Global Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (7134 entries)
Notation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (161 entries)
Module Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (60 entries)
Variable Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (34 entries)
Library Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (179 entries)
Lemma Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (4479 entries)
Axiom Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (41 entries)
Constructor Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (447 entries)
Projection Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (7 entries)
Inductive Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (106 entries)
Section Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (10 entries)
Abbreviation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (24 entries)
Definition Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (1583 entries)
Record Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (3 entries)

Global Index

A

Aabsdata [constructor, in assertion]
Aabsdata_precise [lemma, in inv_prop]
Aarray [definition, in BaseAsrtDef]
Aarray_rm [definition, in BaseAsrtDef]
Aarray_vl_len_eq' [lemma, in common]
Aarray_vl_len_eq [lemma, in common]
Aarray_osabst_emp [lemma, in inv_prop]
Aarray_precise [lemma, in inv_prop]
Aarray' [definition, in BaseAsrtDef]
Aarray'_osabst_emp [lemma, in inv_prop]
Aarray'_precise [lemma, in inv_prop]
absconseq_rule_sound_aux [lemma, in conseqsound]
abscsq_rule_sound [lemma, in conseqsound]
abscsq_rule [constructor, in inferules]
abscsq_rule'' [lemma, in derivedrules]
abscsq_rule' [lemma, in derivedrules]
absdata [inductive, in language]
absdataid [inductive, in language]
absdataidspec [module, in language]
absdataidspec.A [definition, in language]
absdataidspec.beq [definition, in language]
absdataidspec.beq_false_neq [lemma, in language]
absdataidspec.beq_true_eq [lemma, in language]
absdataidspec.blt [definition, in language]
absdataidspec.blt_beq_dec [lemma, in language]
absdataidspec.blt_asym [lemma, in language]
absdataidspec.blt_irrefl [lemma, in language]
absdataidspec.blt_trans [lemma, in language]
absdataidspec.eq_beq_true [lemma, in language]
absdataidspec.neq_beq_false [lemma, in language]
absdataid_lt [definition, in language]
absdataid_eq [definition, in language]
absdatastru [module, in language]
absdatastru.B [definition, in language]
absdata_elim'' [lemma, in seplog_lemmas]
absdata_elim' [lemma, in seplog_lemmas]
absdata_elim [lemma, in seplog_lemmas]
absecb [module, in language]
absecblist [constructor, in language]
absecblsid [constructor, in language]
absecb.B [definition, in language]
absexpr [definition, in language]
absimp [definition, in inferules]
absimp_qcre_succ_return [lemma, in OSQCreatePure]
absimp_qcre_err_return [lemma, in OSQCreatePure]
absimp_imp [lemma, in conseqsound]
absimp_toy [lemma, in oscore_common]
absimp_timetick [lemma, in oscore_common]
absimp_sem_post_ex_wt_succ_return [lemma, in sem_absop_rule]
absimp_sem_post_put_sem_return [lemma, in sem_absop_rule]
absimp_sem_post_ovf_err_return [lemma, in sem_absop_rule]
absimp_sem_post_wrong_type_return [lemma, in sem_absop_rule]
absimp_sem_post_p_not_legal_return [lemma, in sem_absop_rule]
absimp_sem_post_null_return [lemma, in sem_absop_rule]
absimp_ex_intro [lemma, in common]
absimp_pre_post_compose [lemma, in common]
absimp_conseq_post [lemma, in common]
absimp_conseq_pre [lemma, in common]
absimp_pre_compose [lemma, in common]
absimp_mbox_create_succ_return [lemma, in MboxCreatePure]
absimp_mbox_create_err_return [lemma, in MboxCreatePure]
absimp' [definition, in inferules]
absimp'_imp_absimp [lemma, in cancel_absdata]
absimp'' [definition, in cancel_absdata]
absinfer [inductive, in inferules]
absinfersound [lemma, in conseqsound]
absinfer_mutexpost_return_nowt_succ [lemma, in OSMutex_common]
absinfer_mutexpost_nowt_no_return_prio_succ [lemma, in OSMutex_common]
absinfer_mutexpost_exwt_no_return_prio_succ [lemma, in OSMutex_common]
absinfer_mutexpost_noreturn_exwt_succ [lemma, in OSMutex_common]
absinfer_mutexpost_return_exwt_succ [lemma, in OSMutex_common]
absinfer_mutex_pend_pip_is_not_hold [lemma, in OSMutex_common]
absinfer_mutex_pend_cur_prio_eql_mprio [lemma, in OSMutex_common]
absinfer_mutex_pend_ptcb_is_not_rdy [lemma, in OSMutex_common]
absinfer_mutex_pend_ptcb_is_idle [lemma, in OSMutex_common]
absinfer_mutex_pend_ptcb_is_cur [lemma, in OSMutex_common]
absinfer_mutex_post_original_not_holder_err_return [lemma, in OSMutex_common]
absinfer_mutex_post_wl_highest_prio_err_return [lemma, in OSMutex_common]
absinfer_mutex_post_prio_err_return [lemma, in OSMutex_common]
absinfer_mutex_post_no_owner_return [lemma, in OSMutex_common]
absinfer_mutex_post_wrong_type_return [lemma, in OSMutex_common]
absinfer_mutex_post_p_not_legal_return [lemma, in OSMutex_common]
absinfer_mutex_post_null_return [lemma, in OSMutex_common]
absinfer_mutex_pend_msg_not_null_return [lemma, in OSMutex_common]
absinfer_mutex_pend_not_ready_return [lemma, in OSMutex_common]
absinfer_mutex_pend_from_idle_return [lemma, in OSMutex_common]
absinfer_mutex_pend_wrong_type_return [lemma, in OSMutex_common]
absinfer_mbox_pend_p_not_legal_return [lemma, in OSMutex_common]
absinfer_mutex_pend_null_return [lemma, in OSMutex_common]
absinfer_mutex_pend_available_return [lemma, in OSMutex_common]
absinfer_mutex_pend_cur_prio_higher [lemma, in OSMutex_common]
absinfer_assume [constructor, in inferules]
absinfer_choice2 [constructor, in inferules]
absinfer_choice1 [constructor, in inferules]
absinfer_seq_end [constructor, in inferules]
absinfer_seq [constructor, in inferules]
absinfer_prim [constructor, in inferules]
absinfer_frm [constructor, in inferules]
absinfer_ex [constructor, in inferules]
absinfer_conseq [constructor, in inferules]
absinfer_disj [constructor, in inferules]
absinfer_trans [constructor, in inferules]
absinfer_eq [constructor, in inferules]
absinfer_tri_choice1 [lemma, in laby]
absinfer_tri_choice2 [lemma, in laby]
absinfer_sem_pend_to_succ [lemma, in sem_absop_rule]
absinfer_sem_pend_to_timeout [lemma, in sem_absop_rule]
absinfer_sem_pend_block [lemma, in sem_absop_rule]
absinfer_sem_pend_msg_not_null_return [lemma, in sem_absop_rule]
absinfer_sem_pend_inst_get_return [lemma, in sem_absop_rule]
absinfer_sem_pend_not_ready_return [lemma, in sem_absop_rule]
absinfer_sem_pend_from_idle_return [lemma, in sem_absop_rule]
absinfer_sem_pend_wrong_type_return [lemma, in sem_absop_rule]
absinfer_sem_pend_p_not_legal_return [lemma, in sem_absop_rule]
absinfer_sem_pend_null_return [lemma, in sem_absop_rule]
absinfer_mutex_pend_lift_is_rdy_block [lemma, in OSMutexPendPure1]
absinfer_tri_choice1 [lemma, in lab]
absinfer_tri_choice2 [lemma, in lab]
absinfer_conseq_pre [lemma, in OSQAcceptPure]
absinfer_qdel_err4_return [lemma, in OSQDelPure]
absinfer_qdel_err3_return [lemma, in OSQDelPure]
absinfer_qdel_succ_return [lemma, in OSQDelPure]
absinfer_qdel_err2_return [lemma, in OSQDelPure]
absinfer_qdel_err1_return [lemma, in OSQDelPure]
absinfer_mbox_post_full_return [lemma, in Mbox_common]
absinfer_mbox_post_wrong_type_return [lemma, in Mbox_common]
