| .. |
|
sha
|
get sha256-refined.sdfy verifying, and add it to 'make verified' target
|
2017-03-19 21:52:44 -07:00 |
|
.dir-locals.el
|
pass /allocated:1 to dafny
|
2016-11-18 12:56:24 -08:00 |
|
.gitignore
|
silly over-engineered makefile kludge to workaround spartan's broken error code
|
2016-08-12 13:21:29 -07:00 |
|
ARMdecls.sdfy
|
make modulo arithmetic (ADDWrap instructions) opaque via TruncateWord()
|
2017-03-08 13:28:08 -08:00 |
|
ARMdef.dfy
|
add support for branch comparisons using the TST instruction
|
2017-03-21 22:26:18 -07:00 |
|
ARMprint.dfy
|
add support for branch comparisons using the TST instruction
|
2017-03-21 22:26:18 -07:00 |
|
ARMspartan.dfy
|
add support for branch comparisons using the TST instruction
|
2017-03-21 22:26:18 -07:00 |
|
Maybe.dfy
|
Wrap the world in modules, since Jay's loop unroller requires it. Sigh.
|
2016-11-01 22:29:19 -07:00 |
|
Seq.dfy
|
Merge branch 'refined'
|
2016-11-30 14:19:19 -08:00 |
|
Sets.dfy
|
move ironfleet set lemmas out to common file
|
2016-08-09 21:43:30 -07:00 |
|
addrseq.dfy
|
spec/reason about monitor physbase, remove an axiom, and misc cleanup
|
2017-03-21 21:50:18 -07:00 |
|
alignment.s.dfy
|
Wrap the world in modules, since Jay's loop unroller requires it. Sigh.
|
2016-11-01 22:29:19 -07:00 |
|
allocate_page.sdfy
|
clean up allocate_page -- verifies with framing now
|
2017-02-17 16:04:37 -08:00 |
|
bitvectors.i.dfy
|
swap BitShifts{Left,Right}Sum as a kludge for timeout instability
|
2017-01-27 15:07:55 -08:00 |
|
bitvectors.s.dfy
|
use dafny's new const feature in place of functions with no arguments
|
2016-12-07 14:32:30 -08:00 |
|
entry.i.dfy
|
checkpoint entry spec/proofs -- slowly converging to sanity again
|
2017-03-21 11:48:40 -07:00 |
|
entry.s.dfy
|
remove magic numbers
|
2017-03-21 21:51:27 -07:00 |
|
entry.sdfy
|
entry verifies (but only without framing on top-level procedures)
|
2017-02-20 20:57:34 -08:00 |
|
entrybits.i.dfy
|
entry verifies (but only without framing on top-level procedures)
|
2017-02-20 20:57:34 -08:00 |
|
exception_handlers.sdfy
|
started manually updating vale code to use framing / new decls
|
2017-02-15 17:03:53 -08:00 |
|
finalise.sdfy
|
remove, finalise verify
|
2017-02-18 22:12:34 -08:00 |
|
init_addrspace.sdfy
|
smc_handler verifies
|
2017-02-20 21:17:59 -08:00 |
|
init_dispatcher.sdfy
|
futz with init_dispatcher timeout :(
|
2017-02-18 13:53:50 -08:00 |
|
init_l2ptable.sdfy
|
smc_handler verifies
|
2017-02-20 21:17:59 -08:00 |
|
kom_common.i.dfy
|
move some invariants to break a needless low-level dependency on ARMspartan.dfy
|
2017-02-16 09:44:56 -08:00 |
|
kom_common.s.dfy
|
spec/reason about monitor physbase, remove an axiom, and misc cleanup
|
2017-03-21 21:50:18 -07:00 |
|
kom_utils.sdfy
|
clean up allocate_page -- verifies with framing now
|
2017-02-17 16:04:37 -08:00 |
|
main.dfy
|
fix main for vale changes; 'make verified' now completes
|
2017-02-21 09:58:35 -08:00 |
|
map_insecure.sdfy
|
map_insecure verifies, with tweaked register allocation
|
2017-02-18 22:25:17 -08:00 |
|
map_secure.sdfy
|
map_insecure verifies, with tweaked register allocation
|
2017-02-18 22:25:17 -08:00 |
|
map_utils.sdfy
|
init_l2ptable verifies
|
2017-02-18 14:15:30 -08:00 |
|
memset.sdfy
|
fiddle with memset instability, again
|
2017-02-17 16:58:07 -08:00 |
|
mkdep.py
|
change include syntax to match updated Spartan
|
2016-12-07 15:23:59 -08:00 |
|
nlarith.s.dfy
|
Merge remote-tracking branch 'origin/refined'
|
2016-11-30 15:31:03 -08:00 |
|
pagedb.i.dfy
|
More progress on spec. smcapi.s.dfy verifies
|
2017-03-05 18:23:03 -05:00 |
|
pagedb.s.dfy
|
spec/reason about monitor physbase, remove an axiom, and misc cleanup
|
2017-03-21 21:50:18 -07:00 |
|
psrbits.i.dfy
|
psrbits: split into two lemmas to workaround bitvector instability
|
2016-12-05 11:53:46 -08:00 |
|
ptables.i.dfy
|
ptables.i: add an opaque to (hopefully) stabilise lemma_ptablesmatch
|
2017-03-17 11:05:02 -07:00 |
|
ptebits.i.dfy
|
use dafny's new const feature in place of functions with no arguments
|
2016-12-07 14:32:30 -08:00 |
|
remove.sdfy
|
remove, finalise verify
|
2017-02-18 22:12:34 -08:00 |
|
smc_handler.sdfy
|
smc_handler verifies
|
2017-02-20 21:17:59 -08:00 |
|
smcapi.i.dfy
|
smcapi.i: update (proving validPageDb) for new entry spec
|
2017-03-21 21:51:43 -07:00 |
|
smcapi.s.dfy
|
spec/reason about monitor physbase, remove an axiom, and misc cleanup
|
2017-03-21 21:50:18 -07:00 |
|
stop.sdfy
|
stop verifies (still kinda grotty code though)
|
2017-02-18 14:26:13 -08:00 |
|
subdir.mk
|
get sha256-refined.sdfy verifying, and add it to 'make verified' target
|
2017-03-19 21:52:44 -07:00 |
|
words_and_bytes.s.dfy
|
convert CRLF to LF line endings with dos2unix
|
2016-12-07 15:07:45 -08:00 |
a22ce80aa8