mirror of
https://github.com/AdaCore/why3.git
synced 2026-02-12 12:34:55 -08:00
1037 lines
56 KiB
XML
1037 lines
56 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
|
|
"http://why3.lri.fr/why3session.dtd">
|
|
<why3session shape_version="6">
|
|
<prover id="1" name="Z3" version="4.11.2" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="2" name="Alt-Ergo" version="2.3.0" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="3" name="CVC4" version="1.7" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="5" name="Alt-Ergo" version="2.4.0" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<file format="whyml" proved="true">
|
|
<path name=".."/><path name="string_base64_encoding.mlw"/>
|
|
<theory name="Base64" proved="true">
|
|
<goal name="int2b64'vc" expl="VC for int2b64" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.05" steps="475"/></proof>
|
|
</goal>
|
|
<goal name="eq_symbol'vc" expl="VC for eq_symbol" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="10"/></proof>
|
|
</goal>
|
|
<goal name="int2b64_valid_4_char" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="130"/></proof>
|
|
</goal>
|
|
<goal name="b642int'vc" expl="VC for b642int" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.29" steps="2040"/></proof>
|
|
</goal>
|
|
<goal name="b642int_int2b64" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.05" steps="329"/></proof>
|
|
</goal>
|
|
<goal name="get_pad'vc" expl="VC for get_pad" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.35" steps="1738"/></proof>
|
|
</goal>
|
|
<goal name="calc_pad_mod3" proved="true">
|
|
<transf name="introduce_premises" proved="true" >
|
|
<goal name="calc_pad_mod3.0" proved="true">
|
|
<transf name="case" proved="true" arg1="(mod (length s) 3 = 0)">
|
|
<goal name="calc_pad_mod3.0.0" expl="true case" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="14"/></proof>
|
|
</goal>
|
|
<goal name="calc_pad_mod3.0.1" expl="false case" proved="true">
|
|
<transf name="case" proved="true" arg1="(mod (length s) 3 = 1)">
|
|
<goal name="calc_pad_mod3.0.1.0" expl="false case (true case)" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="51"/></proof>
|
|
</goal>
|
|
<goal name="calc_pad_mod3.0.1.1" expl="false case" proved="true">
|
|
<transf name="assert" proved="true" arg1="(mod (length s) 3 = 2)">
|
|
<goal name="calc_pad_mod3.0.1.1.0" expl="asserted formula" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.01" steps="28476"/></proof>
|
|
</goal>
|
|
<goal name="calc_pad_mod3.0.1.1.1" expl="false case" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="53"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="calc_pad'vc" expl="VC for calc_pad" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.11" steps="1110"/></proof>
|
|
</goal>
|
|
<goal name="encoding_valid_b64'vc" expl="VC for encoding_valid_b64" proved="true">
|
|
<proof prover="2"><result status="valid" time="4.13" steps="4136"/></proof>
|
|
</goal>
|
|
<goal name="decode_unique'vc" expl="VC for decode_unique" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode_unique'vc.0" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode_unique'vc.0.0" expl="assertion" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.02" steps="58389"/></proof>
|
|
<transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(>),empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63'maxInt,int63'minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,valid_b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char'invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int'def,min_int'def,int2b64_valid_4_char,b642int_int2b64,calc_pad_mod3,encoding_valid_b64">
|
|
<goal name="decode_unique'vc.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="1" timelimit="1"><result status="valid" time="0.01" steps="16785"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode_unique'vc.0.1" expl="assertion" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.02" steps="77713"/></proof>
|
|
<transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(>),abs,empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63'maxInt,int63'minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Mod_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char'invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int'def,min_int'def,int2b64_valid_4_char,b642int_int2b64,H1,H2">
|
|
<goal name="decode_unique'vc.0.1.0" expl="assertion" proved="true">
|
|
<proof prover="1" timelimit="1"><result status="valid" time="0.01" steps="21588"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode_unique'vc.0.2" expl="assertion" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.02" steps="86357"/></proof>
|
|
<transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(>),empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63'maxInt,int63'minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,valid_b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char'invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int'def,min_int'def,int2b64_valid_4_char,b642int_int2b64,encoding_valid_b64,H1,H2,H3">
|
|
<goal name="decode_unique'vc.0.2.0" expl="assertion" proved="true">
|
|
<proof prover="1" timelimit="1"><result status="valid" time="0.01" steps="19990"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode_unique'vc.1" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="Assert" arg2="(div i 3)">
|
|
<goal name="decode_unique'vc.1.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.08" steps="211"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode_unique'vc.2" expl="postcondition" proved="true">
|
|
<transf name="apply" proved="true" arg1="extensionality">
|
|
<goal name="decode_unique'vc.2.0" expl="apply premises" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.11" steps="119"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc" expl="VC for encode_unique" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode_unique'vc.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="16"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode_unique'vc.1.0" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H3">
|
|
<goal name="encode_unique'vc.1.0.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H12" arg2="i">
|
|
<goal name="encode_unique'vc.1.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="3.12" steps="4913"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.1" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H5">
|
|
<goal name="encode_unique'vc.1.1.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.1.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.1.1.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.1.1.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="20"><result status="valid" time="12.37" steps="16637"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.2" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
|
|
<goal name="encode_unique'vc.1.2.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.2.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.1.2.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H15" arg2="i">
|
|
<goal name="encode_unique'vc.1.2.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="60"><result status="valid" time="23.76" steps="25847"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.3" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H8">
|
|
<goal name="encode_unique'vc.1.3.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.3.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H15" arg2="i">
|
|