absinfer_mbox_post_p_not_legal_return [lemma, in Mbox_common]
absinfer_mbox_post_msg_null_return [lemma, in Mbox_common]
absinfer_mbox_post_null_return [lemma, in Mbox_common]
absinfer_mbox_post_put_mail_return [lemma, in Mbox_common]
absinfer_mbox_post_exwt_succ [lemma, in Mbox_common]
absinfer_mbox_pend_to_return [lemma, in Mbox_common]
absinfer_mbox_pend_block_get_return [lemma, in Mbox_common]
absinfer_mbox_pend_block [lemma, in Mbox_common]
absinfer_mbox_pend_inst_get_return [lemma, in Mbox_common]
absinfer_mbox_pend_not_ready_return [lemma, in Mbox_common]
absinfer_mbox_pend_from_idle_return [lemma, in Mbox_common]
absinfer_mbox_pend_wrong_type_return [lemma, in Mbox_common]
absinfer_mbox_pend_p_not_legal_return [lemma, in Mbox_common]
absinfer_mbox_pend_null_return [lemma, in Mbox_common]
absinfer_mbox_del_succ_return [lemma, in Mbox_common]
absinfer_mbox_del_task_wt_return [lemma, in Mbox_common]
absinfer_mbox_del_wrong_type_return [lemma, in Mbox_common]
absinfer_mbox_del_p_not_legal_return [lemma, in Mbox_common]
absinfer_mbox_del_null_return [lemma, in Mbox_common]
absinfer_mbox_acc_succ_return [lemma, in Mbox_common]
absinfer_mbox_acc_err_return [lemma, in Mbox_common]
absmbox [constructor, in language]
absmbox_ptr_wt_nil [lemma, in Mbox_common]
absmod_disj_eqdom_merge [lemma, in asrtLib]
absmsgq [constructor, in language]
absmsgq [module, in language]
absmsgq.B [definition, in language]
absmutexsem [constructor, in language]
absop [definition, in assertion]
absop [library]
absopx [axiom, in tst_prop]
absop_emp_asrt [lemma, in asrtLib]
absop_aux2 [lemma, in asrtLib]
absop_aux [lemma, in asrtLib]
absop_rules [library]
AbsOsEmpAsrt [definition, in assertion]
AbsOsEmpAsrt_prop [lemma, in asrtLib]
abssem [constructor, in language]
abssem [module, in language]
abssem.B [definition, in language]
abstcb [module, in language]
abstcblist [constructor, in language]
abstcblsid [constructor, in language]
abstcb.B [definition, in language]
abst_get_merge [lemma, in ruleLib]
abst_disj_get [lemma, in progtaskstepLib]
abst_set_get_neq [lemma, in progtaskstepLib]
abst_join_join_merge_ex [lemma, in progtaskstepLib]
abst_set_get_neq [lemma, in lemmasfortoptheo]
abst_get_set [lemma, in lemmasfortoptheo]
abst_get_set_eqdom [lemma, in absop_rules]
abst_join_disj_join [lemma, in tst_prop]
abst_join_merge_merge_eq [lemma, in tst_prop]
abst_join_join_disj_mergeeq [lemma, in tst_prop]
abst_join_disj_disj [lemma, in tst_prop]
abst_disj_join_disjmerge' [lemma, in tst_prop]
abst_disj_join_mergeeq [lemma, in tst_prop]
abst_disj_join_disjmerge [lemma, in tst_prop]
abst_join_disj_disj_join [lemma, in tst_prop]
abst_join_join_merge_eq' [lemma, in tst_prop]
abst_merge_move [lemma, in tst_prop]
abst_disj_trans [lemma, in tst_prop]
abst_merge_ass [lemma, in tst_prop]
abst_merge_com [lemma, in tst_prop]
abst_disj_mergel [lemma, in tst_prop]
abst_disj_sym [lemma, in tst_prop]
abst_merge_disj [lemma, in tst_prop]
abst_disj_merge_trans' [lemma, in tst_prop]
abst_disj_merge_set_eqq [lemma, in common]
abst_set_get_neq'' [lemma, in cancel_absdata]
abst_disj_merge_set_eq' [lemma, in cancel_absdata]
abst_disj_merge_set_eq [lemma, in cancel_absdata]
abst_get_set_disj [lemma, in cancel_absdata]
abst_disj_merge_eq_eq [lemma, in PIF_aux]
Abs_join_eq [lemma, in asrtLib]
abs_disj_get_merge [lemma, in mathlib]
abtcblsid [abbreviation, in auxdef]
abtcblsid [abbreviation, in absop]
Aconj [constructor, in assertion]
aconj_aisfalse_rule [lemma, in hoare_lemmas]
aconj_aisture_rule [lemma, in hoare_lemmas]
aconj_2aemp_intro [lemma, in seplog_lemmas]
aconj_2aemp_elim [lemma, in seplog_lemmas]
aconj_r_apure_intro [lemma, in seplog_lemmas]
aconj_r_astar_l_apure_intro [lemma, in seplog_lemmas]
aconj_l_apure_intro [lemma, in seplog_lemmas]
aconj_l_astar_l_apure_intro [lemma, in seplog_lemmas]
aconj_r_apure_elim [lemma, in seplog_lemmas]
aconj_r_astar_l_apure_elim [lemma, in seplog_lemmas]
aconj_l_apure_elim [lemma, in seplog_lemmas]
aconj_l_astar_l_apure_elim [lemma, in seplog_lemmas]
aconj_intro [lemma, in seplog_lemmas]
aconj_elim [lemma, in seplog_lemmas]
aconj_l_aexists_elim [lemma, in seplog_lemmas]
aconj_r_aexists_elim [lemma, in seplog_lemmas]
aconj_l_aexists_intro [lemma, in seplog_lemmas]
aconj_r_aexists_intro [lemma, in seplog_lemmas]
aconj_mono [lemma, in seplog_lemmas]
aconj_swap_r [lemma, in sem_lab]
aconj_swap_l [lemma, in sem_lab]
aconj_swap [lemma, in sem_lab]
acpt_intlemma6 [lemma, in OSMutex_common]
acpt_intlemma12 [lemma, in OSMutex_common]
acpt_intlemma14 [lemma, in OSMutex_common]
acpt_intlemma15 [lemma, in OSMutex_common]
acpt_intlemma5 [lemma, in OSMutex_common]
acpt_intlemma4 [lemma, in OSMutex_common]
acpt_intlemma10 [lemma, in OSMutex_common]
acpt_intlemma9 [lemma, in OSMutex_common]
acpt_intlemma7 [lemma, in OSMutex_common]
acpt_intlemma3 [lemma, in OSMutex_common]
acpt_intlemma2 [lemma, in OSMutex_common]
acpt_intlemma1 [lemma, in OSMutex_common]
acpt_int_lemma0 [lemma, in OSMutex_common]
acpt_int_lemma00 [lemma, in OSMutex_common]
acpt_intlemma8 [lemma, in OSMutex_common]
Acs [constructor, in assertion]
acs_elim [lemma, in seplog_lemmas]
acs_intro [lemma, in seplog_lemmas]
add [definition, in val]
addcont_same_remove [lemma, in contLib]
AddKsToTail [definition, in opsem]
AddKsToTail_kstop [lemma, in progtaskstepLib]
addr [definition, in memdata]
addrlist [definition, in language]
addrof_rv_to_lv [lemma, in hoare_assign]
addrof_gvar_rv [lemma, in symbolic_execution]
addrof_array_elem_rv [lemma, in symbolic_execution]
addrof_lvar_rv [lemma, in symbolic_execution]
addrof_deref_rv [lemma, in symbolic_execution]
addrspec [module, in memory]
addrspec.A [definition, in memory]
addrspec.B [definition, in memory]
addrspec.beq [definition, in memory]
addrspec.beq_false_neq [lemma, in memory]
addrspec.beq_true_eq [lemma, in memory]
addrspec.blt [definition, in memory]
addrspec.blt_beq_dec [lemma, in memory]
addrspec.blt_asym [lemma, in memory]
addrspec.blt_irrefl [lemma, in memory]
addrspec.blt_trans [lemma, in memory]
addrspec.eq_beq_true [lemma, in memory]
addrspec.neq_beq_false [lemma, in memory]
addrtypespec [module, in memory]
addrtypespec.B [definition, in memory]
addrval [definition, in memdata]
addrval_to_addr [definition, in opsem]
addrval_a [definition, in PIF_aux]
addr_eq_dec [lemma, in memory]
addr_to_addrval [definition, in opsem]
addstmts_same_remove [lemma, in contLib]
addstmts_eq_addcont [lemma, in contLib]
addstmts_not_eqkstop [lemma, in asrtLib]
AddStmtToKs [definition, in opsem]
addstmt_kret_exist [lemma, in contLib]
addtail_length_eq [lemma, in tst_prop]
add_stmt_not_kstop [lemma, in contLib]
add_a_isr_is_prop [lemma, in common]
add_option_first [definition, in InternalFunSpec]
Adisj [constructor, in assertion]
adisj_astar_elim_r [lemma, in ruleLib]
adisj_astar_elim_l [lemma, in ruleLib]
adisj_intro [lemma, in seplog_lemmas]
adisj_elim [lemma, in seplog_lemmas]
adisj_l_aexists_elim [lemma, in seplog_lemmas]
adisj_r_aexists_elim [lemma, in seplog_lemmas]
adisj_l_aexists_intro [lemma, in seplog_lemmas]
adisj_r_aexists_intro [lemma, in seplog_lemmas]
adisj_mono [lemma, in seplog_lemmas]
adomlenv_elim [lemma, in seplog_lemmas]
