• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
        • Syntax-for-tools
        • Atc
        • Language
          • Abstract-syntax
          • Integer-ranges
          • Implementation-environments
          • Dynamic-semantics
            • Exec
            • Exec-arrsub
            • Exec-expr-pure
            • Exec-expr-asg
            • Init-value-to-value
            • Exec-memberp
            • Apconvert-expr-value
              • Exec-address
              • Exec-member
              • Init-scope
              • Exec-unary
              • Exec-fun
              • Exec-block-item
              • Eval-iconst
              • Exec-binary-strict-pure
              • Exec-expr-pure-list
              • Eval-binary-strict-pure
              • Exec-block-item-list
              • Exec-indir
              • Exec-expr-call-or-pure
              • Exec-stmt-while
              • Exec-stmt
              • Exec-ident
              • Eval-cast
              • Exec-cast
              • Eval-unary
              • Exec-const
              • Exec-initer
              • Exec-expr-call-or-asg
              • Eval-const
              • Exec-expr-call
            • Static-semantics
            • Grammar
            • Integer-formats
            • Types
            • Portable-ascii-identifiers
            • Values
            • Integer-operations
            • Computation-states
            • Object-designators
            • Operations
            • Errors
            • Tag-environments
            • Function-environments
            • Character-sets
            • Flexible-array-member-removal
            • Arithmetic-operations
            • Pointer-operations
            • Bytes
            • Keywords
            • Real-operations
            • Array-operations
            • Scalar-operations
            • Structure-operations
          • Representation
          • Transformation-tools
          • Insertion-sort
          • Pack
        • Farray
        • Rp-rewriter
        • Instant-runoff-voting
        • Imp-language
        • Sidekick
        • Leftist-trees
        • Java
        • Taspi
        • Bitcoin
        • Riscv
        • Des
        • Ethereum
        • X86isa
        • Sha-2
        • Yul
        • Zcash
        • Proof-checker-itp13
        • Regex
        • ACL2-programming-language
        • Json
        • Jfkr
        • Equational
        • Cryptography
        • Poseidon
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Dynamic-semantics

    Apconvert-expr-value

    Array-to-pointer conversion [C17:6.3.2.1/3] on expression values.

    Signature
    (apconvert-expr-value eval) → eval1
    Arguments
    eval — Guard (expr-valuep eval).
    Returns
    eval1 — Type (expr-value-resultp eval1).

    Under most circumstances, an array is converted to a pointer to the first element of the array [C17:6.3.2.1/3]; indeed, arrays are used like pointers most of the time.

    This cannot be formalized on values: we need expression values, because we need to know where the array is in storage (i.e. we need to know its object designator), so that we can construct a pointer to it. Non-array expression values are left unchanged. If the array has no object designator, we return an error; this should only happen for arrays with temporary lifetime [C17:6.2.4/8], which are currently not part of our C subset.

    We make a slight approximation for now: instead of returning a pointer to the first element of the array, we return a pointer to the array. This is adequate in our current formalization of our C subset, because of the way we formalize array indexing (e.g. see exec-arrsub); however, we plan to make this, and array indexing, consistent with full C.

    The static counterpart of this is apconvert-type.

    Definitions and Theorems

    Function: apconvert-expr-value

    (defun apconvert-expr-value (eval)
     (declare (xargs :guard (expr-valuep eval)))
     (let ((__function__ 'apconvert-expr-value))
      (declare (ignorable __function__))
      (b* (((expr-value eval) eval))
       (if
        (value-case eval.value :array)
        (if eval.object
          (make-expr-value
               :value (make-value-pointer
                           :core (pointer-valid eval.object)
                           :reftype (value-array->elemtype eval.value))
               :object nil)
         (error (list :array-without-designator (expr-value-fix eval))))
        (expr-value-fix eval)))))

    Theorem: expr-value-resultp-of-apconvert-expr-value

    (defthm expr-value-resultp-of-apconvert-expr-value
      (b* ((eval1 (apconvert-expr-value eval)))
        (expr-value-resultp eval1))
      :rule-classes :rewrite)

    Theorem: apconvert-expr-value-when-not-array

    (defthm apconvert-expr-value-when-not-array
      (implies (not (equal (value-kind (expr-value->value eval))
                           :array))
               (equal (apconvert-expr-value eval)
                      (expr-value-fix eval))))

    Theorem: apconvert-expr-value-of-expr-value-fix-eval

    (defthm apconvert-expr-value-of-expr-value-fix-eval
      (equal (apconvert-expr-value (expr-value-fix eval))
             (apconvert-expr-value eval)))

    Theorem: apconvert-expr-value-expr-value-equiv-congruence-on-eval

    (defthm apconvert-expr-value-expr-value-equiv-congruence-on-eval
      (implies (expr-value-equiv eval eval-equiv)
               (equal (apconvert-expr-value eval)
                      (apconvert-expr-value eval-equiv)))
      :rule-classes :congruence)