author | nipkow |
Mon, 07 Feb 2005 08:02:14 +0100 | |
changeset 15502 | 9d012c7fadab |
parent 13537 | f506eb568121 |
child 16417 | 9bc16273c2d4 |
permissions | -rw-r--r-- |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
1 |
(* Title: HOL/Isar_examples/ExprCompiler.thy |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
2 |
ID: $Id$ |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
3 |
Author: Markus Wenzel, TU Muenchen |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
4 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
5 |
Correctness of a simple expression/stack-machine compiler. |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
6 |
*) |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
7 |
|
10007 | 8 |
header {* Correctness of a simple expression compiler *} |
7748 | 9 |
|
10007 | 10 |
theory ExprCompiler = Main: |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
11 |
|
7869 | 12 |
text {* |
7874 | 13 |
This is a (rather trivial) example of program verification. We model |
14 |
a compiler for translating expressions to stack machine instructions, |
|
15 |
and prove its correctness wrt.\ some evaluation semantics. |
|
10007 | 16 |
*} |
7869 | 17 |
|
18 |
||
10007 | 19 |
subsection {* Binary operations *} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
20 |
|
6744 | 21 |
text {* |
7869 | 22 |
Binary operations are just functions over some type of values. This |
7982 | 23 |
is both for abstract syntax and semantics, i.e.\ we use a ``shallow |
7874 | 24 |
embedding'' here. |
10007 | 25 |
*} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
26 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
27 |
types |
10007 | 28 |
'val binop = "'val => 'val => 'val" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
29 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
30 |
|
10007 | 31 |
subsection {* Expressions *} |
7869 | 32 |
|
33 |
text {* |
|
34 |
The language of expressions is defined as an inductive type, |
|
35 |
consisting of variables, constants, and binary operations on |
|
36 |
expressions. |
|
10007 | 37 |
*} |
7869 | 38 |
|
39 |
datatype ('adr, 'val) expr = |
|
40 |
Variable 'adr | |
|
41 |
Constant 'val | |
|
10007 | 42 |
Binop "'val binop" "('adr, 'val) expr" "('adr, 'val) expr" |
7869 | 43 |
|
44 |
text {* |
|
7874 | 45 |
Evaluation (wrt.\ some environment of variable assignments) is |
46 |
defined by primitive recursion over the structure of expressions. |
|
10007 | 47 |
*} |
7869 | 48 |
|
49 |
consts |
|
10007 | 50 |
eval :: "('adr, 'val) expr => ('adr => 'val) => 'val" |
7869 | 51 |
|
52 |
primrec |
|
53 |
"eval (Variable x) env = env x" |
|
54 |
"eval (Constant c) env = c" |
|
10007 | 55 |
"eval (Binop f e1 e2) env = f (eval e1 env) (eval e2 env)" |
7869 | 56 |
|
57 |
||
10007 | 58 |
subsection {* Machine *} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
59 |
|
6744 | 60 |
text {* |
6792 | 61 |
Next we model a simple stack machine, with three instructions. |
10007 | 62 |
*} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
63 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
64 |
datatype ('adr, 'val) instr = |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
65 |
Const 'val | |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
66 |
Load 'adr | |
10007 | 67 |
Apply "'val binop" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
68 |
|
6744 | 69 |
text {* |
7869 | 70 |
Execution of a list of stack machine instructions is easily defined |
71 |
as follows. |
|
10007 | 72 |
*} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
73 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
74 |
consts |
7761 | 75 |
exec :: "(('adr, 'val) instr) list |
10007 | 76 |
=> 'val list => ('adr => 'val) => 'val list" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
77 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
78 |
primrec |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
79 |
"exec [] stack env = stack" |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
