1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
#include <stdbool.h>
#include <stdlib.h>
#define MAX_LEN 10
// clang-format off
bool f1(int *arr, int len)
__CPROVER_requires(
len > 0 ==> __CPROVER_exists {
int i;
// test enforcement with symbolic bound
(0 <= i && i < len) && arr[i] == 4
}
)
__CPROVER_ensures(
__CPROVER_return_value == true
)
// clang-format on
{
bool found_four = false;
if(0 < len)
found_four |= (arr[0] == 4);
if(1 < len)
found_four |= (arr[1] == 4);
if(2 < len)
found_four |= (arr[2] == 4);
if(3 < len)
found_four |= (arr[3] == 4);
if(4 < len)
found_four |= (arr[4] == 4);
if(5 < len)
found_four |= (arr[5] == 4);
if(6 < len)
found_four |= (arr[6] == 4);
if(7 < len)
found_four |= (arr[7] == 4);
if(8 < len)
found_four |= (arr[8] == 4);
if(9 < len)
found_four |= (arr[9] == 4);
// clang-format off
return (len > 0 ==> found_four);
// clang-format on
}
int main()
{
int len;
__CPROVER_assume(0 <= len && len <= MAX_LEN);
int *arr = malloc(len * sizeof(int));
f1(arr, len);
}
|