<goal name="encode_unique'vc.1.3.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="60"><result status="valid" time="6.21" steps="6028"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.4" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
|
|
<goal name="encode_unique'vc.1.4.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.4.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.1.4.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H15" arg2="i">
|
|
<goal name="encode_unique'vc.1.4.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="60"><result status="valid" time="6.28" steps="8404"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.5" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.28" steps="678"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.6" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H5">
|
|
<goal name="encode_unique'vc.1.6.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.1.6.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.1.6.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0" expl="assertion" proved="true">
|
|
<transf name="destruct" proved="true" arg1="Hinst">
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.0" expl="destruct premise" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="26"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1" expl="assertion" proved="true">
|
|
<transf name="destruct" proved="true" arg1="Hinst1">
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1.0" expl="destruct premise" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="28"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1.1" expl="assertion" proved="true">
|
|
<transf name="eliminate_let" proved="true" >
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1.1.0" expl="assertion" proved="true">
|
|
<transf name="case" proved="true" arg1="(i*3+1 < length s1)">
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1.1.0.0" expl="true case (assertion)" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="28"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.6.0.0.0.0.1.1.0.1" expl="false case (assertion)" proved="true">
|
|
<proof prover="2"><result status="valid" time="2.36" steps="5132"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.7" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.34" steps="744"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.1.8" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.28" steps="494"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode_unique'vc.2.0" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H2">
|
|
<goal name="encode_unique'vc.2.0.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H11" arg2="i">
|
|
<goal name="encode_unique'vc.2.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="3.89" steps="6961"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.1" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H4">
|
|
<goal name="encode_unique'vc.2.1.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.1.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H12" arg2="i">
|
|
<goal name="encode_unique'vc.2.1.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.2.1.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="30"><result status="valid" time="11.14" steps="18820"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.2" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H6">
|
|
<goal name="encode_unique'vc.2.2.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.2.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.2.2.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.2.2.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="60"><result status="valid" time="29.37" steps="34133"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.3" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
|
|
<goal name="encode_unique'vc.2.3.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.3.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.2.3.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="4.58" steps="3655"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.4" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H6">
|
|
<goal name="encode_unique'vc.2.4.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.4.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.2.4.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H14" arg2="i">
|
|
<goal name="encode_unique'vc.2.4.0.0.0.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="30"><result status="valid" time="3.87" steps="4340"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.5" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.30" steps="706"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.6" expl="assertion" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H4">
|
|
<goal name="encode_unique'vc.2.6.0" expl="assertion" proved="true">
|
|
<transf name="split_premise_full" proved="true" >
|
|
<goal name="encode_unique'vc.2.6.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H12" arg2="i">
|
|
<goal name="encode_unique'vc.2.6.0.0.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="H13" arg2="i">
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0" expl="assertion" proved="true">
|
|
<transf name="destruct" proved="true" arg1="Hinst">
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.0" expl="destruct premise" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="26"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1" expl="assertion" proved="true">
|
|
<transf name="destruct" proved="true" arg1="Hinst1">
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1.0" expl="destruct premise" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="28"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1.1" expl="assertion" proved="true">
|
|
<transf name="eliminate_let" proved="true" >
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1.1.0" expl="assertion" proved="true">
|
|
<transf name="case" proved="true" arg1="(i*3+1 < length s1)">
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1.1.0.0" expl="true case (assertion)" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="28"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.6.0.0.0.0.1.1.0.1" expl="false case (assertion)" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.78" steps="4046"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.7" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.27" steps="784"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.2.8" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.18" steps="522"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.3" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="Assert" arg2="i">
|
|
<goal name="encode_unique'vc.3.0" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="Assert1" arg2="i">
|
|
<goal name="encode_unique'vc.3.0.0" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode_unique'vc.3.0.0.0" expl="VC for encode_unique" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="24"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.3.0.0.1" expl="VC for encode_unique" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="26"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.3.0.0.2" expl="VC for encode_unique" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="29"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.3.0.0.3" expl="VC for encode_unique" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="29"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.4" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="Assert" arg2="(div i 4)">
|
|
