1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
|
(** THIS FILE WAS AUTOMATICALLY GENERATED BY AENEAS *)
(** [arrays]: function definitions *)
module Arrays.Funs
open Primitives
include Arrays.Types
include Arrays.Clauses
#set-options "--z3rlimit 50 --fuel 1 --ifuel 1"
(** [arrays::incr]:
Source: 'tests/src/arrays.rs', lines 11:0-11:24 *)
let incr (x : u32) : result u32 =
u32_add x 1
(** [arrays::array_to_shared_slice_]:
Source: 'tests/src/arrays.rs', lines 19:0-19:53 *)
let array_to_shared_slice_ (t : Type0) (s : array t 32) : result (slice t) =
array_to_slice t 32 s
(** [arrays::array_to_mut_slice_]:
Source: 'tests/src/arrays.rs', lines 24:0-24:58 *)
let array_to_mut_slice_
(t : Type0) (s : array t 32) :
result ((slice t) & (slice t -> result (array t 32)))
=
array_to_slice_mut t 32 s
(** [arrays::array_len]:
Source: 'tests/src/arrays.rs', lines 28:0-28:40 *)
let array_len (t : Type0) (s : array t 32) : result usize =
let* s1 = array_to_slice t 32 s in Ok (slice_len t s1)
(** [arrays::shared_array_len]:
Source: 'tests/src/arrays.rs', lines 32:0-32:48 *)
let shared_array_len (t : Type0) (s : array t 32) : result usize =
let* s1 = array_to_slice t 32 s in Ok (slice_len t s1)
(** [arrays::shared_slice_len]:
Source: 'tests/src/arrays.rs', lines 36:0-36:44 *)
let shared_slice_len (t : Type0) (s : slice t) : result usize =
Ok (slice_len t s)
(** [arrays::index_array_shared]:
Source: 'tests/src/arrays.rs', lines 40:0-40:57 *)
let index_array_shared (t : Type0) (s : array t 32) (i : usize) : result t =
array_index_usize t 32 s i
(** [arrays::index_array_u32]:
Source: 'tests/src/arrays.rs', lines 47:0-47:53 *)
let index_array_u32 (s : array u32 32) (i : usize) : result u32 =
array_index_usize u32 32 s i
(** [arrays::index_array_copy]:
Source: 'tests/src/arrays.rs', lines 51:0-51:45 *)
let index_array_copy (x : array u32 32) : result u32 =
array_index_usize u32 32 x 0
(** [arrays::index_mut_array]:
Source: 'tests/src/arrays.rs', lines 55:0-55:62 *)
let index_mut_array
(t : Type0) (s : array t 32) (i : usize) :
result (t & (t -> result (array t 32)))
=
array_index_mut_usize t 32 s i
(** [arrays::index_slice]:
Source: 'tests/src/arrays.rs', lines 59:0-59:46 *)
let index_slice (t : Type0) (s : slice t) (i : usize) : result t =
slice_index_usize t s i
(** [arrays::index_mut_slice]:
Source: 'tests/src/arrays.rs', lines 63:0-63:58 *)
let index_mut_slice
(t : Type0) (s : slice t) (i : usize) :
result (t & (t -> result (slice t)))
=
slice_index_mut_usize t s i
(** [arrays::slice_subslice_shared_]:
Source: 'tests/src/arrays.rs', lines 67:0-67:70 *)
let slice_subslice_shared_
(x : slice u32) (y : usize) (z : usize) : result (slice u32) =
core_slice_index_Slice_index u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32) x
{ start = y; end_ = z }
(** [arrays::slice_subslice_mut_]:
Source: 'tests/src/arrays.rs', lines 71:0-71:75 *)
let slice_subslice_mut_
(x : slice u32) (y : usize) (z : usize) :
result ((slice u32) & (slice u32 -> result (slice u32)))
=
let* (s, index_mut_back) =
core_slice_index_Slice_index_mut u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32) x
