
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    14
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    15
\begin{verbatim}
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    16
procedure max(array : [int]int, length : int)
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    17
  returns (max : int);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    18
  requires (0 < length);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    19
  ensures (forall i: int :: 0 <= i && i < length ==> array[i] <= max);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    20
  ensures (exists i: int :: 0 <= i && i < length ==> array[i] == max);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    21
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    22
implementation max(array : [int]int, length : int) returns (max : int)
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    23
{
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    24
  var p : int, k : int;
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    25
  max := array[0];
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    26
  k := 0;
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    27
  p := 1;
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    28
  while (p < length)
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    29
    invariant (forall i: int :: 0 <= i && i < p ==> array[i] <= max);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    30
    invariant (array[k] == max);
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    31
  {
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    32
    if (array[p] > max) { max := array[p]; k := p; }
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    33
    p := p + 1;
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    34
  }
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    35
}
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    36
\end{verbatim}
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    37
*}
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    38
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    39
boogie_open "~~/src/HOL/Boogie/Examples/Boogie_Max"
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    40
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    41
boogie_vc b_max
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    42
  unfolding labels
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    43
  using [[smt_cert="~~/src/HOL/Boogie/Examples/cert/Boogie_b_max"]]
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    44
  using [[z3_proofs=true]]
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    45
  by (smt boogie)
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    46
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    47
boogie_end
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    48
8ae45e87b992 added HOL-Boogie
boehmes
parents:
diff changeset
    49
end