#define at_entry_1 (P1@entry_1) #define at_crit_1 (P1@crit_1) #define at_entry_2 (P2@entry_2) #define at_crit_2 (P2@crit_2) /* * Formula As Typed: [] ((at_entry_1 || at_entry_2 ) -> <> (at_crit_1 || at_crit_2)) * The Never Claim Below Corresponds * To The Negated Formula !([] ((at_entry_1 || at_entry_2 ) -> <> (at_crit_1 || at_crit_2))) * (formalizing violations of the original) */ never { /* !([] ((at_entry_1 || at_entry_2 ) -> <> (at_crit_1 || at_crit_2))) */ T0_init: if :: (((! ((at_crit_1)) && ! ((at_crit_2)) && (at_entry_1)) || (! ((at_crit_1)) && ! ((at_crit_2)) && (at_entry_2)))) -> goto accept_S3 :: (1) -> goto T0_init fi; accept_S3: if :: (! ((at_crit_1)) && ! ((at_crit_2))) -> goto accept_S3 fi; } #ifdef NOTES Resolution property (Absense of deadlock and live-lock) #endif #ifdef RESULT warning: for p.o. reduction to be valid the never claim must be stutter-invariant (never claims generated from LTL formulae are stutter-invariant) depth 0: Claim reached state 5 (line 88) depth 28: Claim reached state 9 (line 93) depth 32: Claim reached state 9 (line 92) (Spin Version 4.2.7 -- 23 June 2006) + Partial Order Reduction Full statespace search for: never claim + assertion violations + (if within scope of claim) acceptance cycles + (fairness enabled) invalid end states - (disabled by never claim) State-vector 24 byte, depth reached 87, errors: 0 146 states, stored (324 visited) 379 states, matched 703 transitions (= visited+matched) 0 atomic steps hash conflicts: 0 (resolved) Stats on memory usage (in Megabytes): 0.005 equivalent memory usage for states (stored*(State-vector + overhead)) 0.302 actual memory usage for states (unsuccessful compression: 6455.39%) State-vector as stored = 2058 byte + 8 byte overhead 2.097 memory used for hash table (-w19) 0.320 memory used for DFS stack (-m10000) 0.097 memory lost to fragmentation 2.622 total actual memory usage unreached in proctype P1 line 34, "pan.___", state 25, "-end-" (1 of 25 states) unreached in proctype P2 line 60, "pan.___", state 25, "-end-" (1 of 25 states) unreached in proctype :never: line 95, "pan.___", state 11, "-end-" (1 of 11 states) 0.01user 0.02system 0:00.07elapsed 42%CPU (0avgtext+0avgdata 0maxresident)k 0inputs+0outputs (121major+1204minor)pagefaults 0swaps #endif