• Top
  • Documentation
  • Books
  • Boolean-reasoning
  • Projects
  • Debugging
  • Community
  • Std
  • Proof-automation
  • Macro-libraries
  • ACL2
  • Interfacing-tools
  • Hardware-verification
  • Software-verification
    • Kestrel-books
      • Crypto-hdwallet
      • Apt
      • Error-checking
      • Fty-extensions
      • Isar
      • Kestrel-utilities
      • Set
      • Soft
      • C
      • Bv
      • Imp-language
      • Event-macros
      • Java
      • Riscv
        • Specification
          • Semantics
          • Features
          • Instructions
            • Instr
            • Op-funct
            • Op-32-funct
            • Op-imm-funct
            • Load-funct
            • Instr-validp
            • Branch-funct
            • Op-imms-funct
            • Store-funct
            • Op-imms-32-funct
            • Instr-option
            • Op-imm-32-funct
          • Encoding
          • States
          • Reads-over-writes
          • Semantics-equivalences
          • Decoding
          • Execution
        • Executable
        • Specialized
        • Optimized
      • Bitcoin
      • Ethereum
      • Yul
      • Zcash
      • ACL2-programming-language
      • Prime-fields
      • Json
      • Syntheto
      • File-io-light
      • Cryptography
      • Number-theory
      • Lists-light
      • Axe
      • Builtins
      • Solidity
      • Helpers
      • Htclient
      • Typed-lists-light
      • Arithmetic-light
    • X86isa
    • Axe
    • Execloader
  • Math
  • Testing-utilities

• Instructions

Instr-validp

Check if an instruction is valid with respect to given features.

Signature

(instr-validp instr feat) → yes/no

Arguments

instr — Guard (instrp instr).

feat — Guard (featp feat).

Returns

yes/no — Type (booleanp yes/no).

Certain instructions are only valid in RV32I/RV32E or RV64I/RV64E.

In RV32E/RV64E, register indices are only 4 bits.

Certain instructions are only valid with the M extension.

Definitions and Theorems

Function: instr-validp

(defun instr-validp (instr feat)
 (declare (xargs :guard (and (instrp instr) (featp feat))))
 (let ((__function__ 'instr-validp))
  (declare (ignorable __function__))
  (b* (((feat feat) feat))
   (instr-case
        instr
        :op-imm (implies (feat-embedp feat)
                         (and (ubyte4p instr.rd)
                              (ubyte4p instr.rs1)))
        :op-imms32 (and (feat-32p feat)
                        (implies (feat-embedp feat)
                                 (and (ubyte4p instr.rd)
                                      (ubyte4p instr.rs1))))
        :op-imms64 (and (feat-64p feat)
                        (implies (feat-embedp feat)
                                 (and (ubyte4p instr.rd)
                                      (ubyte4p instr.rs1))))
        :op-imm-32 (and (feat-64p feat)
                        (implies (feat-embedp feat)
                                 (and (ubyte4p instr.rd)
                                      (ubyte4p instr.rs1))))
        :op-imms-32 (and (feat-64p feat)
                         (implies (feat-embedp feat)
                                  (and (ubyte4p instr.rd)
                                       (ubyte4p instr.rs1))))
        :lui (implies (feat-embedp feat)
                      (ubyte4p instr.rd))
        :auipc (implies (feat-embedp feat)
                        (ubyte4p instr.rd))
        :op (and (implies (feat-embedp feat)
                          (and (ubyte4p instr.rd)
                               (ubyte4p instr.rs1)
                               (ubyte4p instr.rs2)))
                 (implies (member-eq (op-funct-kind instr.funct)
                                     '(:mul :mulh
                                            :mulhu :mulhsu
                                            :div :divu
                                            :rem :remu))
                          (feat-mp feat)))
        :op-32
        (and (feat-64p feat)
             (implies (feat-embedp feat)
                      (and (ubyte4p instr.rd)
                           (ubyte4p instr.rs1)
                           (ubyte4p instr.rs2)))
             (implies (member-eq (op-32-funct-kind instr.funct)
                                 '(:mulw :divw :divuw :remw :remuw))
                      (feat-mp feat)))
        :jal (implies (feat-embedp feat)
                      (ubyte4p instr.rd))
        :jalr (implies (feat-embedp feat)
                       (and (ubyte4p instr.rd)
                            (ubyte4p instr.rs1)))
        :branch (implies (feat-embedp feat)
                         (and (ubyte4p instr.rs1)
                              (ubyte4p instr.rs2)))
        :load (and (load-funct-case instr.funct
                                    :lb t
                                    :lbu t
                                    :lh t
                                    :lhu t
                                    :lw t
                                    :lwu (feat-64p feat)
                                    :ld (feat-64p feat))
                   (implies (feat-embedp feat)
                            (and (ubyte4p instr.rd)
                                 (ubyte4p instr.rs1))))
        :store (and (store-funct-case instr.funct
                                      :sb t
                                      :sh t
                                      :sw t
                                      :sd (feat-64p feat))
                    (implies (feat-embedp feat)
                             (and (ubyte4p instr.rs1)
                                  (ubyte4p instr.rs2))))))))

Theorem: booleanp-of-instr-validp

(defthm booleanp-of-instr-validp
  (b* ((yes/no (instr-validp instr feat)))
    (booleanp yes/no))
  :rule-classes :rewrite)

Theorem: instr-validp-of-instr-fix-instr

(defthm instr-validp-of-instr-fix-instr
  (equal (instr-validp (instr-fix instr) feat)
         (instr-validp instr feat)))

Theorem: instr-validp-instr-equiv-congruence-on-instr

(defthm instr-validp-instr-equiv-congruence-on-instr
  (implies (instr-equiv instr instr-equiv)
           (equal (instr-validp instr feat)
                  (instr-validp instr-equiv feat)))
  :rule-classes :congruence)

Theorem: instr-validp-of-feat-fix-feat

(defthm instr-validp-of-feat-fix-feat
  (equal (instr-validp instr (feat-fix feat))
         (instr-validp instr feat)))

Theorem: instr-validp-feat-equiv-congruence-on-feat

(defthm instr-validp-feat-equiv-congruence-on-feat
  (implies (feat-equiv feat feat-equiv)
           (equal (instr-validp instr feat)
                  (instr-validp instr feat-equiv)))
  :rule-classes :congruence)