Library mcertikos.trap.TTrapArg
Require Import Coqlib.
Require Import Maps.
Require Import ASTExtra.
Require Import Integers.
Require Import Floats.
Require Import Values.
Require Import Memory.
Require Import Events.
Require Import Stacklayout.
Require Import Globalenvs.
Require Import AsmX.
Require Import Smallstep.
Require Import AuxStateDataType.
Require Import Constant.
Require Import GlobIdent.
Require Import FlatMemory.
Require Import CommonTactic.
Require Import AuxLemma.
Require Import RealParams.
Require Import PrimSemantics.
Require Import LAsm.
Require Import XOmega.
Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.
Require Import CalRealPTPool.
Require Import CalRealPT.
Require Import CalRealIDPDE.
Require Import CalRealInitPTE.
Require Import CalRealSMSPool.
Require Import CalRealProcModule.
Require Import INVLemmaMemory.
Require Import INVLemmaThread.
Require Import INVLemmaProc.
Require Import AbstractDataType.
Require Import LoadStoreSem2.
Require Export PProc.
Require Export ObjArg.
Require Import Maps.
Require Import ASTExtra.
Require Import Integers.
Require Import Floats.
Require Import Values.
Require Import Memory.
Require Import Events.
Require Import Stacklayout.
Require Import Globalenvs.
Require Import AsmX.
Require Import Smallstep.
Require Import AuxStateDataType.
Require Import Constant.
Require Import GlobIdent.
Require Import FlatMemory.
Require Import CommonTactic.
Require Import AuxLemma.
Require Import RealParams.
Require Import PrimSemantics.
Require Import LAsm.
Require Import XOmega.
Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.
Require Import CalRealPTPool.
Require Import CalRealPT.
Require Import CalRealIDPDE.
Require Import CalRealInitPTE.
Require Import CalRealSMSPool.
Require Import CalRealProcModule.
Require Import INVLemmaMemory.
Require Import INVLemmaThread.
Require Import INVLemmaProc.
Require Import AbstractDataType.
Require Import LoadStoreSem2.
Require Export PProc.
Require Export ObjArg.
Section WITHMEM.
Local Open Scope Z_scope.
Context `{real_params: RealParams}.
Context `{Hstencil: Stencil}.
Context `{Hmem: Mem.MemoryModel}.
Context `{Hmwd: UseMemWithData mem}.
Local Open Scope Z_scope.
Context `{real_params: RealParams}.
Context `{Hstencil: Stencil}.
Context `{Hmem: Mem.MemoryModel}.
Context `{Hmwd: UseMemWithData mem}.
Section INV.
Lemma uctxt_inject_neutral_gss_arg:
∀ up n,
uctxt_inject_neutral up n →
∀ i ii v,
uctxt_inject_neutral (ZMap.set i (ZMap.set ii (Vint v) (ZMap.get i up)) up) n.
Proof.
unfold uctxt_inject_neutral. intros.
destruct (zeq i ii0); subst.
- rewrite ZMap.gss; eauto.
destruct (zeq ii ii'); subst.
+ rewrite ZMap.gss. split; constructor.
+ rewrite ZMap.gso; eauto.
- rewrite ZMap.gso; eauto.
Qed.
Section SET_ERRNO.
Lemma uctx_set_errno_high_inv:
∀ d d' i0,
uctx_set_errno_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_errno_low_inv:
∀ d d' i0 n,
uctx_set_errno_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_errno_kernel_mode:
∀ d d' i0,
uctx_set_errno_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_errno_inv: PreservesInvariants uctx_set_errno_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_errno_low_inv; eauto.
- eapply uctx_set_errno_high_inv; eauto.
- eapply uctx_set_errno_kernel_mode; eauto.
Qed.
End SET_ERRNO.
Section SET_RETVAL1.
Lemma uctx_set_retval1_high_inv:
∀ d d' i0,
uctx_set_retval1_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval1_low_inv:
∀ d d' i0 n,
uctx_set_retval1_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval1_kernel_mode:
∀ d d' i0,
uctx_set_retval1_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval1_inv: PreservesInvariants uctx_set_retval1_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval1_low_inv; eauto.
- eapply uctx_set_retval1_high_inv; eauto.