<goal name="encode_unique'vc.4.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.04" steps="115"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode_unique'vc.5" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="63"/></proof>
|
|
</goal>
|
|
<goal name="encode_unique'vc.6" expl="postcondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="20"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc" expl="VC for encode" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.0" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.06" steps="12"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.1" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="38"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.2" expl="loop invariant init" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.2.0" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="14"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.3" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="15"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.4" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="66"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.5" expl="loop invariant init" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="21"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.6" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="31"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.7" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.03" steps="109"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.8" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="33"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.9" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.04" steps="121"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.10" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="33"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.11" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="35"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.12" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.09" steps="216"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.13" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="39"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.14" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.15" steps="280"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.15" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="43"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.16" expl="integer overflow" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.16.0" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.64" steps="554"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.17" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.46" steps="509"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.18" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.37" steps="319"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.19" expl="division by zero" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.10" steps="51"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.20" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.26" steps="368"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.21" expl="division by zero" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.21.0" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="55"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.22" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.25" steps="750"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.23" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.28" steps="599"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.24" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="2.01" steps="585"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.25" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="63"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.26" expl="integer overflow" proved="true">
|
|
<proof prover="1" timelimit="1"><result status="valid" time="0.02" steps="70626"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.27" expl="precondition" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 3) 4)">
|
|
<goal name="encode'vc.27.0" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.74" steps="851"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.28" expl="precondition" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 2) 4)">
|
|
<goal name="encode'vc.28.0" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.95" steps="796"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.29" expl="precondition" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.29.0" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.28" steps="382"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.29.1" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="0.42" steps="536"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.30" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.48" steps="563"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.31" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.08" steps="75"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.32" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.32.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="10"><result status="valid" time="7.89" steps="5936"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.32.1" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="5.61" steps="5063"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.32.2" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="7.86" steps="6835"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.32.3" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.86" steps="647"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.33" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="3.86" steps="2254"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.34" expl="loop variant decrease" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="85"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.35" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="85"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.36" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.14" steps="88"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.37" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.37.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="88"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.37.1" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.89" steps="640"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.38" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.38.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.72" steps="796"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.38.1" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.79" steps="962"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.38.2" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.02" steps="1071"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.38.3" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.98" steps="1166"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.39" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 2) 4)">
|
|
<goal name="encode'vc.39.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.98" steps="704"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.40" expl="assertion" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 3) 4)">
|
|