adomlenv_intro [lemma, in seplog_lemmas]
AECBList [definition, in OSQInvDef]
AECBList_precise [lemma, in inv_prop]
AECBList_fold [lemma, in sem_lab]
Aemp [constructor, in assertion]
aemp_isr_elim [lemma, in hoare_tactics]
aemp_isr_is [definition, in inv_prop]
AEventData [definition, in OSQInvDef]
AEventData_osabst_emp [lemma, in inv_prop]
AEventData_precise [lemma, in inv_prop]
AEventNode [definition, in OSQInvDef]
AEventNode_vnull_false [lemma, in OSEventRemovePure]
aeventnode_evsllseg_get_neq' [lemma, in common]
aeventnode_evsllseg_get_neq [lemma, in common]
AEventNode_dup_false [lemma, in common]
AEventNode_osabst_emp [lemma, in inv_prop]
AEventNode_osevent_eq [lemma, in inv_prop]
AEventNode_precise [lemma, in inv_prop]
AEventNode_fold [lemma, in sem_lab]
Aexists [constructor, in assertion]
aexists_prop [lemma, in seplog_lemmas]
aexists_intro [lemma, in seplog_lemmas]
aexists_elim [lemma, in seplog_lemmas]
Afalse [constructor, in assertion]
Agenv [constructor, in assertion]
Agvarenv [constructor, in assertion]
Agvarenv_cancel [lemma, in hoare_lemmas]
agvarenv_elim [lemma, in seplog_lemmas]
agvarenv_intro [lemma, in seplog_lemmas]
Agvarenv' [definition, in assertion]
Agvarmapsto [definition, in assertion]
AGVars [definition, in OSTCBInvDef]
AGVars_precise [lemma, in inv_prop]
AHprio [constructor, in assertion]
AHprio_starinv_isr_atoy_inv_false [lemma, in hoare_tactics]
Aie [constructor, in assertion]
aie_elim [lemma, in seplog_lemmas]
aie_intro [lemma, in seplog_lemmas]
Ais [constructor, in assertion]
Aisfalse [constructor, in assertion]
aisfalse_prop_ptr [lemma, in hoare_lemmas]
Aisr [constructor, in assertion]
Aisrhid [definition, in auxdef]
aisr_elim [lemma, in seplog_lemmas]
aisr_intro [lemma, in seplog_lemmas]
Aistrue [constructor, in assertion]
aistrue_oand [lemma, in OSEventRemovePure]
ais_elim [lemma, in seplog_lemmas]
ais_intro [lemma, in seplog_lemmas]
align [definition, in Coqlib]
align_divides [lemma, in Coqlib]
align_le [lemma, in Coqlib]
alloc [definition, in memory]
allocb [definition, in memory]
allocb_store_mem_ex [lemma, in memory]
allocb_storebytes_mem_ex [lemma, in memory]
allocb_get_none [lemma, in memory]
allocb_get_some [lemma, in memory]
allocb_storebytes_some [lemma, in lmachLib]
allocb_nindom [lemma, in lmachLib]
allocb_storebytes_memjoin [lemma, in lmachLib]
allocb_emp_get_none [lemma, in lmachLib]
allocb_minus [lemma, in tst_prop]
allocsteop_imply_isalloc [lemma, in loststepLib]
allocstep [definition, in loststepLib]
allocstepn_exist [lemma, in loststepLib]
allocstep_exist [lemma, in loststepLib]
alloc_stepn_msim_hold [lemma, in ruleLib]
alloc_step_msim_hold [lemma, in ruleLib]
alloc_stepn_msim_hold [lemma, in funsim]
alloc_step_msim_hold [lemma, in funsim]
alloc_false [lemma, in memory]
alloc_store_exist_mem_env [lemma, in lmachLib]
alloc_exist_mem_env [lemma, in lmachLib]
alloc_exist_ptomvallist [lemma, in lmachLib]
alloc_empmem_mapstoval [lemma, in lmachLib]
alloc_locality [lemma, in progtaskstepLib]
alloc_trans [lemma, in progtaskstepLib]
alloc_v_step_asrt' [lemma, in tst_prop]
alloc_step_asrt [lemma, in tst_prop]
alloc_le_sat [lemma, in tst_prop]
alloc_store_sat [lemma, in tst_prop]
alloc_sat [lemma, in tst_prop]
alloc_minus_le [lemma, in tst_prop]
alloc_minus_mem [lemma, in tst_prop]
alloc_lemma [lemma, in asrtLib]
alloc_lemma_aux [lemma, in asrtLib]
alloc_notabortm [lemma, in asrtLib]
alloc_inv_prev [lemma, in asrtLib]
alloc_locality [lemma, in loststepLib]
alloc_locality_pre2 [lemma, in loststepLib]
alloc_locality_pre1 [lemma, in loststepLib]
alloc_not_abort [lemma, in loststepLib]
alloc_irev_prog [lemma, in loststepLib]
alloc_exist [lemma, in loststepLib]
alloc_star_exist [lemma, in loststepLib]
alloc_star_exist' [lemma, in loststepLib]
alloc_stepn_code_eq [lemma, in loststepLib]
alloc_code_eq' [lemma, in loststepLib]
alloc_code_eq [lemma, in loststepLib]
all_elem_hold_for_upd [lemma, in mathlib]
all_elem_p [definition, in mathlib]
Alval [constructor, in assertion]
Alvarenv [constructor, in assertion]
Alvarenv_cancel [lemma, in hoare_lemmas]
alvarenv_elim [lemma, in seplog_lemmas]
alvarenv_intro [lemma, in seplog_lemmas]
Alvarenv' [definition, in assertion]
Alvarmapsto [definition, in assertion]
Amapsto [constructor, in assertion]
Amapstolsval [constructor, in assertion]
AMsgData [definition, in OSQInvDef]
AMsgData_precise [lemma, in inv_prop]
and [definition, in val]
andaux [definition, in tst_prop]
and_sym_rr [lemma, in Coqlib]
and_sym [lemma, in Coqlib]
and_one_one [lemma, in IntLib]
and_zero_one [lemma, in IntLib]
and_one_zero [lemma, in IntLib]
and_zero_zero [lemma, in IntLib]
and7_lt8 [lemma, in OSMutexPendPure1]
Anot [constructor, in assertion]
anotinlenv_elim [lemma, in seplog_lemmas]
anotinlenv_intro [lemma, in seplog_lemmas]
Aop [constructor, in assertion]
aop_intro [lemma, in derivedrules]
Aop_Aop'_eq' [lemma, in derivedrules]
Aop_Aop'_eq [lemma, in derivedrules]
Aop' [definition, in assertion]
aop'_elim [lemma, in seplog_lemmas]
aop'_intro [lemma, in seplog_lemmas]
AOSEvent [definition, in OSQInvDef]
AOSEventFreeList [definition, in OSQInvDef]
AOSEventFreeList_precise [lemma, in inv_prop]
AOSEventTbl [definition, in OSQInvDef]
AOSEventTbl_precise [lemma, in inv_prop]
AOSEventTbl_fold [lemma, in sem_lab]
AOSEvent_osabst_emp [lemma, in inv_prop]
AOSEvent_osevent_eq [lemma, in inv_prop]
AOSEvent_precise [lemma, in inv_prop]
AOSEvent_fold [lemma, in sem_lab]
AOSIntNesting [definition, in OSTCBInvDef]
AOSIntNesting_precise [lemma, in inv_prop]
AOSMapTbl [definition, in OSTCBInvDef]
AOSMapTbl_precise [lemma, in inv_prop]
AOSQBlk [definition, in OSQInvDef]
AOSQBlk_osabst_emp [lemma, in inv_prop]
AOSQBlk_precise [lemma, in inv_prop]
AOSQCtr [definition, in OSQInvDef]
AOSQCtr_osabst_emp [lemma, in inv_prop]
AOSQCtr_precise [lemma, in inv_prop]
AOSQCtr_osq_eq [lemma, in inv_prop]
AOSQFreeBlk [definition, in OSQInvDef]
AOSQFreeBlk_precise [lemma, in inv_prop]
AOSQFreeList [definition, in OSQInvDef]
AOSQFreeList_precise [lemma, in inv_prop]
AOSRdyGrp [definition, in OSTCBInvDef]
AOSRdyTbl [definition, in OSTCBInvDef]
AOSRdyTblGrp [definition, in OSTCBInvDef]
AOSRdyTblGrp_fold [lemma, in OSMutex_common]
AOSRdyTblGrp_precise [lemma, in inv_prop]
AOSTCBFreeList [definition, in OSTCBInvDef]
AOSTCBFreeList_precise [lemma, in inv_prop]
AOSTCBList [definition, in OSTCBInvDef]
AOSTCBList_set_curtid [lemma, in hoare_tactics]
AOSTCBList_precise [lemma, in inv_prop]
AOSTCBList_vptr [lemma, in inv_prop]
AOSTCBPrioTbl [definition, in OSTCBInvDef]
AOSTCBPrioTbl_high_tcblist_get_msg [lemma, in OSQPendPure]
AOSTCBPrioTbl_precise [lemma, in inv_prop]
AOSTCBPrioTbl_high_tcblist_get_msg [lemma, in Mbox_common]
AOSTime [definition, in OSTCBInvDef]
AOSTime_precise [lemma, in inv_prop]
AOSUnMapTbl [definition, in OSTCBInvDef]
AOSUnMapTbl_precise [lemma, in inv_prop]
apibound [definition, in PIF_aux]
ApiMethSim [lemma, in lemmasfortoptheo]
APIRule [inductive, in toprule]
api_internal_fun_nsame [lemma, in ucos_correctaux]
api_code [definition, in language]
api_rule [constructor, in toprule]
api_fun_list [definition, in os_program]
api_tlmatch [lemma, in tst_prop]
api_spec' [definition, in PIF_aux]