- eapply uctx_set_retval1_kernel_mode; eauto.
Qed.
End SET_RETVAL1.
Section SET_RETVAL2.
Lemma uctx_set_retval2_high_inv:
∀ d d' i0,
uctx_set_retval2_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval2_low_inv:
∀ d d' i0 n,
uctx_set_retval2_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval2_kernel_mode:
∀ d d' i0,
uctx_set_retval2_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval2_inv: PreservesInvariants uctx_set_retval2_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval2_low_inv; eauto.
- eapply uctx_set_retval2_high_inv; eauto.
- eapply uctx_set_retval2_kernel_mode; eauto.
Qed.
End SET_RETVAL2.
Section SET_RETVAL3.
Lemma uctx_set_retval3_high_inv:
∀ d d' i0,
uctx_set_retval3_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval3_low_inv:
∀ d d' i0 n,
uctx_set_retval3_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval3_kernel_mode:
∀ d d' i0,
uctx_set_retval3_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval3_inv: PreservesInvariants uctx_set_retval3_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval3_low_inv; eauto.
- eapply uctx_set_retval3_high_inv; eauto.
- eapply uctx_set_retval3_kernel_mode; eauto.
Qed.
End SET_RETVAL3.
Section SET_RETVAL4.
Lemma uctx_set_retval4_high_inv:
∀ d d' i0,
uctx_set_retval4_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval4_low_inv:
∀ d d' i0 n,
uctx_set_retval4_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval4_kernel_mode:
∀ d d' i0,
uctx_set_retval4_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval4_inv: PreservesInvariants uctx_set_retval4_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval4_low_inv; eauto.
- eapply uctx_set_retval4_high_inv; eauto.
- eapply uctx_set_retval4_kernel_mode; eauto.
Qed.
End SET_RETVAL4.
End INV.
Lemma uctxt_inject_neutral_gss_arg:
∀ up n,
uctxt_inject_neutral up n →
∀ i ii v,
uctxt_inject_neutral (ZMap.set i (ZMap.set ii (Vint v) (ZMap.get i up)) up) n.
Proof.
unfold uctxt_inject_neutral. intros.
destruct (zeq i ii0); subst.
- rewrite ZMap.gss; eauto.
destruct (zeq ii ii'); subst.
+ rewrite ZMap.gss. split; constructor.
+ rewrite ZMap.gso; eauto.
- rewrite ZMap.gso; eauto.
Qed.
Section SET_ERRNO.
Lemma uctx_set_errno_high_inv:
∀ d d' i0,
uctx_set_errno_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_errno_low_inv:
∀ d d' i0 n,
uctx_set_errno_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_errno_kernel_mode:
∀ d d' i0,
uctx_set_errno_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_errno_inv: PreservesInvariants uctx_set_errno_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_errno_low_inv; eauto.
- eapply uctx_set_errno_high_inv; eauto.
- eapply uctx_set_errno_kernel_mode; eauto.
Qed.
End SET_ERRNO.
Section SET_RETVAL1.
Lemma uctx_set_retval1_high_inv:
∀ d d' i0,
uctx_set_retval1_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval1_low_inv:
∀ d d' i0 n,
uctx_set_retval1_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval1_kernel_mode:
∀ d d' i0,
uctx_set_retval1_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval1_inv: PreservesInvariants uctx_set_retval1_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval1_low_inv; eauto.
- eapply uctx_set_retval1_high_inv; eauto.
- eapply uctx_set_retval1_kernel_mode; eauto.
Qed.
End SET_RETVAL1.
Section SET_RETVAL2.
Lemma uctx_set_retval2_high_inv:
∀ d d' i0,
uctx_set_retval2_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval2_low_inv:
∀ d d' i0 n,
uctx_set_retval2_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval2_kernel_mode:
∀ d d' i0,
uctx_set_retval2_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval2_inv: PreservesInvariants uctx_set_retval2_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval2_low_inv; eauto.
- eapply uctx_set_retval2_high_inv; eauto.
- eapply uctx_set_retval2_kernel_mode; eauto.
Qed.
End SET_RETVAL2.
Section SET_RETVAL3.