{ start = y; end_ = z } in
Ok (s, index_mut_back)
(** [arrays::array_to_slice_shared_]:
Source: 'tests/src/arrays.rs', lines 75:0-75:54 *)
let array_to_slice_shared_ (x : array u32 32) : result (slice u32) =
array_to_slice u32 32 x
(** [arrays::array_to_slice_mut_]:
Source: 'tests/src/arrays.rs', lines 79:0-79:59 *)
let array_to_slice_mut_
(x : array u32 32) :
result ((slice u32) & (slice u32 -> result (array u32 32)))
=
array_to_slice_mut u32 32 x
(** [arrays::array_subslice_shared_]:
Source: 'tests/src/arrays.rs', lines 83:0-83:74 *)
let array_subslice_shared_
(x : array u32 32) (y : usize) (z : usize) : result (slice u32) =
core_array_Array_index u32 (core_ops_range_Range usize) 32
(core_ops_index_IndexSliceTIInst u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32)) x
{ start = y; end_ = z }
(** [arrays::array_subslice_mut_]:
Source: 'tests/src/arrays.rs', lines 87:0-87:79 *)
let array_subslice_mut_
(x : array u32 32) (y : usize) (z : usize) :
result ((slice u32) & (slice u32 -> result (array u32 32)))
=
let* (s, index_mut_back) =
core_array_Array_index_mut u32 (core_ops_range_Range usize) 32
(core_ops_index_IndexMutSliceTIInst u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32)) x
{ start = y; end_ = z } in
Ok (s, index_mut_back)
(** [arrays::index_slice_0]:
Source: 'tests/src/arrays.rs', lines 91:0-91:38 *)
let index_slice_0 (t : Type0) (s : slice t) : result t =
slice_index_usize t s 0
(** [arrays::index_array_0]:
Source: 'tests/src/arrays.rs', lines 95:0-95:42 *)
let index_array_0 (t : Type0) (s : array t 32) : result t =
array_index_usize t 32 s 0
(** [arrays::index_index_array]:
Source: 'tests/src/arrays.rs', lines 106:0-106:71 *)
let index_index_array
(s : array (array u32 32) 32) (i : usize) (j : usize) : result u32 =
let* a = array_index_usize (array u32 32) 32 s i in
array_index_usize u32 32 a j
(** [arrays::update_update_array]:
Source: 'tests/src/arrays.rs', lines 117:0-117:70 *)
let update_update_array
(s : array (array u32 32) 32) (i : usize) (j : usize) : result unit =
let* (a, index_mut_back) = array_index_mut_usize (array u32 32) 32 s i in
let* (_, index_mut_back1) = array_index_mut_usize u32 32 a j in
let* a1 = index_mut_back1 0 in
let* _ = index_mut_back a1 in
Ok ()
(** [arrays::array_local_deep_copy]:
Source: 'tests/src/arrays.rs', lines 121:0-121:43 *)
let array_local_deep_copy (x : array u32 32) : result unit =
Ok ()
(** [arrays::take_array]:
Source: 'tests/src/arrays.rs', lines 125:0-125:30 *)
let take_array (a : array u32 2) : result unit =
Ok ()
(** [arrays::take_array_borrow]:
Source: 'tests/src/arrays.rs', lines 126:0-126:38 *)
let take_array_borrow (a : array u32 2) : result unit =
Ok ()
(** [arrays::take_slice]:
Source: 'tests/src/arrays.rs', lines 127:0-127:28 *)
let take_slice (s : slice u32) : result unit =
Ok ()
(** [arrays::take_mut_slice]:
Source: 'tests/src/arrays.rs', lines 128:0-128:36 *)
let take_mut_slice (s : slice u32) : result (slice u32) =
Ok s
(** [arrays::const_array]:
Source: 'tests/src/arrays.rs', lines 130:0-130:32 *)
