From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM autolearn=unavailable autolearn_force=no version=3.4.4 X-Received: by 10.236.202.208 with SMTP id d56mr24346504yho.6.1431406190196; Mon, 11 May 2015 21:49:50 -0700 (PDT) X-Received: by 10.140.29.119 with SMTP id a110mr163655qga.20.1431406190159; Mon, 11 May 2015 21:49:50 -0700 (PDT) Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!peer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!z60no6767907qgd.0!news-out.google.com!t92ni327qga.1!nntp.google.com!j5no6766926qga.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.lang.ada Date: Mon, 11 May 2015 21:49:50 -0700 (PDT) In-Reply-To: Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=87.91.37.131; posting-account=hya6vwoAAADTA0O27Aq3u6Su3lQKpSMz NNTP-Posting-Host: 87.91.37.131 References: <2430252d-52a1-4609-acef-684864e6ca0c@googlegroups.com> <0a718b39-ebd3-4ab5-912e-f1229679dacc@googlegroups.com> <9ee5e186-5aaa-4d07-9490-0f9fdbb5ca18@googlegroups.com> <87tww5296f.fsf@adaheads.sparre-andersen.dk> <871tj9dp5b.fsf@theworld.com> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: Subject: Re: {Pre,Post}conditions and side effects From: vincent.diemunsch@gmail.com Injection-Date: Tue, 12 May 2015 04:49:50 +0000 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Received-Bytes: 2734 X-Received-Body-CRC: 2665946038 Xref: news.eternal-september.org comp.lang.ada:25830 Date: 2015-05-11T21:49:50-07:00 List-Id: Le mardi 12 mai 2015 00:49:40 UTC+2, Peter Chapin a =E9crit=A0: > In the book on SPARK 2014 John McCormick and I recently wrote (available= =20 > later this summer) we show an example of proving a sorting procedure wher= e=20 > the tools prove both >=20 > a) The resulting array is sorted and > b) The resulting array is a permutation of the original array. >=20 > We use ghost functions to do this.=20 Tell us more ! Do you use the same basic idea :=A0assuming that the swap fu= nction is an elementary permutation of arrays ? Do you use an assume statement ? > The proofs can be processed with the=20 > upcoming SPARK GPL 2015 release, but I'm not sure if they will go through= =20 > with SPARK GPL 2014. What is new with the SPARK GPL=A02015 prover ? Regards, Vincent