api_spec_list' [definition, in PIF_aux]
api_spec [definition, in os_spec]
api_spec_list [definition, in os_spec]
app_length_eq_eq [lemma, in OSEventRemovePure]
app_length_tail [lemma, in OSEventRemovePure]
app_tail_exists_head [lemma, in OSEventRemovePure]
app_cons_length_lt [lemma, in tst_prop]
Aptrmapsto [definition, in assertion]
Aptrmapsto_cancel [lemma, in hoare_lemmas]
Apure [constructor, in assertion]
apure_elim [lemma, in seplog_lemmas]
apure_intro [lemma, in seplog_lemmas]
arfalse [definition, in assertion]
arrayelem_asrt_impl_g [lemma, in aux_for_hoare_lemmas]
arrayelem_asrt_impl [lemma, in aux_for_hoare_lemmas]
arrayelem_addr_right [definition, in OSQInvDef]
arrayelem_asrt_impl_g [lemma, in symbolic_execution]
arrayelem_asrt_impl [lemma, in symbolic_execution]
arraymapstovallist [definition, in assertion]
array_to_vptr [constructor, in opsem]
array_length_intro [lemma, in hoare_tactics]
array_type_vallist_match [definition, in BaseAsrtDef]
array_struct [definition, in common]
array_type_vallist_match_rule_type_val_match [lemma, in OSTimeTickPure]
array_type_match_get_value [lemma, in mathlib]
array_type_vallist_match_hold [lemma, in mathlib]
array_int8u_nth_lt_len [lemma, in mathlib]
array_type_vallist_match_int8u_update_hold' [lemma, in mathlib]
array_type_vallist_match_int8u_update_hold_255 [lemma, in mathlib]
array_type_vallist_match_int8u_update_hold [lemma, in mathlib]
array_type_vallist_match_is_all_elem_p [lemma, in mathlib]
array_asrt_imp_length [lemma, in aux_for_hoare_lemmas]
array_rm_update_eq [lemma, in aux_for_hoare_lemmas]
array_member_rv_g [lemma, in symbolic_execution]
array_member_rv_g'' [lemma, in symbolic_execution]
array_member_rv_g' [lemma, in symbolic_execution]
array_member_rv [lemma, in symbolic_execution]
array_member_rv'' [lemma, in symbolic_execution]
array_member_rv' [lemma, in symbolic_execution]
array_type_vallist_match_imp_rule_type_val_match [lemma, in symbolic_execution]
array_asrt_eq [lemma, in symbolic_execution]
array_rm_update_eq' [lemma, in symbolic_execution]
array_rm_update_eq [lemma, in symbolic_execution]
array'_length_intro [lemma, in hoare_tactics]
asrt [inductive, in assertion]
asrtLib [library]
asrtTree [inductive, in seplog_tactics]
asrtTree [inductive, in tacticsforseplog]
asrtTree_to_list_prop2 [lemma, in seplog_tactics]
asrtTree_to_list_prop1 [lemma, in seplog_tactics]
asrtTree_to_list [definition, in seplog_tactics]
asrtTree_to_list' [definition, in seplog_tactics]
asrtTree2list [definition, in tacticsforseplog]
asrtTree2list_prop2 [lemma, in tacticsforseplog]
asrtTree2list_prop1 [lemma, in tacticsforseplog]
asrtTree2list' [definition, in tacticsforseplog]
asrt_add_cell_to_tail_sateq_star [lemma, in tst_prop]
asrt_add_cell_to_tail_pqr [lemma, in tst_prop]
asrt_add_cell_to_tail [definition, in tst_prop]
asrt_rep_5' [lemma, in hoare_assign]
asrt_rep_5 [lemma, in hoare_assign]
asrt_rep_4' [lemma, in hoare_assign]
asrt_rep_4 [lemma, in hoare_assign]
asrt_eq_trans [lemma, in aux_for_hoare_lemmas]
asrt_eq_trans [lemma, in symbolic_execution]
assertion [library]
assignsound [library]
assign_rule [constructor, in inferules]
assign_type_match [inductive, in opsem]
assign_loststep_exists' [lemma, in asrtLib]
assign_loststep_exists [lemma, in asrtLib]
assign_rule' [lemma, in derivedrules]
assign_rule_sound [lemma, in assignsound]
assign_rule_struct_array_g_aop [lemma, in hoare_assign]
assign_rule_struct_array_g [lemma, in hoare_assign]
assign_rule_struct_array_aop [lemma, in hoare_assign]
assign_rule_struct_array_aop' [lemma, in hoare_assign]
assign_rule_struct_array [lemma, in hoare_assign]
assign_rule_deref_struct_g_aop [lemma, in hoare_assign]
assign_rule_deref_struct_g [lemma, in hoare_assign]
assign_rule_deref_struct_aop [lemma, in hoare_assign]
assign_rule_deref_struct [lemma, in hoare_assign]
assign_rule_array_g_aop [lemma, in hoare_assign]
assign_rule_array_g_aop' [lemma, in hoare_assign]
assign_rule_array_g [lemma, in hoare_assign]
assign_rule_deref_array_elem_aop [lemma, in hoare_assign]
assign_rule_deref_array_elem_aop''' [lemma, in hoare_assign]
assign_rule_deref_array_elem_aop'' [lemma, in hoare_assign]
assign_rule_deref_array_elem_aop' [lemma, in hoare_assign]
assign_rule_array_aop [lemma, in hoare_assign]
assign_rule_ptr_array_aop [lemma, in hoare_assign]
assign_rule_ptr_array [lemma, in hoare_assign]
assign_rule_array_aop' [lemma, in hoare_assign]
assign_rule_array [lemma, in hoare_assign]
assign_rule_struct_g_aop [lemma, in hoare_assign]
assign_rule_struct_g [lemma, in hoare_assign]
assign_rule_struct_aop [lemma, in hoare_assign]
assign_rule_struct [lemma, in hoare_assign]
assign_rule_struct_array_g' [lemma, in hoare_assign]
assign_rule_struct_array' [lemma, in hoare_assign]
assign_rule_array_g' [lemma, in hoare_assign]
assign_rule_ptr_array' [lemma, in hoare_assign]
assign_rule_array' [lemma, in hoare_assign]
assign_rule_struct_g' [lemma, in hoare_assign]
assign_rule_deref_struct_g' [lemma, in hoare_assign]
assign_rule_deref_struct' [lemma, in hoare_assign]
assign_rule_struct'' [lemma, in hoare_assign]
assign_rule_struct' [lemma, in hoare_assign]
assign_rule_deref_ptr [lemma, in hoare_assign]
assign_rule''' [lemma, in hoare_assign]
assign_rule'' [lemma, in hoare_assign]
assign_rule_gvar [lemma, in hoare_assign]
assign_rule_lvar [lemma, in hoare_assign]
assign_rule_general [lemma, in hoare_assign]
assign_rule_general' [lemma, in hoare_assign]
assign_type_match_true [lemma, in aux_for_hoare_lemmas]
assign_type_match_fun [definition, in aux_for_hoare_lemmas]
Astar [constructor, in assertion]
astar_l_aconj_elim_zh [lemma, in ruleLib]
astar_l_aop'_elim [lemma, in seplog_lemmas]
astar_l_aop'_intro [lemma, in seplog_lemmas]
astar_l_agvarenv_elim [lemma, in seplog_lemmas]
astar_l_agvarenv_intro [lemma, in seplog_lemmas]
astar_l_alvarenv_elim [lemma, in seplog_lemmas]
astar_l_alvarenv_intro [lemma, in seplog_lemmas]
astar_l_anotinlenv_elim [lemma, in seplog_lemmas]
astar_l_anotinlenv_intro [lemma, in seplog_lemmas]
astar_l_adomlenv_elim [lemma, in seplog_lemmas]
astar_l_adomlenv_intro [lemma, in seplog_lemmas]
astar_l_atopis_elim [lemma, in seplog_lemmas]
astar_l_atopis_intro [lemma, in seplog_lemmas]
astar_l_acs_elim [lemma, in seplog_lemmas]
astar_l_acs_intro [lemma, in seplog_lemmas]
astar_l_aisr_elim [lemma, in seplog_lemmas]
astar_l_aisr_intro [lemma, in seplog_lemmas]
astar_l_ais_elim [lemma, in seplog_lemmas]
astar_l_ais_intro [lemma, in seplog_lemmas]
astar_l_aie_elim [lemma, in seplog_lemmas]
astar_l_aie_intro [lemma, in seplog_lemmas]
astar_prop [lemma, in seplog_lemmas]
astar_l_aconj_elim [lemma, in seplog_lemmas]
astar_r_aconj_elim [lemma, in seplog_lemmas]
astar_l_aexists_elim [lemma, in seplog_lemmas]
astar_r_aexists_elim [lemma, in seplog_lemmas]
astar_l_aexists_intro [lemma, in seplog_lemmas]
astar_r_aexists_intro [lemma, in seplog_lemmas]
astar_l_apure_intro [lemma, in seplog_lemmas]
astar_l_apure_elim [lemma, in seplog_lemmas]
astar_l_afalse_intro [lemma, in seplog_lemmas]
astar_l_afalse_elim [lemma, in seplog_lemmas]
astar_2atrue_elim [lemma, in seplog_lemmas]
astar_2atrue_intro [lemma, in seplog_lemmas]
astar_assoc_elim [lemma, in seplog_lemmas]