let const_array : result (array u32 2) =
Ok (mk_array u32 2 [ 0; 0 ])
(** [arrays::const_slice]:
Source: 'tests/src/arrays.rs', lines 134:0-134:20 *)
let const_slice : result unit =
let* _ = array_to_slice u32 2 (mk_array u32 2 [ 0; 0 ]) in Ok ()
(** [arrays::take_all]:
Source: 'tests/src/arrays.rs', lines 144:0-144:17 *)
let take_all : result unit =
let* _ = take_array (mk_array u32 2 [ 0; 0 ]) in
let* _ = take_array (mk_array u32 2 [ 0; 0 ]) in
let* _ = take_array_borrow (mk_array u32 2 [ 0; 0 ]) in
let* s = array_to_slice u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* _ = take_slice s in
let* (s1, to_slice_mut_back) =
array_to_slice_mut u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* s2 = take_mut_slice s1 in
let* _ = to_slice_mut_back s2 in
Ok ()
(** [arrays::index_array]:
Source: 'tests/src/arrays.rs', lines 158:0-158:38 *)
let index_array (x : array u32 2) : result u32 =
array_index_usize u32 2 x 0
(** [arrays::index_array_borrow]:
Source: 'tests/src/arrays.rs', lines 161:0-161:46 *)
let index_array_borrow (x : array u32 2) : result u32 =
array_index_usize u32 2 x 0
(** [arrays::index_slice_u32_0]:
Source: 'tests/src/arrays.rs', lines 165:0-165:42 *)
let index_slice_u32_0 (x : slice u32) : result u32 =
slice_index_usize u32 x 0
(** [arrays::index_mut_slice_u32_0]:
Source: 'tests/src/arrays.rs', lines 169:0-169:50 *)
let index_mut_slice_u32_0 (x : slice u32) : result (u32 & (slice u32)) =
let* i = slice_index_usize u32 x 0 in Ok (i, x)
(** [arrays::index_all]:
Source: 'tests/src/arrays.rs', lines 173:0-173:25 *)
let index_all : result u32 =
let* i = index_array (mk_array u32 2 [ 0; 0 ]) in
let* i1 = index_array (mk_array u32 2 [ 0; 0 ]) in
let* i2 = u32_add i i1 in
let* i3 = index_array_borrow (mk_array u32 2 [ 0; 0 ]) in
let* i4 = u32_add i2 i3 in
let* s = array_to_slice u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* i5 = index_slice_u32_0 s in
let* i6 = u32_add i4 i5 in
let* (s1, to_slice_mut_back) =
array_to_slice_mut u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* (i7, s2) = index_mut_slice_u32_0 s1 in
let* i8 = u32_add i6 i7 in
let* _ = to_slice_mut_back s2 in
Ok i8
(** [arrays::update_array]:
Source: 'tests/src/arrays.rs', lines 187:0-187:36 *)
let update_array (x : array u32 2) : result unit =
let* (_, index_mut_back) = array_index_mut_usize u32 2 x 0 in
let* _ = index_mut_back 1 in
Ok ()
(** [arrays::update_array_mut_borrow]:
Source: 'tests/src/arrays.rs', lines 190:0-190:48 *)
let update_array_mut_borrow (x : array u32 2) : result (array u32 2) =
let* (_, index_mut_back) = array_index_mut_usize u32 2 x 0 in
index_mut_back 1
(** [arrays::update_mut_slice]:
Source: 'tests/src/arrays.rs', lines 193:0-193:38 *)
let update_mut_slice (x : slice u32) : result (slice u32) =
let* (_, index_mut_back) = slice_index_mut_usize u32 x 0 in index_mut_back 1
(** [arrays::update_all]:
Source: 'tests/src/arrays.rs', lines 197:0-197:19 *)
let update_all : result unit =
let* _ = update_array (mk_array u32 2 [ 0; 0 ]) in
let* _ = update_array (mk_array u32 2 [ 0; 0 ]) in
let* x = update_array_mut_borrow (mk_array u32 2 [ 0; 0 ]) in