80 |
"exec (instr # instrs) stack env = |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
81 |
(case instr of |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
82 |
Const c => exec instrs (c # stack) env |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
83 |
| Load x => exec instrs (env x # stack) env |
7761 | 84 |
| Apply f => exec instrs (f (hd stack) (hd (tl stack)) |
10007 | 85 |
# (tl (tl stack))) env)" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
86 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
87 |
constdefs |
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
88 |
execute :: "(('adr, 'val) instr) list => ('adr => 'val) => 'val" |
10007 | 89 |
"execute instrs env == hd (exec instrs [] env)" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
90 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
91 |
|
10007 | 92 |
subsection {* Compiler *} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
93 |
|
6744 | 94 |
text {* |
7869 | 95 |
We are ready to define the compilation function of expressions to |
6792 | 96 |
lists of stack machine instructions. |
10007 | 97 |
*} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
98 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
99 |
consts |
10007 | 100 |
compile :: "('adr, 'val) expr => (('adr, 'val) instr) list" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
101 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
102 |
primrec |
8031
826c6222cca2
renamed comp to compile (avoids clash with Relation.comp);
wenzelm
parents:
7982
diff
changeset
|
103 |
"compile (Variable x) = [Load x]" |
826c6222cca2
renamed comp to compile (avoids clash with Relation.comp);
wenzelm
parents:
7982
diff
changeset
|
104 |
"compile (Constant c) = [Const c]" |
10007 | 105 |
"compile (Binop f e1 e2) = compile e2 @ compile e1 @ [Apply f]" |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
106 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
107 |
|
6744 | 108 |
text {* |
8051 | 109 |
The main result of this development is the correctness theorem for |
110 |
$\idt{compile}$. We first establish a lemma about $\idt{exec}$ and |
|
111 |
list append. |
|
10007 | 112 |
*} |
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
113 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
114 |
lemma exec_append: |
7748 | 115 |
"ALL stack. exec (xs @ ys) stack env = |
10007 | 116 |
exec ys (exec xs stack env) env" (is "?P xs") |
11809 | 117 |
proof (induct xs) |
10007 | 118 |
show "?P []" by simp |
11809 | 119 |
next |
120 |
fix x xs assume hyp: "?P xs" |
|
121 |
show "?P (x # xs)" |
|
122 |
proof (induct x) |
|
123 |
from hyp show "!!val. ?P (Const val # xs)" by simp |
|
124 |
from hyp show "!!adr. ?P (Load adr # xs)" by simp |
|
125 |
from hyp show "!!fun. ?P (Apply fun # xs)" by simp |
|
10007 | 126 |
qed |
127 |
qed |
|
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
128 |
|
10007 | 129 |
theorem correctness: "execute (compile e) env = eval e env" |
130 |
proof - |
|
8051 | 131 |
have "ALL stack. exec (compile e) stack env = |
10007 | 132 |
eval e env # stack" (is "?P e") |
11809 | 133 |
proof (induct e) |
10007 | 134 |
show "!!adr. ?P (Variable adr)" by simp |
135 |
show "!!val. ?P (Constant val)" by simp |
|
11809 | 136 |
show "!!fun e1 e2. ?P e1 ==> ?P e2 ==> ?P (Binop fun e1 e2)" |
10007 | 137 |
by (simp add: exec_append) |
138 |
qed |
|
139 |
thus ?thesis by (simp add: execute_def) |
|
140 |
qed |
|
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
141 |
|
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
142 |
|
8051 | 143 |
text {* |
144 |
\bigskip In the proofs above, the \name{simp} method does quite a lot |
|
145 |
of work behind the scenes (mostly ``functional program execution''). |
|
146 |
Subsequently, the same reasoning is elaborated in detail --- at most |
|
147 |
one recursive function definition is used at a time. Thus we get a |
|
148 |
better idea of what is actually going on. |