<goal name="encode'vc.40.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.21" steps="1479"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.41" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.12" steps="162"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.42" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.14" steps="399"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.43" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.04" steps="152"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44" expl="postcondition" proved="true">
|
|
<transf name="unfold" proved="true" arg1="encoding">
|
|
<goal name="encode'vc.44.0" expl="VC for encode" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.44.0.0" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.33" steps="924"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.1" expl="VC for encode" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
|
|
<goal name="encode'vc.44.0.1.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.1.0.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.1.0.0.0" expl="VC for encode" proved="true">
|
|
<proof prover="2" timelimit="10"><result status="valid" time="5.13" steps="4320"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.2" expl="VC for encode" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
|
|
<goal name="encode'vc.44.0.2.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.2.0.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.2.0.0.0" expl="VC for encode" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="8.00" steps="7182"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.3" expl="VC for encode" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
|
|
<goal name="encode'vc.44.0.3.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.3.0.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.3.0.0.0" expl="VC for encode" proved="true">
|
|
<proof prover="2" timelimit="20"><result status="valid" time="11.50" steps="11526"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4" expl="VC for encode" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < b -> valid_b64_char r2[i*4] && valid_b64_char r2[i*4+1] && valid_b64_char r2[i*4+2] && valid_b64_char r2[i*4+3])">
|
|
<goal name="encode'vc.44.0.4.0" expl="asserted formula" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
|
|
<goal name="encode'vc.44.0.4.0.0" expl="asserted formula" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="encode'vc.44.0.4.0.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.03" steps="97585"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4.0.0.1" expl="asserted formula" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.03" steps="99463"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4.0.0.2" expl="asserted formula" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.03" steps="100867"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4.0.0.3" expl="asserted formula" proved="true">
|
|
<proof prover="1"><result status="valid" time="0.03" steps="101802"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4.1" expl="VC for encode" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < o -> r[i] = r1[i] = r2[i])">
|
|
<goal name="encode'vc.44.0.4.1.0" expl="asserted formula" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.17" steps="460"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.4.1.1" expl="VC for encode" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="h1" arg2="(div i 4)">
|
|
<goal name="encode'vc.44.0.4.1.1.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.4.1.1.0.0" expl="VC for encode" proved="true">
|
|
<transf name="remove" proved="true" arg1="Assert">
|
|
<goal name="encode'vc.44.0.4.1.1.0.0.0" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="3.28" steps="4759"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.5" expl="VC for encode" proved="true">
|
|
<transf name="assert" proved="true" arg1="(get_pad r = padding)">
|
|
<goal name="encode'vc.44.0.5.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < length r1 -> r1[i] <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.5.0.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < 64 -> int2b64 i <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.5.0.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.26" steps="35374"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.5.0.0.1" expl="asserted formula" proved="true">
|
|
<transf name="introduce_premises" proved="true" >
|
|
<goal name="encode'vc.44.0.5.0.0.1.0" expl="asserted formula" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
|
|
<goal name="encode'vc.44.0.5.0.0.1.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.77" steps="5980"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.5.0.1" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.44" steps="62001"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.5.1" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.30" steps="775"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.6" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="45"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.7" expl="VC for encode" proved="true">
|
|
<transf name="assert" proved="true" arg1="(get_pad r = padding)">
|
|
<goal name="encode'vc.44.0.7.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < length r1 -> r1[i] <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.7.0.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < 64 -> int2b64 i <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.7.0.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.18" steps="34861"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.7.0.0.1" expl="asserted formula" proved="true">
|
|
<transf name="introduce_premises" proved="true" >
|
|
<goal name="encode'vc.44.0.7.0.0.1.0" expl="asserted formula" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
|
|
<goal name="encode'vc.44.0.7.0.0.1.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.84" steps="5989"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.7.0.1" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.40" steps="59653"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.7.1" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.63" steps="1285"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.8" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.08" steps="265"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.9" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.05" steps="47"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.10" expl="VC for encode" proved="true">
|
|
<transf name="assert" proved="true" arg1="(get_pad r = padding)">
|
|
<goal name="encode'vc.44.0.10.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < length r1 -> r1[i] <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.10.0.0" expl="asserted formula" proved="true">
|
|
<transf name="assert" proved="true" arg1="(forall i. 0 <= i < 64 -> int2b64 i <> eq_symbol)">
|
|
<goal name="encode'vc.44.0.10.0.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.31" steps="38539"/></proof>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.10.0.0.1" expl="asserted formula" proved="true">
|
|
<transf name="introduce_premises" proved="true" >
|
|
<goal name="encode'vc.44.0.10.0.0.1.0" expl="asserted formula" proved="true">
|
|
<transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
|
|
<goal name="encode'vc.44.0.10.0.0.1.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.83" steps="5933"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.10.0.1" expl="asserted formula" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.24" steps="33841"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="encode'vc.44.0.10.1" expl="VC for encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="41"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc" expl="VC for decode" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.0" expl="loop invariant init" proved="true">