let* (s, to_slice_mut_back) = array_to_slice_mut u32 2 x in
let* s1 = update_mut_slice s in
let* _ = to_slice_mut_back s1 in
Ok ()
(** [arrays::range_all]:
Source: 'tests/src/arrays.rs', lines 208:0-208:18 *)
let range_all : result unit =
let* (s, index_mut_back) =
core_array_Array_index_mut u32 (core_ops_range_Range usize) 4
(core_ops_index_IndexMutSliceTIInst u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32))
(mk_array u32 4 [ 0; 0; 0; 0 ]) { start = 1; end_ = 3 } in
let* s1 = update_mut_slice s in
let* _ = index_mut_back s1 in
Ok ()
(** [arrays::deref_array_borrow]:
Source: 'tests/src/arrays.rs', lines 217:0-217:46 *)
let deref_array_borrow (x : array u32 2) : result u32 =
array_index_usize u32 2 x 0
(** [arrays::deref_array_mut_borrow]:
Source: 'tests/src/arrays.rs', lines 222:0-222:54 *)
let deref_array_mut_borrow (x : array u32 2) : result (u32 & (array u32 2)) =
let* i = array_index_usize u32 2 x 0 in Ok (i, x)
(** [arrays::take_array_t]:
Source: 'tests/src/arrays.rs', lines 230:0-230:31 *)
let take_array_t (a : array aB_t 2) : result unit =
Ok ()
(** [arrays::non_copyable_array]:
Source: 'tests/src/arrays.rs', lines 232:0-232:27 *)
let non_copyable_array : result unit =
take_array_t (mk_array aB_t 2 [ AB_A; AB_B ])
(** [arrays::sum]: loop 0:
Source: 'tests/src/arrays.rs', lines 245:0-253:1 *)
let rec sum_loop
(s : slice u32) (sum1 : u32) (i : usize) :
Tot (result u32) (decreases (sum_loop_decreases s sum1 i))
=
let i1 = slice_len u32 s in
if i < i1
then
let* i2 = slice_index_usize u32 s i in
let* sum3 = u32_add sum1 i2 in
let* i3 = usize_add i 1 in
sum_loop s sum3 i3
else Ok sum1
(** [arrays::sum]:
Source: 'tests/src/arrays.rs', lines 245:0-245:28 *)
let sum (s : slice u32) : result u32 =
sum_loop s 0 0
(** [arrays::sum2]: loop 0:
Source: 'tests/src/arrays.rs', lines 255:0-264:1 *)
let rec sum2_loop
(s : slice u32) (s2 : slice u32) (sum1 : u32) (i : usize) :
Tot (result u32) (decreases (sum2_loop_decreases s s2 sum1 i))
=
let i1 = slice_len u32 s in
if i < i1
then
let* i2 = slice_index_usize u32 s i in
let* i3 = slice_index_usize u32 s2 i in
let* i4 = u32_add i2 i3 in
let* sum3 = u32_add sum1 i4 in
let* i5 = usize_add i 1 in
sum2_loop s s2 sum3 i5
else Ok sum1
(** [arrays::sum2]:
Source: 'tests/src/arrays.rs', lines 255:0-255:41 *)
let sum2 (s : slice u32) (s2 : slice u32) : result u32 =
let i = slice_len u32 s in
let i1 = slice_len u32 s2 in
if not (i = i1) then Fail Failure else sum2_loop s s2 0 0
(** [arrays::f0]:
Source: 'tests/src/arrays.rs', lines 266:0-266:11 *)
let f0 : result unit =
let* (s, to_slice_mut_back) =
array_to_slice_mut u32 2 (mk_array u32 2 [ 1; 2 ]) in
let* (_, index_mut_back) = slice_index_mut_usize u32 s 0 in
let* s1 = index_mut_back 1 in
let* _ = to_slice_mut_back s1 in
Ok ()
(** [arrays::f1]:
Source: 'tests/src/arrays.rs', lines 271:0-271:11 *)
let f1 : result unit =
let* (_, index_mut_back) =
array_index_mut_usize u32 2 (mk_array u32 2 [ 1; 2 ]) 0 in
let* _ = index_mut_back 1 in
Ok ()
(** [arrays::f2]:
Source: 'tests/src/arrays.rs', lines 276:0-276:17 *)
