***********************************************************************
*                                                                     *
*            The CertiKOS Certified Kit Operating System              *
*                                                                     *
*                   The FLINT Group, Yale University                  *
*                                                                     *
*  Copyright The FLINT Group, Yale University.  All rights reserved.  *
*  This file is distributed under the terms of the Yale University    *
*  Non-Commercial License Agreement.                                  *
*                                                                     *
*********************************************************************** 

Require Import Coqlib.
Require Import Errors.
Require Import AST.
Require Import Integers.
Require Import Floats.
Require Import Op.
Require Import Asm.
Require Import Events.
Require Import Globalenvs.
Require Import Smallstep.
Require Import Values.
Require Import Memory.
Require Import Maps.
Require Import AuxLemma.
Require Import FlatMemory.
Require Import AuxStateDataType.
Require Import Constant.
Require Import GlobIdent.
Require Import RealParams.
Require Import AsmImplLemma.
Require Import GenSem.
Require Import PrimSemantics.

Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compcertx.Stencil.
Require Import liblayers.compcertx.MakeProgram.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.
Require Import compcert.cfrontend.Ctypes.

Require Import PKContextNew.
Require Import AbstractDataType.

Local Open Scope string_scope.
Local Open Scope error_monad_scope.
Local Open Scope Z_scope.

Section Refinement.

  Context `{real_params: RealParams}.

  Notation LDATA := RData.

  Notation LDATAOps := (cdata LDATA).

  Inductive get_state_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    get_state_spec_low_intro s (WB: _ → Prop) (m´0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.load Mint32 m´0 b0 ((Int.unsigned n) × 12) = Some (Vint v) →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      get_state_spec_low_step s WB (Vint n :: nil) m´0 (Vint v) m´0.

  Inductive get_prev_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    get_prev_spec_low_intro s (WB: _ → Prop) (m´0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.load Mint32 m´0 b0 ((Int.unsigned n) × 12 + 4) = Some (Vint v) →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      get_prev_spec_low_step s WB (Vint n :: nil) m´0 (Vint v) m´0.

  Inductive get_next_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    get_next_spec_low_intro s (WB: _ → Prop) (m´0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.load Mint32 m´0 b0 ((Int.unsigned n) × 12 + 8) = Some (Vint v) →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      get_next_spec_low_step s WB (Vint n :: nil) m´0 (Vint v) m´0.

  Inductive set_state_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    set_state_spec_low_intro s (WB: _ → Prop) (m´0 m0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.store Mint32 m´0 b0 (Int.unsigned n × 12) (Vint v) = Some m0 →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      set_state_spec_low_step s WB (Vint n :: Vint v :: nil) m´0 Vundef m0.

  Inductive set_prev_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    set_prev_spec_low_intro s (WB: _ → Prop) (m´0 m0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.store Mint32 m´0 b0 (Int.unsigned n × 12 + 4) (Vint v) = Some m0 →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      set_prev_spec_low_step s WB (Vint n :: Vint v :: nil) m´0 Vundef m0.

  Inductive set_next_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    set_next_spec_low_intro s (WB: _ → Prop) (m´0 m0: mwd LDATAOps) b0 n v:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.store Mint32 m´0 b0 (Int.unsigned n × 12 + 8) (Vint v) = Some m0 →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      set_next_spec_low_step s WB (Vint n :: Vint v :: nil) m´0 Vundef m0.

  Inductive tcb_init_spec_low_step `{StencilOps} `{Mem.MemoryModelOps} `{UseMemWithData mem}:
    sextcall_sem (mem := mwd LDATAOps) :=
    tcb_init_spec_low_intro s (WB: _ → Prop) (m´0 m0 m1 m2: mwd LDATAOps) b0 n:
      find_symbol s TCBPool_LOC = Some b0 →
      Mem.store Mint32 m´0 b0 (Int.unsigned n × 12) (Vint (Int.repr 3)) = Some m0 →
      Mem.store Mint32 m0 b0 (Int.unsigned n × 12 + 4) (Vint (Int.repr num_proc)) = Some m1 →
      Mem.store Mint32 m1 b0 (Int.unsigned n × 12 + 8) (Vint (Int.repr num_proc)) = Some m2 →
      0 ≤ (Int.unsigned n) < num_proc →
      kernel_mode (snd m´0) →
      tcb_init_spec_low_step s WB (Vint n :: nil) m´0 Vundef m2.

  Section WITHMEM.

    Context `{Hstencil: Stencil}.
    Context `{Hmem: Mem.MemoryModel}.
    Context `{Hmwd: UseMemWithData mem}.

    Definition get_state_spec_low: compatsem LDATAOps :=
      csem get_state_spec_low_step (type_of_list_type (Tint32::nil)) Tint32.

    Definition set_state_spec_low: compatsem LDATAOps :=
      csem set_state_spec_low_step (type_of_list_type (Tint32::Tint32::nil)) Tvoid.

    Definition get_prev_spec_low: compatsem LDATAOps :=
      csem get_prev_spec_low_step (type_of_list_type (Tint32::nil)) Tint32.

    Definition set_prev_spec_low: compatsem LDATAOps :=
      csem set_prev_spec_low_step (type_of_list_type (Tint32::Tint32::nil)) Tvoid.

    Definition get_next_spec_low: compatsem LDATAOps :=
      csem get_next_spec_low_step (type_of_list_type (Tint32::nil)) Tint32.

    Definition set_next_spec_low: compatsem LDATAOps :=
      csem set_next_spec_low_step (type_of_list_type (Tint32::Tint32::nil)) Tvoid.

    Definition tcb_init_spec_low: compatsem LDATAOps :=
      csem tcb_init_spec_low_step (type_of_list_type (Tint32::nil)) Tvoid.


  End WITHMEM.

End Refinement.