|
|
<proof prover="1" timelimit="1"><result status="valid" time="0.02" steps="37985"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.1" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="17"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.2" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.01" steps="18"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.3" expl="loop invariant init" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="21"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.4" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="31"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.5" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="79"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.6" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="33"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.7" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="91"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.8" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="35"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.9" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.03" steps="105"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.10" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="35"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.11" expl="precondition" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.11.0" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="30"><result status="valid" time="0.08" steps="181"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.12" expl="division by zero" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="37"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.13" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="146"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.14" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="20"><result status="valid" time="0.14" steps="371"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.15" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.06" steps="237"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.16" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.23" steps="362"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.17" expl="precondition" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.17.0" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.16" steps="434"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.18" expl="division by zero" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="47"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.19" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.09" steps="375"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.20" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="10"><result status="valid" time="0.26" steps="773"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.21" expl="division by zero" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="51"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.22" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.23" steps="356"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.23" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.37" steps="405"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.24" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.85" steps="972"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.25" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.42" steps="724"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.26" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.41" steps="736"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.27" expl="division by zero" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.02" steps="61"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.28" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.22" steps="386"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.29" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.43" steps="571"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.30" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.86" steps="1219"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.31" expl="precondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="2.08" steps="3008"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.32" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="10"><result status="valid" time="5.29" steps="4622"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.33" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="10.30" steps="6138"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.34" expl="integer overflow" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.33" steps="477"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.35" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.35.0" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="20"><result status="valid" time="3.92" steps="3497"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.35.1" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="20"><result status="valid" time="17.14" steps="9177"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.35.2" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="2.98" steps="4318"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.36" expl="assertion" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.64" steps="516"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.37" expl="loop variant decrease" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.37.0" expl="loop variant decrease" proved="true">
|
|
<proof prover="2" timelimit="10"><result status="valid" time="0.02" steps="83"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.37.1" expl="loop variant decrease" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.03" steps="83"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.38" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.59" steps="525"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.39" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.01" steps="86"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.40" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.40.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2" timelimit="15"><result status="valid" time="0.11" steps="89"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.41" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="decode'vc.41.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.78" steps="1104"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.41.1" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.68" steps="875"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.41.2" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.19" steps="1249"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode'vc.42" expl="integer overflow" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.05" steps="99"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.43" expl="precondition" proved="true">
|
|
<proof prover="2" timelimit="1"><result status="valid" time="0.02" steps="117"/></proof>
|
|
</goal>
|
|
<goal name="decode'vc.44" expl="postcondition" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.59" steps="2484"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="decode_encode'vc" expl="VC for decode_encode" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.09" steps="45"/></proof>
|
|
</goal>
|
|
</theory>
|
|
</file>
|
|
</why3session>
|