astar_assoc_intro [lemma, in seplog_lemmas]
astar_r_aemp_elim [lemma, in seplog_lemmas]
astar_l_aemp_elim [lemma, in seplog_lemmas]
astar_r_aemp_intro [lemma, in seplog_lemmas]
astar_l_aemp_intro [lemma, in seplog_lemmas]
astar_mono [lemma, in seplog_lemmas]
astar_comm [lemma, in seplog_lemmas]
Astruct [definition, in BaseAsrtDef]
Astruct_PV_neq1 [lemma, in OSMutex_common]
Astruct_OSTCB_PV_ptr_neq [lemma, in OSQPostPure]
Astruct_rm [definition, in BaseAsrtDef]
Astruct_osevent_dup_false' [lemma, in common]
Astruct_osevent_dup_false [lemma, in common]
astruct_neq_ptr [lemma, in common]
Astruct_osabst_emp [lemma, in inv_prop]
Astruct_precise [lemma, in inv_prop]
Astruct' [definition, in BaseAsrtDef]
Astruct'_osabst_emp [lemma, in inv_prop]
Astruct'_vl_eq [lemma, in inv_prop]
Astruct'_precise [lemma, in inv_prop]
ATopis [constructor, in assertion]
atopis_eq [lemma, in OSIntExitPure]
atopis_elim [lemma, in seplog_lemmas]
atopis_intro [lemma, in seplog_lemmas]
atopis_pure [lemma, in common]
atoy_inv_osabst_emp [lemma, in hoare_tactics]
atoy_abst_elim [lemma, in hoare_tactics]
atoy_inv_add [lemma, in hoare_tactics]
atoy_inv_elim [lemma, in hoare_tactics]
atoy_inv'_precise [lemma, in inv_prop]
atoy_inv [definition, in inv_prop]
atoy_inv' [definition, in inv_prop]
Atrue [constructor, in assertion]
atrue_intro [lemma, in seplog_lemmas]
auxand [definition, in mathlib]
auxdef [library]
AuxProps [definition, in pif_theory]
aux_trivial [lemma, in OSMutexPendPure1]
aux_le [lemma, in tst_prop]
aux_for_tl_vl_match_rev [lemma, in asrtLib]
aux_for_hoare_lemmas [library]
A_notin_lenv [constructor, in assertion]
A_dom_lenv [constructor, in assertion]
A_eval_list [constructor, in assertion]
A_eval_expr [constructor, in assertion]
a_isr_is_prop_split [lemma, in common]
A_isr_is_prop_precise [lemma, in inv_prop]
a_isr_is [lemma, in inv_prop]
a_isr_is_prop_split [lemma, in OSTimeTickPure]
a_mult_b_ge_b [lemma, in mathlib]
A_isr_is_prop [definition, in OSQInvDef]


B

backward_1 [lemma, in oscore_common]
backward_rule4 [lemma, in derivedrules]
backward_rule3 [lemma, in derivedrules]
backward_rule2 [lemma, in derivedrules]
backward_rule1 [lemma, in derivedrules]
BaseAsrtDef [library]
baseList [definition, in seplog_tactics]
baseList [definition, in tacticsforseplog]
baseTac [library]
baseTree [constructor, in seplog_tactics]
baseTree [constructor, in tacticsforseplog]
Bbj [definition, in auxdef]
beq_addr_false_neq_iff [lemma, in memory]
beq_addr_true_eq_iff [lemma, in memory]
beq_Z_Z_eqb_eq [lemma, in memory]
beq_pos_Pos_eqb_eq [lemma, in memory]
beq_addr [definition, in memory]
beq_Z [definition, in memory]
beq_pos [definition, in memory]
beq_Z_Zeqb_ident [lemma, in lmachLib]
beq_tid [definition, in language]
beq_taskid [lemma, in auxdef]
beq_nat_false2 [lemma, in asrtLib]
beq_nat_false [lemma, in asrtLib]
beq_nat_false3 [lemma, in asrtLib]
beq_int_dec [lemma, in IntBool]
beq_int_false_neq [lemma, in IntBool]
beq_int_true_eq [lemma, in IntBool]
beq_int [definition, in IntBool]
beq_pos [definition, in IntBool]
beq_addrval [definition, in InternalFunSpec]
beq_tid_true_eq [lemma, in OSTimeTickPure]
beq_tid_true [lemma, in OSTimeTickPure]
beq_addrval_eq [lemma, in OSTimeTickPure]
beq_addrval_false_neq [lemma, in OSTimeTickPure]
beq_pos_true [lemma, in OSTimeTickPure]
beq_tid_true [lemma, in PIF_aux]
beq_tid_true_eq [lemma, in PIF_aux]
bitx [definition, in os_code_defs]
bity [definition, in os_code_defs]
block [definition, in memdata]
blocktypespec [module, in memory]
blocktypespec.B [definition, in memory]
blt_Z_Z_ltb_eq [lemma, in memory]
blt_pos_Pos_ltb_eq [lemma, in memory]
blt_addr [definition, in memory]
blt_Z [definition, in memory]
blt_pos [definition, in memory]
blt_tid [definition, in language]
blt_irrefl_Prop [lemma, in IntBool]
blt_irrefl [lemma, in IntBool]
blt_pos_irrefl [lemma, in IntBool]
blt_int [definition, in IntBool]
blt_pos [definition, in IntBool]
Bmax_unsigned [lemma, in OSMutex_common]
Bmodulus [lemma, in OSMutex_common]
bool_and_true_gt [lemma, in mathlib]
bool_and_true_1 [lemma, in mathlib]
bool_or [definition, in val]
bool_and [definition, in val]
bool_type_val_match [lemma, in sep_pure]
bop [inductive, in val]
bop_type [definition, in val]
bop_int_type [definition, in val]
bop_eval [definition, in val]
bop_rv [lemma, in symbolic_execution]
boxer [constructor, in LibTactics]
Boxer [inductive, in LibTactics]
bpr'_to_bpr [lemma, in lemmasfortoptheo]
bp_bpa [lemma, in tst_prop]
buidq_intro_e [lemma, in asrtLib]
BuildintPre [definition, in auxdef]
BuildintRet [definition, in auxdef]
buildp [definition, in simulation]
BuildPreA [definition, in simulation]
BuildPreA' [definition, in auxdef]
BuildPreI [definition, in simulation]
buildp_add [lemma, in tst_prop]
buildp_add_nil [lemma, in tst_prop]
buildp_add_v [lemma, in tst_prop]
buildq [definition, in simulation]
buildq_ncare_ab [lemma, in tst_prop]
buildq_empO [lemma, in tst_prop]
BuildRetA [definition, in simulation]
BuildRetA' [definition, in auxdef]
BuildRetI [definition, in simulation]
build_api_asrt [lemma, in tst_prop]
build_pre_ret_exist [lemma, in asrtLib]
buldp_some_imp_gooddecl [lemma, in simulation]
byte [abbreviation, in Integers]
Byte [module, in Integers]
Byte [constructor, in memdata]
byte_max_unsigned_val [lemma, in type_val_match]


C

callcont [definition, in opsem]
callcont_int_local [lemma, in progtaskstepLib]
callcont_int_nonone [lemma, in progtaskstepLib]
callcont_int [lemma, in progtaskstepLib]
callcont_not_none_ex [lemma, in progtaskstepLib]
callcont_nonone_addcont [lemma, in progtaskstepLib]
callcont_intcont_kcall_none [lemma, in contLib]
callcont_some_eq [lemma, in contLib]
callcont_not_none' [lemma, in contLib]
callcont_not_none [lemma, in contLib]
callcont_kcall_neqnone [lemma, in contLib]
callcont_some [lemma, in contLib]
callcont_none_intcont_some_imply_callcont_addcont_none [lemma, in contLib]
callcont_nont_addkseq_kstop [lemma, in contLib]
callcont_addcont_none [lemma, in contLib]
callcont_kseq_kstop [lemma, in contLib]
callcont_ks_kstop [lemma, in contLib]
callcont_addkcall_imply_callcont_addkcall [lemma, in contLib]
callcont_addkcall_imply_addcont_exist [lemma, in contLib]
callcont_addkcall_imply_callcont_addkcall_exist [lemma, in contLib]
callcont_stmts_exist [lemma, in contLib]
callcont_none [lemma, in contLib]
callcont_none_addstmts_rev [lemma, in contLib]
callcont_none_addstmts [lemma, in contLib]
callcont_some_addcont [lemma, in contLib]
callcont_some_addstmts_rev [lemma, in contLib]
callcont_some_addstmts [lemma, in contLib]
callcont_ndymint [lemma, in lemmasfortoptheo]
callcont_kseq_kstop_nonone [lemma, in loststepLib]
callcont_addkcall_nonone_imply_callcont_addkcall [lemma, in loststepLib]
callcont_nonone_addstmts [lemma, in loststepLib]
callcont_nonone_addcont [lemma, in loststepLib]
callcont_goodks [lemma, in PIF_aux]
calle_rule_lvar [constructor, in inferules]
calle_rule [constructor, in inferules]
calle_rule_lvar [lemma, in hoare_tactics]
calle_rule_lvar_sound [lemma, in fcallsound]
calle_rule_sound [lemma, in fcallsound]
calle_rule_lvar' [lemma, in derivedrules]
calle_rule' [lemma, in derivedrules]
callsome_intnone [lemma, in progtaskstepLib]
