|
ESBMC
Efficient SMT-based Context-Bounded Model Checker
|
#include <goto-programs/goto_functions.h>#include <util/symtab/namespace.h>#include <util/config/options.h>Go to the source code of this file.
Functions | |
| void | goto_termination (goto_functionst &goto_functions, optionst &options, const namespacet &ns) |
| Reduce non-termination to a reachability safety property. | |
| void goto_termination | ( | goto_functionst & | goto_functions, |
| optionst & | options, | ||
| const namespacet & | ns ) |
Reduce non-termination to a reachability safety property.
Two transformations:
Reduction: the program does NOT terminate iff every marker is unreachable in the inductive step. UNSAT at the marker proves non-termination; SAT in the base case refutes it.
Soundness gate: if any loop's modified-var set is empty, k-induction's make_nondet_assign inserts no havoc for it (e.g. loops that only write through dereferenced pointers, *p = ...). In that case IS would run the loop concretely and a "marker unreachable within k unwindings" UNSAT is no longer a real non-termination witness. The pass sets options' "disable-inductive-step" so the BMC driver treats IS as inconclusive for the program.