#
c4dc578b |
|
17-Sep-2018 |
Edward Pierzchalski <ed.pierzchalski@data61.csiro.au> |
Fix up proofs after word lemma moves
|
#
d7574020 |
|
20-Sep-2018 |
Edward Pierzchalski <ed.pierzchalski@data61.csiro.au> |
Remove pure word lemmas from proof/* Removes redundant lemmas after moving them up to Word_Lib.
|
#
0044c57e |
|
26-Aug-2018 |
Ilya Yanok <ilya.yanok@gmail.com> |
lib: change runErrorT to runExceptT to match Haskell code
|
#
6b9d9d24 |
|
09-Jun-2018 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
Isabelle2018: new "op x" syntax; now is "(x)" (result of "isabelle update_op -m <dir>")
|
#
d7ec3eb9 |
|
12-Feb-2018 |
Japheth Lim <Japheth.Lim@data61.csiro.au> |
crefine: update for C-parser change to avoid complex call lvals (JIRA VER-881)
|
#
3d225cde |
|
04-Feb-2018 |
Joel Beeren <joel.beeren@data61.csiro.au> |
VER-910: add msgLabelBits to haskell message_info structs have 20 bit labels. On 32-bit systems, the label does not need to be masked as there are no extra padding bits in the struct, but this is not true for 64-bit systems. As a result, the haskell needs to mask msgLabelBits (=20) when extracting the label in messageInfoFromWord.
|
#
3a22487c |
|
24-Nov-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm: revise scheduler / fastpath / scheduler bitmaps (SELFOUR-242) Colloquially known as "invert-fastpath". Update verification efforts on ARM for the following seL4 changes: - scheduling decisions done in possibleSwitchTo are moved to the scheduler - possibleSwitchTo only checks whether the candidate is valid for a fast switch, not its priority, accepting possible candidates immmediately as a switch-to scheduler action - the scheduler checks the candidate against the current thread and against the bitmaps before making a decision - attemptSwitchTo and switchIfRequiredTo are gone - scheduler is now more complicated, and numerous proofs related to it are rewritten from scratch - fast path now checks ready queues via the scheduler bitmaps - L2 scheduler bitmap order reversed for better cache locality Many iterations between the kernel and verification teams were needed to get this right.
|
#
a2dd6d17 |
|
21-Nov-2017 |
Matthew Brecknell <Matthew.Brecknell@data61.csiro.au> |
autocorres-crefine: update CRefine proofs for AutoCorres
|
#
48b3a8b4 |
|
04-Oct-2017 |
Matthew Brecknell <Matthew.Brecknell@data61.csiro.au> |
update object and field widths for x64, and remove some magic numbers In X64 update the following to match the C kernel: - TCB size-bits (11). - Endpoint size-bits (4). - Guard bits (58). - Message registers. For all architectures, replace magic numbers with defined constants in specifications, and as far as possible in proofs: - tcb_bits in abstract spec. - tcbBlockSizeBits, cteSizeBits, ntfnSizeBits, epSizeBits in Haskell spec, Haskell and C refinement proofs.
|
#
796887d9 |
|
11-Jul-2017 |
Alejandro Gomez-Londono <alejandro.gomez@nicta.com.au> |
Removes all trailing whitespaces
|
#
f00bd94a |
|
30-Mar-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
crefine: move crefine/* into crefine/ARM/*
|