call_rule [constructor, in inferules]
call_int_none_call [lemma, in contLib]
call_int_cont_none [lemma, in contLib]
call_rule_sound [lemma, in fcallsound]
call_ignore_exprlist_sim [lemma, in fcallsound]
call_rule' [lemma, in derivedrules]
cancellation_rule [lemma, in seplog_lemmas]
cancel_absdata [lemma, in seplog_tactics]
cancel_gvararray [lemma, in seplog_tactics]
cancel_lvararray [lemma, in seplog_tactics]
cancel_ptrarray [lemma, in seplog_tactics]
cancel_ptrstruct [lemma, in seplog_tactics]
cancel_ptrmapsto [lemma, in seplog_tactics]
cancel_gvarmapsto [lemma, in seplog_tactics]
cancel_lvarmapsto [lemma, in seplog_tactics]
cancel_absdata_p' [lemma, in cancel_absdata]
cancel_absdata_p [lemma, in cancel_absdata]
cancel_absdata [library]
can_change_aop [definition, in assertion]
can_be_cancelled [definition, in seplog_lemmas]
can_change_aop_OSQInv [lemma, in can_change_aop_proof]
can_change_aop_qblkf [lemma, in can_change_aop_proof]
can_change_aop_qblkfseg [lemma, in can_change_aop_proof]
can_change_aop_ecbfsll [lemma, in can_change_aop_proof]
can_change_aop_ecbfsllseg [lemma, in can_change_aop_proof]
can_change_aop_tcbdllseg [lemma, in can_change_aop_proof]
can_change_aop_dllseg [lemma, in can_change_aop_proof]
can_change_aop_sll [lemma, in can_change_aop_proof]
can_change_aop_msgqllseg [lemma, in can_change_aop_proof]
can_change_aop_msgqnode [lemma, in can_change_aop_proof]
can_change_aop_aevtdata [lemma, in can_change_aop_proof]
can_change_aop_msgq [lemma, in can_change_aop_proof]
can_change_aop_node [lemma, in can_change_aop_proof]
can_change_aop_sllseg [lemma, in can_change_aop_proof]
can_change_aop_struct [lemma, in can_change_aop_proof]
can_change_aop_struct' [lemma, in can_change_aop_proof]
can_change_aop_gvararray [lemma, in can_change_aop_proof]
can_change_aop_lvararray [lemma, in can_change_aop_proof]
can_change_aop_ptrarray [lemma, in can_change_aop_proof]
can_change_aop_ptrarray' [lemma, in can_change_aop_proof]
can_change_aop_gvarmapsto [lemma, in can_change_aop_proof]
can_change_aop_lvarmapsto [lemma, in can_change_aop_proof]
can_change_aop_gvarenv [lemma, in can_change_aop_proof]
can_change_aop_lvarenv [lemma, in can_change_aop_proof]
can_change_aop_ptrmapsto [lemma, in can_change_aop_proof]
can_change_aop_proof [library]
cast_eval_tptr_none [lemma, in opsem]
cast_eval [definition, in opsem]
cast_rv_tint8_tint16 [lemma, in symbolic_execution]
cast_rv_tint32_tint8 [lemma, in symbolic_execution]
cast_rv_tnull [lemma, in symbolic_execution]
cast_rv_struct_tptr [lemma, in symbolic_execution]
cast_rv_tptr [lemma, in symbolic_execution]
Ceq [constructor, in Integers]
cfun [definition, in os_code_notations]
Cge [constructor, in Integers]
Cgt [constructor, in Integers]
change_aop_rule [lemma, in assertion]
change_tstm_trans' [lemma, in tst_prop]
change_tstm_trans [lemma, in tst_prop]
change_aop_rule [lemma, in seplog_lemmas]
checkis [constructor, in language]
checkis_rule [constructor, in inferules]
checkis_step [constructor, in opsem]
checkis_rule_sound [lemma, in chkissound]
checkis_rule' [lemma, in derivedrules]
check_pointer [definition, in memdata]
chkissound [library]
cjy_and [definition, in asrtLib]
cjy_and [definition, in loststepLib]
Cle [constructor, in Integers]
cli [constructor, in language]
clientst [definition, in language]
clistisound [library]
cli_step [constructor, in opsem]
cli1_rule [constructor, in inferules]
cli1_rule_sound [lemma, in clistisound]
cli1_rule' [lemma, in derivedrules]
cli2_rule [constructor, in inferules]
cli2_rule_sound [lemma, in clistisound]
cli2_rule' [lemma, in derivedrules]
Clt [constructor, in Integers]
CltEnvMod [module, in language]
cltenvs [definition, in language]
cltstepev_eq [lemma, in progtaskstepLib]
cltstep_eqabt [lemma, in progtaskstepLib]
cltstep_eqo [lemma, in progtaskstepLib]
cltstep1_eq [lemma, in progtaskstepLib]
clt_stepev [constructor, in opsem]
clt_step [constructor, in opsem]
clt_stepev_good_clt [lemma, in progtaskstepLib]
clt_step_good_clt [lemma, in progtaskstepLib]
cmpu [definition, in val]
cmp_int_type [definition, in val]
cmp_val [definition, in val]
Cne [constructor, in Integers]
cnt [definition, in os_code_defs]
code [definition, in language]
CodeSpec [module, in language]
CodeSpec.B [definition, in language]
code_eq_dec [lemma, in lemmasfortoptheo]
code_exe_prop2 [lemma, in PIF_aux]
code_exe_prop1 [lemma, in PIF_aux]
common [library]
comparison [inductive, in Integers]
ConjExEL [lemma, in lemmasforseplog]
ConjExER [lemma, in lemmasforseplog]
ConjExIL [lemma, in lemmasforseplog]
ConjExIR [lemma, in lemmasforseplog]
ConjMono [lemma, in lemmasforseplog]
ConjPropE [lemma, in lemmasforseplog]
ConjPropI [lemma, in lemmasforseplog]
ConjPureEL [lemma, in lemmasforseplog]
ConjPureER [lemma, in lemmasforseplog]
ConjPureIL [lemma, in lemmasforseplog]
ConjPureIR [lemma, in lemmasforseplog]
ConjStarIL [lemma, in lemmasforseplog]
ConjStarIR [lemma, in lemmasforseplog]
ConjStarPureEL [lemma, in lemmasforseplog]
ConjStarPureER [lemma, in lemmasforseplog]
ConjStarPureIL [lemma, in lemmasforseplog]
ConjStarPureIR [lemma, in lemmasforseplog]
Conj2AempE [lemma, in lemmasforseplog]
Conj2AempI [lemma, in lemmasforseplog]
conseqsound [library]
conseq_rule_r_sound [lemma, in conseqsound]
conseq_rule_r_sound_aux [lemma, in conseqsound]
conseq_rule_sound [lemma, in conseqsound]
conseq_rule_sound_aux [lemma, in conseqsound]
conseq_rule [constructor, in inferules]
const_rv [lemma, in symbolic_execution]
cons_ext [lemma, in OSEventRemovePure]
cont [definition, in language]
contLib [library]
cont_frame_mono [lemma, in loststepLib]
convert_cfuns [definition, in os_code_notations]
convert_spec [definition, in InternalFunSpec]
convert_ifuns [definition, in os_cpu_a]
convert_int_spec [definition, in os_spec]
convert_api_spec [definition, in os_spec]
Coqlib [library]
create_val_inj_lemma0 [lemma, in OSMutex_common]
crtsound [library]
cs [definition, in language]
cstep [inductive, in opsem]
cstepabt [definition, in opsem]
cstepev [inductive, in opsem]
cstepLib [library]
cstepstar [inductive, in opsem]
cstep_idmove_frame [lemma, in cstepLib]
cstep_frame [lemma, in cstepLib]
cstep_safe_mono [lemma, in cstepLib]
cstep_idmove_deter [lemma, in cstepLib]
cstep_no_api_local [lemma, in progtaskstepLib]
cstep_p_local [lemma, in progtaskstepLib]
cstep_pumerge' [lemma, in progtaskstepLib]
cstep_pumerge [lemma, in progtaskstepLib]
cstep_AddKsToTail [lemma, in progtaskstepLib]
cstep_no_api_elim [lemma, in lemmasfortoptheo]
cstep_cont_locality [lemma, in tst_prop]
cstep_nhapi_hold [lemma, in PIF_aux]
cstep_good_clt_hold [lemma, in PIF_aux]
cstep1_locality [lemma, in progtaskstepLib]
cure [constructor, in language]
cureval [inductive, in language]
CurPr [axiom, in pif_theory]
curs [constructor, in language]
curtid [constructor, in language]
c_stepstarn [constructor, in opsem]
c_stepstar0 [constructor, in opsem]


D

dcons [constructor, in memdata]
DECIDABLE_PREDICATE.A [variable, in Coqlib]
DECIDABLE_PREDICATE.dec [variable, in Coqlib]
DECIDABLE_PREDICATE.P [variable, in Coqlib]
DECIDABLE_PREDICATE [section, in Coqlib]
DECIDABLE_EQUALITY.B [variable, in Coqlib]
DECIDABLE_EQUALITY.dec_eq [variable, in Coqlib]