Lemma uctx_set_retval3_high_inv:
∀ d d' i0,
uctx_set_retval3_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval3_low_inv:
∀ d d' i0 n,
uctx_set_retval3_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval3_kernel_mode:
∀ d d' i0,
uctx_set_retval3_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval3_inv: PreservesInvariants uctx_set_retval3_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval3_low_inv; eauto.
- eapply uctx_set_retval3_high_inv; eauto.
- eapply uctx_set_retval3_kernel_mode; eauto.
Qed.
End SET_RETVAL3.
Section SET_RETVAL4.
Lemma uctx_set_retval4_high_inv:
∀ d d' i0,
uctx_set_retval4_spec i0 d = Some d'→
high_level_invariant d →
high_level_invariant d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
Qed.
Lemma uctx_set_retval4_low_inv:
∀ d d' i0 n,
uctx_set_retval4_spec i0 d = Some d'→
low_level_invariant n d →
low_level_invariant n d'.
Proof.
intros. inv H0; functional inversion H; subst; simpl.
constructor; simpl; intros; try congruence; eauto 2.
eapply uctxt_inject_neutral_gss_arg; eauto.
Qed.
Lemma uctx_set_retval4_kernel_mode:
∀ d d' i0,
uctx_set_retval4_spec i0 d = Some d'→
kernel_mode d →
kernel_mode d'.
Proof.
intros. functional inversion H; subst; constructor; trivial.
Qed.
Global Instance uctx_set_retval4_inv: PreservesInvariants uctx_set_retval4_spec.
Proof.
preserves_invariants_simpl'.
- eapply uctx_set_retval4_low_inv; eauto.
- eapply uctx_set_retval4_high_inv; eauto.
- eapply uctx_set_retval4_kernel_mode; eauto.
Qed.
End SET_RETVAL4.
End INV.
These should be put into mcertikos.layerlib.GlobIdent
Definition ttraparg_fresh : compatlayer (cdata RData) :=
uctx_arg1 ↦ gensem uctx_arg1_spec
⊕ uctx_arg2 ↦ gensem uctx_arg2_spec
⊕ uctx_arg3 ↦ gensem uctx_arg3_spec
⊕ uctx_arg4 ↦ gensem uctx_arg4_spec
⊕ uctx_arg5 ↦ gensem uctx_arg5_spec
⊕ uctx_arg6 ↦ gensem uctx_arg6_spec
⊕ uctx_set_errno ↦ gensem uctx_set_errno_spec
⊕ uctx_set_retval1 ↦ gensem uctx_set_retval1_spec
⊕ uctx_set_retval2 ↦ gensem uctx_set_retval2_spec
⊕ uctx_set_retval3 ↦ gensem uctx_set_retval3_spec
⊕ uctx_set_retval4 ↦ gensem uctx_set_retval4_spec.
Definition ttraparg_passthrough : compatlayer (cdata RData) :=
fload ↦ gensem fload_spec
⊕ fstore ↦ gensem fstore_spec
⊕ device_output ↦ gensem device_output_spec
⊕ pt_read ↦ gensem ptRead_spec
⊕ pt_resv ↦ gensem ptResv_spec
⊕ shared_mem_status ↦ gensem shared_mem_status_spec
⊕ offer_shared_mem ↦ gensem offer_shared_mem_spec
⊕ get_curid ↦ gensem get_curid_spec
⊕ thread_wakeup ↦ gensem thread_wakeup_spec
⊕ syncreceive_chan ↦ gensem syncreceive_chan_spec
⊕ syncsendto_chan_pre ↦ gensem syncsendto_chan_pre_spec
⊕ syncsendto_chan_post ↦ gensem syncsendto_chan_post_spec
⊕ uctx_get ↦ gensem uctx_get_spec
⊕ uctx_set ↦ gensem uctx_set_spec
⊕ proc_create ↦ proc_create_compatsem proc_create_spec
⊕ proc_init ↦ gensem proc_init_spec
⊕ container_get_nchildren ↦ gensem container_get_nchildren_spec
⊕ container_get_quota ↦ gensem container_get_quota_spec
⊕ container_get_usage ↦ gensem container_get_usage_spec
⊕ container_can_consume ↦ gensem container_can_consume_spec
⊕ container_alloc ↦ gensem alloc_spec
⊕ trap_get ↦ primcall_trap_info_get_compatsem trap_info_get_spec
⊕ trap_set ↦ primcall_trap_info_ret_compatsem trap_info_ret_spec
⊕ thread_yield ↦ primcall_thread_schedule_compatsem thread_yield_spec (prim_ident:= thread_yield)
⊕ thread_sleep ↦ primcall_thread_transfer_compatsem thread_sleep_spec
⊕ proc_start_user ↦ primcall_start_user_compatsem proc_start_user_spec
⊕ proc_exit_user ↦ primcall_exit_user_compatsem proc_exit_user_spec
⊕ accessors ↦ {| exec_load := (@exec_loadex _ _ Hmwd);
exec_store := (@exec_storeex _ _ Hmwd) |}.