let f2 (i : u32) : result unit =
Ok ()
(** [arrays::f4]:
Source: 'tests/src/arrays.rs', lines 285:0-285:54 *)
let f4 (x : array u32 32) (y : usize) (z : usize) : result (slice u32) =
core_array_Array_index u32 (core_ops_range_Range usize) 32
(core_ops_index_IndexSliceTIInst u32 (core_ops_range_Range usize)
(core_slice_index_SliceIndexRangeUsizeSliceTInst u32)) x
{ start = y; end_ = z }
(** [arrays::f3]:
Source: 'tests/src/arrays.rs', lines 278:0-278:18 *)
let f3 : result u32 =
let* i = array_index_usize u32 2 (mk_array u32 2 [ 1; 2 ]) 0 in
let* _ = f2 i in
let b = array_repeat u32 32 0 in
let* s = array_to_slice u32 2 (mk_array u32 2 [ 1; 2 ]) in
let* s1 = f4 b 16 18 in
sum2 s s1
(** [arrays::SZ]
Source: 'tests/src/arrays.rs', lines 289:0-289:19 *)
let sz_body : result usize = Ok 32
let sz : usize = eval_global sz_body
(** [arrays::f5]:
Source: 'tests/src/arrays.rs', lines 292:0-292:31 *)
let f5 (x : array u32 32) : result u32 =
array_index_usize u32 32 x 0
(** [arrays::ite]:
Source: 'tests/src/arrays.rs', lines 297:0-297:12 *)
let ite : result unit =
let* (s, to_slice_mut_back) =
array_to_slice_mut u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* (_, s1) = index_mut_slice_u32_0 s in
let* (s2, to_slice_mut_back1) =
array_to_slice_mut u32 2 (mk_array u32 2 [ 0; 0 ]) in
let* (_, s3) = index_mut_slice_u32_0 s2 in
let* _ = to_slice_mut_back1 s3 in
let* _ = to_slice_mut_back s1 in
Ok ()
(** [arrays::zero_slice]: loop 0:
Source: 'tests/src/arrays.rs', lines 306:0-313:1 *)
let rec zero_slice_loop
(a : slice u8) (i : usize) (len : usize) :
Tot (result (slice u8)) (decreases (zero_slice_loop_decreases a i len))
=
if i < len
then
let* (_, index_mut_back) = slice_index_mut_usize u8 a i in
let* i1 = usize_add i 1 in
let* a1 = index_mut_back 0 in
zero_slice_loop a1 i1 len
else Ok a
(** [arrays::zero_slice]:
Source: 'tests/src/arrays.rs', lines 306:0-306:31 *)
let zero_slice (a : slice u8) : result (slice u8) =
let len = slice_len u8 a in zero_slice_loop a 0 len
(** [arrays::iter_mut_slice]: loop 0:
Source: 'tests/src/arrays.rs', lines 315:0-321:1 *)
let rec iter_mut_slice_loop
(len : usize) (i : usize) :
Tot (result unit) (decreases (iter_mut_slice_loop_decreases len i))
=
if i < len
then let* i1 = usize_add i 1 in iter_mut_slice_loop len i1
else Ok ()
(** [arrays::iter_mut_slice]:
Source: 'tests/src/arrays.rs', lines 315:0-315:35 *)
let iter_mut_slice (a : slice u8) : result (slice u8) =
let len = slice_len u8 a in let* _ = iter_mut_slice_loop len 0 in Ok a
(** [arrays::sum_mut_slice]: loop 0:
Source: 'tests/src/arrays.rs', lines 323:0-331:1 *)
let rec sum_mut_slice_loop
(a : slice u32) (i : usize) (s : u32) :
Tot (result u32) (decreases (sum_mut_slice_loop_decreases a i s))
=
let i1 = slice_len u32 a in
if i < i1
then
let* i2 = slice_index_usize u32 a i in
let* s1 = u32_add s i2 in
let* i3 = usize_add i 1 in
sum_mut_slice_loop a i3 s1
else Ok s
(** [arrays::sum_mut_slice]:
Source: 'tests/src/arrays.rs', lines 323:0-323:42 *)
let sum_mut_slice (a : slice u32) : result (u32 & (slice u32)) =
let* i = sum_mut_slice_loop a 0 0 in Ok (i, a)
|