DECIDABLE_EQUALITY.A [variable, in Coqlib]
DECIDABLE_EQUALITY [section, in Coqlib]
decllen [definition, in init_spec]
decllist [inductive, in memdata]
decllist_ind2 [definition, in aux_for_hoare_lemmas]
decode_val [definition, in memdata]
decode_int [definition, in memdata]
dec_eq_sym [lemma, in Coqlib]
dec_eq_false [lemma, in Coqlib]
dec_eq_true [lemma, in Coqlib]
del_ecbmod_join_lemma0 [lemma, in OSMutex_common]
del_intlemma2 [lemma, in OSMutex_common]
del_intlemma1 [lemma, in OSMutex_common]
DEL_NO_EXIST_ERR [definition, in absop]
DEL_IDLE_ERR [definition, in absop]
deref_ptr_of_array_member_rv [lemma, in symbolic_execution]
deref_ptr_of_array_member_rv''' [lemma, in symbolic_execution]
deref_ptr_of_array_member_rv'' [lemma, in symbolic_execution]
deref_ptr_of_array_member_rv' [lemma, in symbolic_execution]
deref_rv [lemma, in symbolic_execution]
derivedrules [library]
DisjExEL [lemma, in lemmasforseplog]
DisjExER [lemma, in lemmasforseplog]
DisjExIL [lemma, in lemmasforseplog]
DisjExIR [lemma, in lemmasforseplog]
DisjMono [lemma, in lemmasforseplog]
DisjPropE [lemma, in lemmasforseplog]
DisjPropI [lemma, in lemmasforseplog]
disj_rule [constructor, in inferules]
disj_star_elim_disj [lemma, in hoare_tactics]
disj_indom_set_disj [lemma, in lemmasfortoptheo]
disj_get_eq [lemma, in lemmasfortoptheo]
disj_store_disj [lemma, in lemmasfortoptheo]
disj_storebytes_disj [lemma, in lemmasfortoptheo]
disj_rule_sound [lemma, in simplrulesound]
disj_inv_0_sinum_oemp [lemma, in tst_prop]
disj_join_join [lemma, in tst_prop]
disj_sub_minus_merge [lemma, in tst_prop]
disj_rule' [lemma, in derivedrules]
disj_join_disj [lemma, in common]
disj_conj_distrib_pre [lemma, in common]
disj_eqdom [lemma, in OSTimeTickPure]
disj_star_elim'' [lemma, in mathlib]
disj_star_elim' [lemma, in mathlib]
disj_star_elim [lemma, in mathlib]
distance [definition, in OSQInvDef]
distinct [definition, in OSEventRemovePure]
distinct' [definition, in OSEventRemovePure]
divs [definition, in val]
div_in_intrange [lemma, in mathlib]
dladd [definition, in auxdef]
dladd_revlcons_eq [lemma, in tst_prop]
dll [definition, in BaseAsrtDef]
dllseg [definition, in BaseAsrtDef]
dllseg_head_isptr [lemma, in hoare_tactics]
dllseg_head_isptr' [lemma, in oscore_common]
dllseg_head_null_elim [lemma, in oscore_common]
dllseg_compose [lemma, in OSMutexPendPure1]
dllseg_ostcb_precise [lemma, in inv_prop]
dllseg_osabst_emp [lemma, in inv_prop]
dlyapi [definition, in absop]
dl_vl_match_6 [lemma, in init_spec]
dl_vl_match_5 [lemma, in init_spec]
dl_vl_match_4 [lemma, in init_spec]
dl_vl_match_3 [lemma, in init_spec]
dl_vl_match_2 [lemma, in init_spec]
dl_vl_match_1 [lemma, in init_spec]
dl_vl_match_0 [lemma, in init_spec]
dl_vl_match_dv_same_length [lemma, in init_spec]
dl_add [definition, in auxdef]
dl_add_move [lemma, in tst_prop]
dl_add_nil_eq [lemma, in tst_prop]
dl_add_revlcons_length_le [lemma, in tst_prop]
dl_add_dnil_eq [lemma, in tst_prop]
dl_eq_true_eq [lemma, in aux_for_hoare_lemmas]
dl_eq [definition, in aux_for_hoare_lemmas]
dl_vl_match [definition, in simulation]
DMbox [constructor, in assertion]
DMsgQ [constructor, in assertion]
DMutex [constructor, in assertion]
Dnewt [definition, in opsem]
dnil [constructor, in memdata]
dom_lenv_imp_notin_lenv [lemma, in symbolic_execution]
double_update_exchangable4rlrt_pt_p [lemma, in OSMutex_common]
double_update_exchange [lemma, in OSMutex_common]
DSem [constructor, in assertion]
Dteq [definition, in opsem]
dup_lemma [lemma, in LibTactics]


E

eaddrderef_step [constructor, in opsem]
eaddrof [constructor, in language]
eaddr_step [constructor, in opsem]
eaelemaddr_step [constructor, in opsem]
eaelem_step [constructor, in opsem]
eaptrelemaddr_step [constructor, in opsem]
eaptrelem_step [constructor, in opsem]
earrayelem [constructor, in language]
ebinop [constructor, in language]
ebop_step [constructor, in opsem]
ecast [constructor, in language]
ecastcomptr_step [constructor, in opsem]
ecastint_step [constructor, in opsem]
ecastnull_step [constructor, in opsem]
ecast_step [constructor, in opsem]
ecbfsllseg_head_isptr [lemma, in hoare_tactics]
ecbfsll_head_isptr [lemma, in hoare_tactics]
ecbf_sllseg_isptr [lemma, in common]
ecbf_sll_osabst_emp [lemma, in inv_prop]
ecbf_sll_precise [lemma, in inv_prop]
ecbf_sllseg_osabst_emp [lemma, in inv_prop]
ecbf_sll [definition, in OSQInvDef]
ecbf_sllseg [definition, in OSQInvDef]
ecbid [definition, in language]
ecbjoin_sig_join [lemma, in mathlib]
ecbjoin_sig_join' [lemma, in Mbox_common]
ecblistp_hold [lemma, in OSMutex_common]
ecblistp_length_eq [lemma, in mathlib]
ecblistp_length_eq_1 [lemma, in mathlib]
ecblist_star_not_inh [lemma, in OSQCreatePure]
ECBList_OSQCRT_prop [lemma, in OSQCreatePure]
ecblist_ecbmod_get_mutex' [lemma, in OSMutex_common]
ecblist_p_decompose [lemma, in OSMutex_common]
ecblist_ecbmod_get_mutex [lemma, in OSMutex_common]
ecblist_ecbmod_get_aux_mutex [lemma, in OSMutex_common]
ECBList_Mutex_Create_prop [lemma, in OSMutex_common]
ecblist_p_mutexpend_changeprio [lemma, in OSMutex_common]
ECBList_P_msg [lemma, in OSQGetMsgPure]
ecblist_p_post_exwt_hold_mutex [lemma, in OSMutexPostPure]
ECBList_P_Set_Rdy_hold_mutex [lemma, in OSMutexPostPure]
ecblist_p_post_exwt_hold' [lemma, in OSQPostPure]
ecblist_p_post_exwt_hold [lemma, in OSQPostPure]
ECBList_P_Set_Rdy_hold [lemma, in OSQPostPure]
ECBList_P_high_tcb_block_hold [lemma, in OSQPendPure]
ECBList_P_high_tcb_get_msg_hold [lemma, in OSQPendPure]
ECBList_P_append [lemma, in OSESearchPure]
ECBList_P_nil [lemma, in OSESearchPure]
ecblist_p_mutexpend [lemma, in OSMutexPendPure1]
ECBList_P_high_tcb_block_hold_mutex [lemma, in OSMutexPendPure1]
ECBList_P_hold1 [lemma, in OSTimeDlyPure]
ecblist_p_eqh [lemma, in common]
ecblist_p_decompose [lemma, in common]
ecblist_p_post_exwt_hold_sem [lemma, in sempost_pure]
ECBList_P_Set_Rdy_hold_sem [lemma, in sempost_pure]
ecblist_ecbmod_get' [lemma, in OSQDelPure]
ecblist_p_decompose [lemma, in OSQDelPure]
ecblist_ecbmod_get [lemma, in OSQDelPure]
ecblist_ecbmod_get_aux [lemma, in OSQDelPure]
ecblist_pin [lemma, in OSQDelPure]
ecblist_p_tick_rdy_ectr_mutexsem [lemma, in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_mbox [lemma, in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_sem [lemma, in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_q [lemma, in OSTimeTickPure]
ecblist_p_stat_time_minus1_eq [lemma, in OSTimeTickPure]
ecblist_p_wait_set_rdy [lemma, in OSTimeTickPure]
ECBList_P_Set_Rdy_MUTEX_hold [lemma, in OSTimeTickPure]
ECBList_P_Set_Rdy_MBOX_hold [lemma, in OSTimeTickPure]
ECBList_P_Set_Rdy_SEM_hold [lemma, in OSTimeTickPure]
ecblist_p_compose' [lemma, in OSTimeTickPure]
ECBList_P_get_eidls_not_in [lemma, in OSTimeTickPure]
ECBList_P_vptr [lemma, in OSTimeTickPure]
ECBList_P_els_get_split [lemma, in OSTimeTickPure]
ECBList_P_get_last_ecb_ptr_split_joinsig [lemma, in OSTimeTickPure]
ECBList_P_get_last_ecb_ptr [lemma, in OSTimeTickPure]
ECBList_P_get_ectr_some [lemma, in OSTimeTickPure]
ecblist_p_compose [lemma, in mathlib]
ECBList_last_val [lemma, in mathlib]
ECBList_MBox_Create_prop [lemma, in MboxCreatePure]
ECBList_P [definition, in OSQInvDef]