|
10007 | 149 |
*} |
8051 | 150 |
|
13524 | 151 |
lemma exec_append': |
8052 | 152 |
"ALL stack. exec (xs @ ys) stack env |
10007 | 153 |
= exec ys (exec xs stack env) env" (is "?P xs") |
11809 | 154 |
proof (induct xs) |
10007 | 155 |
show "?P []" (is "ALL s. ?Q s") |
156 |
proof |
|
157 |
fix s have "exec ([] @ ys) s env = exec ys s env" by simp |
|
158 |
also have "... = exec ys (exec [] s env) env" by simp |
|
159 |
finally show "?Q s" . |
|
160 |
qed |
|
161 |
fix x xs assume hyp: "?P xs" |
|
162 |
show "?P (x # xs)" |
|
163 |
proof (induct x) |
|
164 |
fix val |
|
165 |
show "?P (Const val # xs)" (is "ALL s. ?Q s") |
|
166 |
proof |
|
167 |
fix s |
|
8052 | 168 |
have "exec ((Const val # xs) @ ys) s env = |
10007 | 169 |
exec (Const val # xs @ ys) s env" |
170 |
by simp |
|
171 |
also have "... = exec (xs @ ys) (val # s) env" by simp |
|
172 |
also from hyp |
|
173 |
have "... = exec ys (exec xs (val # s) env) env" .. |
|
174 |
also have "... = exec ys (exec (Const val # xs) s env) env" |
|
175 |
by simp |
|
176 |
finally show "?Q s" . |
|
177 |
qed |
|
178 |
next |
|
179 |
fix adr from hyp show "?P (Load adr # xs)" by simp -- {* same as above *} |
|
180 |
next |
|
181 |
fix fun |
|
182 |
show "?P (Apply fun # xs)" (is "ALL s. ?Q s") |
|
183 |
proof |
|
184 |
fix s |
|
8052 | 185 |
have "exec ((Apply fun # xs) @ ys) s env = |
10007 | 186 |
exec (Apply fun # xs @ ys) s env" |
187 |
by simp |
|
188 |
also have "... = |
|
189 |
exec (xs @ ys) (fun (hd s) (hd (tl s)) # (tl (tl s))) env" |
|
190 |
by simp |
|
191 |
also from hyp have "... = |
|
192 |
exec ys (exec xs (fun (hd s) (hd (tl s)) # tl (tl s)) env) env" |
|
193 |
.. |
|
194 |
also have "... = exec ys (exec (Apply fun # xs) s env) env" by simp |
|
195 |
finally show "?Q s" . |
|
196 |
qed |
|
197 |
qed |
|
198 |
qed |
|
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
199 |
|
13537 | 200 |
theorem correctness': "execute (compile e) env = eval e env" |
10007 | 201 |
proof - |
8052 | 202 |
have exec_compile: |
9659 | 203 |
"ALL stack. exec (compile e) stack env = eval e env # stack" |
10007 | 204 |
(is "?P e") |
205 |
proof (induct e) |
|
206 |
fix adr show "?P (Variable adr)" (is "ALL s. ?Q s") |
|
207 |
proof |
|
208 |
fix s |
|
209 |
have "exec (compile (Variable adr)) s env = exec [Load adr] s env" |
|
210 |
by simp |
|
211 |
also have "... = env adr # s" by simp |
|
212 |
also have "env adr = eval (Variable adr) env" by simp |
|
213 |
finally show "?Q s" . |
|
214 |
qed |
|
215 |
next |
|
216 |
fix val show "?P (Constant val)" by simp -- {* same as above *} |
|
217 |
next |
|
218 |
fix fun e1 e2 assume hyp1: "?P e1" and hyp2: "?P e2" |
|
219 |
show "?P (Binop fun e1 e2)" (is "ALL s. ?Q s") |
|
220 |
proof |
|
221 |
fix s have "exec (compile (Binop fun e1 e2)) s env |
|
222 |
= exec (compile e2 @ compile e1 @ [Apply fun]) s env" by simp |
|
223 |
also have "... = exec [Apply fun] |
|
224 |
(exec (compile e1) (exec (compile e2) s env) env) env" |
|
225 |
by (simp only: exec_append) |
|
226 |
also from hyp2 |
|
227 |
have "exec (compile e2) s env = eval e2 env # s" .. |
|
228 |
also from hyp1 |
|
229 |
have "exec (compile e1) ... env = eval e1 env # ..." .. |
|
230 |
also have "exec [Apply fun] ... env = |
|
231 |
fun (hd ...) (hd (tl ...)) # (tl (tl ...))" by simp |
|
232 |
also have "... = fun (eval e1 env) (eval e2 env) # s" by simp |
|
233 |
also have "fun (eval e1 env) (eval e2 env) = |
|
234 |
eval (Binop fun e1 e2) env" |
|
235 |
by simp |
|
236 |
finally show "?Q s" . |
|
237 |
qed |
|
238 |
qed |
|
8051 | 239 |
|
10007 | 240 |
have "execute (compile e) env = hd (exec (compile e) [] env)" |
241 |
by (simp add: execute_def) |
|
242 |
also from exec_compile |
|
243 |
have "exec (compile e) [] env = [eval e env]" .. |
|
244 |
also have "hd ... = eval e env" by simp |
|
245 |
finally show ?thesis . |
|
246 |
qed |
|
6444
2ebe9e630cab
Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff
changeset
|
247 |
|
10007 | 248 |
end |