Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
sav07_lecture_3_skeleton [2007/03/21 10:17] vkuncak |
sav07_lecture_3_skeleton [2007/03/21 10:41] vkuncak |
||
|---|---|---|---|
| Line 127: | Line 127: | ||
| Alternative: | Alternative: | ||
| * decide that you will only loop for formulas of restricted form, as in abstract interpretation and data flow analysis (next week) | * decide that you will only loop for formulas of restricted form, as in abstract interpretation and data flow analysis (next week) | ||
| + | |||
| Line 132: | Line 133: | ||
| Suppose that we obtain (one or more) verification conditions of the form | Suppose that we obtain (one or more) verification conditions of the form | ||
| + | \begin{equation*} | ||
| + | F \rightarrow \mbox{error}=\mbox{false} | ||
| + | \end{equation*} | ||
| + | |||
| + | whose validity we need to prove. We here assume that F contains only | ||
| + | |||
| + | Note: we can check satisfiability of $F \land \mbox{error}=\mbox{true}$. | ||
| ==== Quantifier Presburger arithmetic ==== | ==== Quantifier Presburger arithmetic ==== | ||
| Line 150: | Line 158: | ||
| Proof: small model theorem. | Proof: small model theorem. | ||
| + | |||
| + | |||
| Line 162: | Line 172: | ||
| Next: reduce to integer linear programming: | Next: reduce to integer linear programming: | ||
| \begin{equation*} | \begin{equation*} | ||
| - | Ax = b, x \geq 0 | + | A\vec x = \vec b, \qquad \vec x \geq \vec 0 |
| \end{equation*} | \end{equation*} | ||
| where $A \in {\cal Z}^{m,n}$ and $x \in {\cal Z}^n$. | where $A \in {\cal Z}^{m,n}$ and $x \in {\cal Z}^n$. | ||
| Line 183: | Line 193: | ||
| Moreover, one can improve these bounds. One tool based on these ideas is [[http://www.cs.cmu.edu/~uclid/|UCLID]]. | Moreover, one can improve these bounds. One tool based on these ideas is [[http://www.cs.cmu.edu/~uclid/|UCLID]]. | ||
| - | Alternative: enumerate disjuncts of DNF on demand, each disjunct is a conjunction, then use ILP techniques (often first solve the underlying linear programming problem over reals). Most SMT tools are based on this idea (along with Nelson-Oppen combination: next class). | + | Alternative: enumerate disjuncts of DNF on demand, each disjunct is a conjunction, then use ILP techniques (often first solve the underlying linear programming problem over reals). Many SMT tools are based on this idea (along with Nelson-Oppen combination: next class). |
| * [[http://www.cs.nyu.edu/acsys/cvc3/download.html|CVC3]] (successor of CVC Lite) | * [[http://www.cs.nyu.edu/acsys/cvc3/download.html|CVC3]] (successor of CVC Lite) | ||
| * [[http://combination.cs.uiowa.edu/smtlib/|SMT-LIB]] Standard for formulas, competition | * [[http://combination.cs.uiowa.edu/smtlib/|SMT-LIB]] Standard for formulas, competition | ||