Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | Next revision Both sides next revision | ||
|
sav07_lecture_3_skeleton [2007/03/21 10:56] vkuncak |
sav07_lecture_3_skeleton [2007/03/21 10:58] vkuncak |
||
|---|---|---|---|
| Line 128: | Line 128: | ||
| Note: when proving our verification condition, instead of proving that semantics of relation implies error=false, it's same as proving that the formula for set sp(U,r) implies error=false, where U is the universal relation. | Note: when proving our verification condition, instead of proving that semantics of relation implies error=false, it's same as proving that the formula for set sp(U,r) implies error=false, where U is the universal relation. | ||
| + | |||
| ==== Weakest preconditions ==== | ==== Weakest preconditions ==== | ||
| While symbolic execution computes formula by going forward along the program syntax tree, weakest precondition computes formula by going backward. | While symbolic execution computes formula by going forward along the program syntax tree, weakest precondition computes formula by going backward. | ||
| + | |||
| + | wp(Q, x=t) = | ||
| + | wp(Q, assume F) = | ||
| + | wp(Q, assert F) = | ||
| + | wp(Q, c1 [] c2) = | ||
| + | wp(Q, c1 ; c2) = | ||
| ==== Inferring Loop Invariants ==== | ==== Inferring Loop Invariants ==== | ||