Quantcast
Channel: Dafny: An Automatic Program Verifier for Functional Correctness
Browsing all 1106 articles
Browse latest View live
↧

Closed Unassigned: Incorrect 'cyclic dependencies' error for datatypes [129]

The following code works:```datatype Maybe<T> = None | Some(v:T)datatype B = B(b:Maybe<B>)```However, the variation below causes the error "because of cyclic dependencies among constructor...

View Article


Source code checked in, #18f059b5365b

Add Dafny reference manual This version is still a draft, but is mostly complete and about half reviewed. The manual is written using Madoko. The sources are in the Docs/DafnyRef directory. The...

View Article


Source code checked in, #0cbeee399d75

Revert Makefile to its prior settings The prior change did not work for people who had their setup using the previous values.

View Article

Source code checked in, #a2842baeb32f

Implement module export so we can export a subset of items defined in the module.

View Article

Source code checked in, #d0cd845e086d

Mark old "import A as B" syntax as deprecated. The new syntax is "import A : B"

View Article


Source code checked in, #67a7aee8c9f6

Fix issue 129. When looking for a constructor for which Dafny knows how to instantiate all it arguments, don't stop as soon as one instantiable constructor is found. Instead, figure out all...

View Article

Created Unassigned: Use of undefined member causes crash [131]

Dafny crashes on the following program:```class Cell { method Test(c: Cell) { assert c.F();}}predicate F()``````$ dafny Test.dfyDafny program verifier version 1.9.6.21116, Copyright (c) 2003-2015,...

View Article

Created Unassigned: Missing checks for unallocated values inside old...

The well-formedness checks for a Dafny function get to assume that the formal argumentsare of the appropriate type and are allocated in the state in which the function is invoked.In order for this to...

View Article


Edited Unassigned: Incorrect translation of such-that expression [128]

Dafny (well, really, Z3) generates some inappropriate warnings in the following scenario.If you use the following command-line arguments:/noNLarith /z3opt:pi.warnings=true /compile:0 /autoTriggers:1on...

View Article


Closed Unassigned: Incorrect translation of such-that expression [128]

Dafny (well, really, Z3) generates some inappropriate warnings in the following scenario.If you use the following command-line arguments:/noNLarith /z3opt:pi.warnings=true /compile:0 /autoTriggers:1on...

View Article

Commented Unassigned: Dafny crash when same module is imported with two...

The following code causes Dafny to crash:abstract module AbstractModuleA{ type T}abstract module AbstractModuleB{ import opened AMA as AbstractModuleA method Foo(t:T)}abstract module AbstractModuleC...

View Article

Edited Unassigned: Dafny crash when same module is imported with two...

The following code causes Dafny to crash:abstract module AbstractModuleA{ type T}abstract module AbstractModuleB{ import opened AMA as AbstractModuleA method Foo(t:T)}abstract module AbstractModuleC...

View Article

Edited Unassigned: Dafny crash when same module is imported with two...

The following code causes Dafny to crash:abstract module AbstractModuleA{ type T}abstract module AbstractModuleB{ import opened AMA as AbstractModuleA method Foo(t:T)}abstract module AbstractModuleC...

View Article


Closed Unassigned: Dafny crash when same module is imported with two...

The following code causes Dafny to crash:abstract module AbstractModuleA{ type T}abstract module AbstractModuleB{ import opened AMA as AbstractModuleA method Foo(t:T)}abstract module AbstractModuleC...

View Article

Source code checked in, #085fe7ad931b

Fix issue 128. Change the translation of CanCallAssumption for let-such-that expression from // CanCall[[ var b :| RHS(b,g); Body(b,g,h) ]] = // (forall b0,b1 :: typeAntecedent ==> // CanCall[[...

View Article


Source code checked in, #7b902b3987e5

Fix issue 125. Add the missing case 2 and 3 with refinement and opened imports. For the following situation module LibA { // ...things declared here... } module LibB { // ...things declared here... }...

View Article

Source code checked in, #63e2bfa3d66c

Last checkin checked in the wrong version of bug125.dfy. The failure part of the test was moved into test\dafny0\modules0.dfy so that bug125.dfy can be verified that it was resolved to the correct types.

View Article


New Post: verification of loop invariant

We are trying to write a program that verifies matrix multiplication using dafny, we can't understand why it won't verify our code and why the invariant won't hold. here is the link to our code :...

View Article

Edited Unassigned: Auto triggers do not consider math operators as candidates...

When the /noNLarith switch is used, Dafny wraps each mathematical operator in a Boogie-level function (e.g.,```INTERmul_boogie()```). Unfortunately, the auto trigger functionality doesn't know this,...

View Article

Closed Unassigned: Auto triggers do not consider math operators as candidates...

When the /noNLarith switch is used, Dafny wraps each mathematical operator in a Boogie-level function (e.g.,```INTERmul_boogie()```). Unfortunately, the auto trigger functionality doesn't know this,...

View Article
Browsing all 1106 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>