Skip to main content

PAtomicU32

vstd::atomic

Struct PAtomicU32 

Source 
pub struct PAtomicU32 { /* private fields */ }

Implementations§

Source§

impl PAtomicU32

Source

pub exec fn from_ptr_store( ptr: *mut u32, value: u32, Tracked(perm): Tracked<&mut PointsTo<u32>>, )

requires
old(perm).ptr() == ptr,
ensures
value == final(perm).value(),
old(perm).ptr() == final(perm).ptr(),
final(perm).is_init(),

Store a value via a raw pointer using atomic store.

This is useful if a user wants to implement lockless algorithm for a struct where elements are linked through pointers. In that case, PointsTo<$value_ty> might be stored in AtomicInvariant.

The specification is similar to raw_ptr::ptr_mut_ref, but the implementation is atomic and so we can mark it as verifier::atomic, and so it can be used in open_atomic_invariant!.

Source

pub exec fn from_ptr_load(ptr: *mut u32, perm: Tracked<&PointsTo<u32>>) -> ret : u32

requires
perm.ptr() == ptr,
perm.is_init(),
ensures
ret == perm.value(),

Create a copy of the value via atomic load.

Source

pub exec fn from_ptr_swap( ptr: *mut u32, Tracked(perm): Tracked<&mut PointsTo<u32>>, v: u32, ) -> ret : u32

requires
ptr == old(perm).ptr(),
old(perm).is_init(),
ensures
final(perm).value() == v,
final(perm).is_init(),
old(perm).value() == ret,
ptr == final(perm).ptr(),

Swap the value via atomic swap.

The swap reads the old value, so the memory must already be initialized; it writes v, so it is initialized on return.

Source§

impl PAtomicU32

Source

pub uninterp spec fn id(&self) -> int

Source

pub const exec fn new(i: u32) -> res : (PAtomicU32, Tracked<PermissionU32>)

ensures
equal(
    res.1@.view(),
    PermissionDataU32 {
        patomic: res.0.id(),
        value: i,
    },
),
Source

pub exec fn load(&self, Tracked(perm): Tracked<&PermissionU32>) -> ret : u32

requires
equal(self.id(), perm.view().patomic),
ensures
equal(perm.view().value, ret),
Source

pub exec fn store(&self, Tracked(perm): Tracked<&mut PermissionU32>, v: u32)

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(final(perm).view().value, v) && equal(self.id(), final(perm).view().patomic),
Source

pub exec fn compare_exchange( &self, Tracked(perm): Tracked<&mut PermissionU32>, current: u32, new: u32, ) -> ret : Result<u32, u32>

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(self.id(), final(perm).view().patomic)
    && match ret {
        Result::Ok(r) => {
            current == old(perm).view().value && equal(final(perm).view().value, new)
                && equal(r, old(perm).view().value)
        }
        Result::Err(r) => {
            current != old(perm).view().value
                && equal(final(perm).view().value, old(perm).view().value)
                && equal(r, old(perm).view().value)
        }
    },
Source

pub exec fn compare_exchange_weak( &self, Tracked(perm): Tracked<&mut PermissionU32>, current: u32, new: u32, ) -> ret : Result<u32, u32>

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(self.id(), final(perm).view().patomic)
    && match ret {
        Result::Ok(r) => {
            current == old(perm).view().value && equal(final(perm).view().value, new)
                && equal(r, old(perm).view().value)
        }
        Result::Err(r) => {
            equal(final(perm).view().value, old(perm).view().value)
                && equal(r, old(perm).view().value)
        }
    },
Source

pub exec fn swap(&self, Tracked(perm): Tracked<&mut PermissionU32>, v: u32) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(final(perm).view().value, v) && equal(old(perm).view().value, ret)
    && equal(self.id(), final(perm).view().patomic),
Source

pub exec fn into_inner(self, Tracked(perm): Tracked<PermissionU32>) -> ret : u32

requires
equal(self.id(), perm.view().patomic),
ensures
equal(perm.view().value, ret),
Source

pub exec fn fetch_add_wrapping( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value as int == u32_specs::wrapping_add(old(perm).view().value, n),
Source

pub exec fn fetch_sub_wrapping( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value as int == u32_specs::wrapping_sub(old(perm).view().value, n),
Source

pub exec fn fetch_add( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
(<u32>::MIN as int) <= old(perm).view().value + n,
old(perm).view().value + n <= (<u32>::MAX as int),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == old(perm).view().value + n,
Source

pub exec fn fetch_sub( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
(<u32>::MIN as int) <= old(perm).view().value - n,
old(perm).view().value - n <= <u32>::MAX as int,
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == old(perm).view().value - n,
Source

pub exec fn fetch_and( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == (old(perm).view().value & n),
Source

pub exec fn fetch_or( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == (old(perm).view().value | n),
Source

pub exec fn fetch_xor( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == (old(perm).view().value ^ n),
Source

pub exec fn fetch_nand( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value == !(old(perm).view().value & n),
Source

pub exec fn fetch_max( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value
    == (if old(perm).view().value > n { old(perm).view().value } else { n }),
Source

pub exec fn fetch_min( &self, Tracked(perm): Tracked<&mut PermissionU32>, n: u32, ) -> ret : u32

requires
equal(self.id(), old(perm).view().patomic),
ensures
equal(old(perm).view().value, ret),
final(perm).view().patomic == old(perm).view().patomic,
final(perm).view().value
    == (if old(perm).view().value < n { old(perm).view().value } else { n }),

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

Source§

exec fn obeys_from_spec() -> bool

Source§

exec fn from_spec(v: T) -> VERUS_SPEC__A

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

Source§

exec fn obeys_into_spec() -> bool

Source§

exec fn into_spec(self) -> T

Source§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

Source§

open spec fn obeys_into_spec() -> bool

{ <U as FromSpec<Self>>::obeys_from_spec() }
Source§

open spec fn into_spec(self) -> U

{ U::from_spec(self) }
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

Source§

exec fn obeys_try_from_spec() -> bool

Source§

exec fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

Source§

exec fn obeys_try_into_spec() -> bool

Source§

exec fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

Source§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

Source§

open spec fn obeys_try_into_spec() -> bool

{ <U as TryFromSpec<Self>>::obeys_try_from_spec() }
Source§

open spec fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>

{ <U as TryFromSpec<Self>>::try_from_spec(self) }
§

impl<A> SpecEq<&A> for A
where A: ?Sized,

§

impl<A> SpecEq<&mut A> for A
where A: ?Sized,

§

impl<A> SpecEq<A> for A
where A: ?Sized,

§

impl<A> SpecEq<Ghost<A>> for A

§

impl<A> SpecEq<Tracked<A>> for A