• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Riscv
        • Semantics
          • Exec-bgeu
          • Exec-bltu
          • Exec-blt
          • Exec-bge
          • Exec-jalr
          • Exec-bne
          • Exec-beq
          • Exec-sra
          • Exec-op-imms-32
          • Exec-srl
          • Exec-branch
          • Exec-sll
          • Exec-op-imms64
          • Exec-op-imms32
          • Exec-op-imm-32
          • Exec-op-32
          • Exec-op
          • Exec-srlw
          • Exec-srliw
          • Exec-sraw
          • Exec-sraiw
          • Exec-sltiu
          • Exec-remuw
          • Exec-op-imm
          • Exec-jal
          • Exec-store
          • Exec-srli64
          • Exec-srli32
          • Exec-srai64
          • Exec-srai32
          • Exec-sllw
          • Exec-remw
          • Exec-load
          • Exec-divuw
          • Exec-addiw
          • Exec-xori
          • Exec-slti
          • Exec-slliw
          • Exec-remu
          • Exec-rem
          • Exec-divw
          • Exec-sw
          • Exec-slli64
          • Exec-slli32
          • Exec-ori
          • Exec-mulhsu
          • Exec-divu
          • Exec-andi
          • Exec-addi
          • Exec-sltu
          • Exec-slt
          • Exec-mulhu
            • Exec-div
            • Exec-auipc
            • Exec-addw
            • Exec-xor
            • Exec-mulw
            • Exec-mulh
            • Exec-lwu
            • Exec-and
            • Exec-subw
            • Exec-sub
            • Exec-sh
            • Exec-sd
            • Exec-sb
            • Exec-or
            • Exec-lhu
            • Exec-lh
            • Exec-ld
            • Exec-lbu
            • Exec-lb
            • Exec-mul
            • Exec-add
            • Exec-lw
            • Exec-lui
            • Eff-addr
            • Exec-instr
          • Instructions
          • States
          • Decoding
          • Encoding
          • Features
          • Rv32im
          • Rv64im
          • Execution
        • Instant-runoff-voting
        • Imp-language
        • Sidekick
        • Leftist-trees
        • Java
        • Taspi
        • Bitcoin
        • Des
        • Ethereum
        • X86isa
        • Sha-2
        • Yul
        • Zcash
        • Proof-checker-itp13
        • Regex
        • ACL2-programming-language
        • Json
        • Jfkr
        • Equational
        • Cryptography
        • Poseidon
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Community
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Semantics

    Exec-mulhu

    Semanics of the MULHU instruction [ISA:13.1].

    Signature
    (exec-mulhu rd rs1 rs2 stat feat) → new-stat
    Arguments
    rd — Guard (ubyte5p rd).
    rs1 — Guard (ubyte5p rs1).
    rs2 — Guard (ubyte5p rs2).
    stat — Guard (statp stat).
    feat — Guard (featp feat).
    Returns
    new-stat — Type (statp new-stat).

    We read two unsigned XLEN-bit integers from rs1 and rs2. We multiply them, we shift the product right by XLEN bits, and we write the result to rd. We increment the program counter.

    Definitions and Theorems

    Function: exec-mulhu

    (defun exec-mulhu (rd rs1 rs2 stat feat)
      (declare (xargs :guard (and (ubyte5p rd)
                                  (ubyte5p rs1)
                                  (ubyte5p rs2)
                                  (statp stat)
                                  (featp feat))))
      (declare (xargs :guard (stat-validp stat feat)))
      (let ((__function__ 'exec-mulhu))
        (declare (ignorable __function__))
        (b* ((rs1-operand (read-xreg-unsigned (ubyte5-fix rs1)
                                              stat feat))
             (rs2-operand (read-xreg-unsigned (ubyte5-fix rs2)
                                              stat feat))
             (product (* rs1-operand rs2-operand))
             (result (ash product (feat->xlen feat)))
             (stat (write-xreg (ubyte5-fix rd)
                               result stat feat))
             (stat (inc4-pc stat feat)))
          stat)))

