#
6b9d9d24 |
|
09-Jun-2018 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
Isabelle2018: new "op x" syntax; now is "(x)" (result of "isabelle update_op -m <dir>")
|
#
b5cdf470 |
|
13-Jun-2018 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
globally use session-qualified imports; add Lib session Session-qualified imports will be required for Isabelle2018 and help clarify the structure of sessions in the build tree. This commit mainly adds a new set of sessions for lib/, including a Lib session that includes most theories in lib/ and a few separate sessions for parts that have dependencies beyond CParser or are separate AFP sessions. The group "lib" collects all lib/ sessions. As a consequence, other theories should use lib/ theories by session name, not by path, which in turns means spec and proof sessions should also refer to each other by session name, not path, to avoid duplicate theory errors in theory merges later.
|
#
4a3d7a95 |
|
13-Jun-2018 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp: update proofs for SELFOUR-584: running multiple VMs on ARM As requested by verification, hypervisor registers are now an enumeration-indexed array rather than individual fields. This cleans up some of the proof. Additionally, we sweep some non-complexity under the machine op rug: vcpu_hw_write/read_reg_ccorres is as deep as we go, rather than specifying every operation and proving that vcpu_hw_write seL4_VCPUReg_REG calls set_REG for every REG I took this opportunity to clean up some arm-hyp definitions and proofs, so some whitespace cleanup got tangled in.
|
#
4601f2a1 |
|
06-Feb-2018 |
Joel Beeren <joel.beeren@data61.csiro.au> |
Genericise deletion actions that occur after empty_slot This patch adds a generic "post_cap_deletion" step that is called by finalise_slot. Previous to this, the only caps which had actions required at this stage were IRQHandlerCaps -- it was required that the IRQ bitmap be updated after the cap itself was removed (as the invariants state that for any existing IRQHandlerCap, the corresponding bit in the IRQ bitmap must be set). By genericising this, we add the capacity for new, arch-specific post cap deletion actions to occur in the future.
|
#
7b36283c |
|
24-Nov-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp: revise scheduler / fastpath / scheduler bitmaps (SELFOUR-242) Apply "invert-fastpath" changes to arm-hyp (ainvs, refine, crefine). See main commit for arm for more context.
|
#
48b3a8b4 |
|
04-Oct-2017 |
Matthew Brecknell <Matthew.Brecknell@data61.csiro.au> |
update object and field widths for x64, and remove some magic numbers In X64 update the following to match the C kernel: - TCB size-bits (11). - Endpoint size-bits (4). - Guard bits (58). - Message registers. For all architectures, replace magic numbers with defined constants in specifications, and as far as possible in proofs: - tcb_bits in abstract spec. - tcbBlockSizeBits, cteSizeBits, ntfnSizeBits, epSizeBits in Haskell spec, Haskell and C refinement proofs.
|
#
a0cb855d |
|
28-Apr-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp crefine: VSpace_C sorry-free, vcpu_(save|restore)_ccorres done
|
#
a36043fe |
|
27-Apr-2017 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
arm-hyp crefine: update IsolatedThreadActions for vcpuSave change
|
#
85053b25 |
|
21-Apr-2017 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
arm-hyp refine: new vs_valid_duplicates The Haskell invariant now describes the page mappings necessary for LargePage and SuperSection. Updates to refine/* to repair the corresponding fallout. This commit moves some of the largePagePTEOffset et al lemmas from CRefine up into Refine. A small number of small but fiddly word lemmas are currently still sorried.
|
#
239aed5e |
|
19-Apr-2017 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
arm-hyp crefine: IsolatedThreadAction sorry-free
|
#
51d8fa00 |
|
18-Apr-2017 |
Gerwin Klein <gerwin.klein@data61.csiro.au> |
arm-hyp crefine: one sorry left in IsolatedThreadAction
|
#
2906a7df |
|
11-Apr-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp crefine: trivial: rename after refine changes
|
#
b0466d15 |
|
10-Apr-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp crefine: sorry Invoke_C and IsolatedThreadAction
|
#
a07a9b76 |
|
03-Apr-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp crefine: update ARM*. with ARM_HYP*. qualification Found three quantification flavours styles: ARM. ARM_A. ARM_H. Via find|sed on entire folder.
|
#
526c9af3 |
|
03-Apr-2017 |
Rafal Kolanski <rafal.kolanski@nicta.com.au> |
arm-hyp crefine: copy from ARM
|