Definition ttraparg : compatlayer (cdata RData) := ttraparg_fresh ⊕ ttraparg_passthrough.
End WITHMEM.
uctx_arg1 ↦ gensem uctx_arg1_spec
⊕ uctx_arg2 ↦ gensem uctx_arg2_spec
⊕ uctx_arg3 ↦ gensem uctx_arg3_spec
⊕ uctx_arg4 ↦ gensem uctx_arg4_spec
⊕ uctx_arg5 ↦ gensem uctx_arg5_spec
⊕ uctx_arg6 ↦ gensem uctx_arg6_spec
⊕ uctx_set_errno ↦ gensem uctx_set_errno_spec
⊕ uctx_set_retval1 ↦ gensem uctx_set_retval1_spec
⊕ uctx_set_retval2 ↦ gensem uctx_set_retval2_spec
⊕ uctx_set_retval3 ↦ gensem uctx_set_retval3_spec
⊕ uctx_set_retval4 ↦ gensem uctx_set_retval4_spec.
Definition ttraparg_passthrough : compatlayer (cdata RData) :=
fload ↦ gensem fload_spec
⊕ fstore ↦ gensem fstore_spec
⊕ device_output ↦ gensem device_output_spec
⊕ pt_read ↦ gensem ptRead_spec
⊕ pt_resv ↦ gensem ptResv_spec
⊕ shared_mem_status ↦ gensem shared_mem_status_spec
⊕ offer_shared_mem ↦ gensem offer_shared_mem_spec
⊕ get_curid ↦ gensem get_curid_spec
⊕ thread_wakeup ↦ gensem thread_wakeup_spec
⊕ syncreceive_chan ↦ gensem syncreceive_chan_spec
⊕ syncsendto_chan_pre ↦ gensem syncsendto_chan_pre_spec
⊕ syncsendto_chan_post ↦ gensem syncsendto_chan_post_spec
⊕ uctx_get ↦ gensem uctx_get_spec
⊕ uctx_set ↦ gensem uctx_set_spec
⊕ proc_create ↦ proc_create_compatsem proc_create_spec
⊕ proc_init ↦ gensem proc_init_spec
⊕ container_get_nchildren ↦ gensem container_get_nchildren_spec
⊕ container_get_quota ↦ gensem container_get_quota_spec
⊕ container_get_usage ↦ gensem container_get_usage_spec
⊕ container_can_consume ↦ gensem container_can_consume_spec
⊕ container_alloc ↦ gensem alloc_spec
⊕ trap_get ↦ primcall_trap_info_get_compatsem trap_info_get_spec
⊕ trap_set ↦ primcall_trap_info_ret_compatsem trap_info_ret_spec
⊕ thread_yield ↦ primcall_thread_schedule_compatsem thread_yield_spec (prim_ident:= thread_yield)
⊕ thread_sleep ↦ primcall_thread_transfer_compatsem thread_sleep_spec
⊕ proc_start_user ↦ primcall_start_user_compatsem proc_start_user_spec
⊕ proc_exit_user ↦ primcall_exit_user_compatsem proc_exit_user_spec
⊕ accessors ↦ {| exec_load := (@exec_loadex _ _ Hmwd);
exec_store := (@exec_storeex _ _ Hmwd) |}.
Definition ttraparg : compatlayer (cdata RData) := ttraparg_fresh ⊕ ttraparg_passthrough.
End WITHMEM.