    Theorem: statp-of-exec-mulhu

    (defthm statp-of-exec-mulhu
      (b* ((new-stat (exec-mulhu rd rs1 rs2 stat feat)))
        (statp new-stat))
      :rule-classes :rewrite)

    Theorem: stat-validp-of-exec-mulhu

    (defthm stat-validp-of-exec-mulhu
      (implies (stat-validp stat feat)
               (b* ((?new-stat (exec-mulhu rd rs1 rs2 stat feat)))
                 (stat-validp new-stat feat))))

    Theorem: exec-mulhu-of-ubyte5-fix-rd

    (defthm exec-mulhu-of-ubyte5-fix-rd
      (equal (exec-mulhu (ubyte5-fix rd)
                         rs1 rs2 stat feat)
             (exec-mulhu rd rs1 rs2 stat feat)))

    Theorem: exec-mulhu-ubyte5-equiv-congruence-on-rd

    (defthm exec-mulhu-ubyte5-equiv-congruence-on-rd
      (implies (ubyte5-equiv rd rd-equiv)
               (equal (exec-mulhu rd rs1 rs2 stat feat)
                      (exec-mulhu rd-equiv rs1 rs2 stat feat)))
      :rule-classes :congruence)

    Theorem: exec-mulhu-of-ubyte5-fix-rs1

    (defthm exec-mulhu-of-ubyte5-fix-rs1
      (equal (exec-mulhu rd (ubyte5-fix rs1)
                         rs2 stat feat)
             (exec-mulhu rd rs1 rs2 stat feat)))

    Theorem: exec-mulhu-ubyte5-equiv-congruence-on-rs1

    (defthm exec-mulhu-ubyte5-equiv-congruence-on-rs1
      (implies (ubyte5-equiv rs1 rs1-equiv)
               (equal (exec-mulhu rd rs1 rs2 stat feat)
                      (exec-mulhu rd rs1-equiv rs2 stat feat)))
      :rule-classes :congruence)

    Theorem: exec-mulhu-of-ubyte5-fix-rs2

    (defthm exec-mulhu-of-ubyte5-fix-rs2
      (equal (exec-mulhu rd rs1 (ubyte5-fix rs2)
                         stat feat)
             (exec-mulhu rd rs1 rs2 stat feat)))

    Theorem: exec-mulhu-ubyte5-equiv-congruence-on-rs2

    (defthm exec-mulhu-ubyte5-equiv-congruence-on-rs2
      (implies (ubyte5-equiv rs2 rs2-equiv)
               (equal (exec-mulhu rd rs1 rs2 stat feat)
                      (exec-mulhu rd rs1 rs2-equiv stat feat)))
      :rule-classes :congruence)

    Theorem: exec-mulhu-of-stat-fix-stat

    (defthm exec-mulhu-of-stat-fix-stat
      (equal (exec-mulhu rd rs1 rs2 (stat-fix stat)
                         feat)
             (exec-mulhu rd rs1 rs2 stat feat)))

    Theorem: exec-mulhu-stat-equiv-congruence-on-stat

    (defthm exec-mulhu-stat-equiv-congruence-on-stat
      (implies (stat-equiv stat stat-equiv)
               (equal (exec-mulhu rd rs1 rs2 stat feat)
                      (exec-mulhu rd rs1 rs2 stat-equiv feat)))
      :rule-classes :congruence)

    Theorem: exec-mulhu-of-feat-fix-feat

    (defthm exec-mulhu-of-feat-fix-feat
      (equal (exec-mulhu rd rs1 rs2 stat (feat-fix feat))
             (exec-mulhu rd rs1 rs2 stat feat)))

    Theorem: exec-mulhu-feat-equiv-congruence-on-feat

    (defthm exec-mulhu-feat-equiv-congruence-on-feat
      (implies (feat-equiv feat feat-equiv)
               (equal (exec-mulhu rd rs1 rs2 stat feat)
                      (exec-mulhu rd rs1 rs2 stat feat-equiv)))
      :rule-classes :congruence)