ECBList_P_high_tcb_block_hold_sem [lemma, in sempend_pure]
ecblist_p_post_exwt_hold_mbox [lemma, in Mbox_common]
ECBList_P_Set_Rdy_hold_mbox [lemma, in Mbox_common]
ECBList_P_high_tcb_block_hold_mbox [lemma, in Mbox_common]
ECBList_P_high_tcb_get_msg_hold [lemma, in Mbox_common]
ecblist_ecbmod_get_mbox' [lemma, in Mbox_common]
ecblist_p_decompose'' [lemma, in Mbox_common]
ecblist_ecbmod_get_mbox [lemma, in Mbox_common]
ecblist_ecbmod_get_aux_mbox [lemma, in Mbox_common]
ecblist_p_decompose' [lemma, in Mbox_common]
ecblist_p_decompose [lemma, in Mbox_common]
ecbls_ptr_distinct_get_last_eq [lemma, in OSEventRemovePure]
ecbls_ptr_distinct [definition, in OSEventRemovePure]
EcbMod [module, in language]
ecbmod_indom_eq_join_eq [lemma, in OSMutex_common]
ecbmod_get_or [lemma, in OSMutex_common]
ecbmod_absmsgq [lemma, in OSQPostPure]
ecbmod_join_sigg [lemma, in mathlib_join]
ecbmod_join_sigg_my [lemma, in mathlib_join]
ecbmod_joinsig_get [lemma, in laby]
ecbmod_joinsig_get [lemma, in lab]
ecbmod_get_joinsig_join_eq [lemma, in OSTimeTickPure]
ecbmod_set_eq [lemma, in OSTimeTickPure]
ecbmod_set_neq_change [lemma, in OSTimeTickPure]
ecbmod_joinsig_get_none [lemma, in mathlib]
ecbmod_get_join_get [lemma, in mathlib]
ecbmod_joinsig_sig [lemma, in mathlib]
ecbmod_joinsig_get [lemma, in mathlib]
ecbmod_join_get [lemma, in mathlib]
ecbmod_get_sig_set [lemma, in mathlib]
ecb_del_prop_RHhold [lemma, in OSMutex_common]
ecb_list_join_join [lemma, in OSMutex_common]
ecb_wt_ex_prop_mutex [lemma, in OSMutex_common]
ecb_sig_join_sig'_set [lemma, in OSMutex_common]
ecb_join_sig_eq [lemma, in OSMutex_common]
ecb_get_next_ptr [definition, in OSEventRemovePure]
ecb_etbl_set_hold [lemma, in OSQPendPure]
ecb_etbl_prop [lemma, in OSTimeDlyPure]
ecb_sub_eq [lemma, in common]
ecb_joinsig_ex_split [lemma, in common]
ecb_list_join_join [lemma, in OSQDelPure]
ecb_del_prop_RHhold [lemma, in OSQDelPure]
ecb_wt_ex_prop [lemma, in OSQDelPure]
ecb_set_join_join [lemma, in mathlib]
ecb_get_set_join_join [lemma, in mathlib]
ecb_joinsig_get_eq' [lemma, in PIF_aux]
ecb_join_get_eq' [lemma, in PIF_aux]
ecb_joinsig_get_eq [lemma, in PIF_aux]
ecb_etbl_set_hold [lemma, in Mbox_common]
ecb_sig_join_sig'_set [lemma, in Mbox_common]
ecb_del_prop_RHhold [lemma, in Mbox_common]
ecb_list_join_join [lemma, in Mbox_common]
ecb_wt_ex_prop_mbox [lemma, in Mbox_common]
ecb_joinsig_ex_split [lemma, in Mbox_common]
econst32 [constructor, in language]
ec32_step [constructor, in opsem]
edata [inductive, in language]
ederef [constructor, in language]
ederef_step [constructor, in opsem]
edom [definition, in assertion]
efield [constructor, in language]
eight_destruct [lemma, in mathlib]
ejoin_get_none_l [lemma, in sempend_pure]
ejoin_get_none_r [lemma, in sempend_pure]
ejoin_get_none_l [lemma, in Mbox_common]
ejoin_get_none_r [lemma, in Mbox_common]
elim_a_isr_is_prop' [lemma, in OSIntExitPure]
elim_a_isr_is_prop [lemma, in common]
empabst [abbreviation, in assertion]
empenv [abbreviation, in assertion]
empisr [definition, in language]
empisr_isr_is_prop_P [lemma, in hoare_tactics]
empisr_isr_is_prop [lemma, in hoare_tactics]
emple_tst [definition, in auxdef]
emple_subs_inv [lemma, in tst_prop]
empmem [abbreviation, in assertion]
emposabst [definition, in assertion]
emposspec [definition, in inferules]
empprogunit [definition, in ruleLib]
EmpPureE [lemma, in lemmasforseplog]
EmpPureI [lemma, in lemmasforseplog]
empst [definition, in assertion]
emptaskenv [definition, in auxdef]
emptaskst [definition, in assertion]
empTree [constructor, in seplog_tactics]
empTree [constructor, in tacticsforseplog]
emptylisteq [constructor, in seplog_tactics]
emptylisteq [constructor, in tacticsforseplog]
Emp_AbsOs_Asrt [definition, in assertion]
emp_absos_asrt_prop [lemma, in asrtLib]
Emp_AbsOs_Asrt_prop [lemma, in asrtLib]
emp_update [constructor, in InternalFunSpec]
encode_val_length [lemma, in memdata]
encode_val [definition, in memdata]
encode_int_length [lemma, in memdata]
encode_int [definition, in memdata]
encrit [constructor, in language]
encrit_step [constructor, in opsem]
encrit_rule_pre [lemma, in derivedrules]
encrit1_rule [constructor, in inferules]
encrit1_rule'_ISnil_ISRemp [lemma, in hoare_tactics]
encrit1_rule'_ISnil [lemma, in hoare_tactics]
encrit1_rule' [lemma, in derivedrules]
encrit1_rule_sound [lemma, in crtsound]
encrit2_rule [constructor, in inferules]
encrit2_rule' [lemma, in derivedrules]
encrit2_rule_sound [lemma, in crtsound]
endtls_step [constructor, in absop]
enull [constructor, in language]
enull_step [constructor, in opsem]
env [definition, in memory]
EnvMod [module, in memory]
envmod_get'_remove_mid [lemma, in asrtLib]
EnvMod_lb_neq [lemma, in asrtLib]
EnvSpec [module, in language]
EnvSpec.B [definition, in language]
envsub_get [lemma, in asrtLib]
env_join_get [lemma, in joinmemLib]
env_join_sig_r [lemma, in lmachLib]
env_can_get [lemma, in progtaskstepLib]
env_domain_eq_imply_alloc_exist [lemma, in loststepLib]
env_domain_set_eq [lemma, in loststepLib]
env_domain_eq [definition, in loststepLib]
en_int_inv [lemma, in tst_prop]
eoi [constructor, in language]
eoisound [library]
eoi_ieoff_rule [constructor, in inferules]
eoi_ieon_rule [constructor, in inferules]
eoi_step [constructor, in opsem]
eoi_ieoff_rule_sound [lemma, in eoisound]
eoi_ieon_rule_sound [lemma, in eoisound]
eoi_ieoff_rule' [lemma, in derivedrules]
eoi_ieon_rule' [lemma, in derivedrules]
eqabst_disj_emp [lemma, in asrtLib]
EqDom [definition, in simulation]
EqDomAPI [definition, in toptheorem]
eqdomenv_conse [lemma, in asrtLib]
eqdomenv_conse_pre [lemma, in asrtLib]
eqdomenv_conse_pre' [lemma, in asrtLib]
eqdomenv_nil_enil [lemma, in asrtLib]
EqDomInt [definition, in toptheorem]
eqdomO [definition, in opsem]
eqdomOS [definition, in auxdef]
eqdomos_p [lemma, in ucos_correctaux]
eqdomO_merge [lemma, in ruleLib]
eqdomO_disj_disj [lemma, in ruleLib]
eqdomO_trans [lemma, in ruleLib]
eqdomo_disj_merge [lemma, in progtaskstepLib]
eqdomo_disj [lemma, in progtaskstepLib]
eqdomO_set2 [lemma, in progtaskstepLib]
eqdomO_eqdomTO [lemma, in progtaskstepLib]
eqdomO_refl [lemma, in progtaskstepLib]
eqdomO_disj_disj_merge [lemma, in asrtLib]
eqdomO_disj_eqdomO [lemma, in asrtLib]
eqdomO_none [lemma, in asrtLib]
eqdomO_same [lemma, in cancel_absdata]
eqdomSO [definition, in lemmasfortoptheo]
eqdomsot_get_exproj' [lemma, in lemmasfortoptheo]
eqdomsot_get_exproj [lemma, in lemmasfortoptheo]
eqdomtls [definition, in opsem]
eqdomTO [definition, in etraceref]
eqdomTO_setT [lemma, in progtaskstepLib]
eqdomto_indom_get [lemma, in lemmasfortoptheo]
eqdom_internal_lh [lemma, in ucos_correctaux]
eqdom_same [lemma, in absop_rules]
eqenv [definition, in simulation]
eqenv_join2_eqenv [lemma, in ruleLib]
eqenv_goodg_sat [lemma, in ruleLib]
eqenv_comm [lemma, in joinmemLib]
eqenv_trans [lemma, in joinmemLib]
eqevntls [definition, in lemmasfortoptheo]
eqisttls [definition, in lemmasfortoptheo]
eqmem_disj_emp [lemma, in asrtLib]
eqMs [lemma, in tst_prop]
eqtid_same [lemma, in absop_rules]
eqtls [definition, in absop_rules]
equatesLemma [section, in LibTactics]
equatesLemma.A0 [variable, in LibTactics]
equatesLemma.A1 [variable, in LibTactics]
equatesLemma.A2 [variable, in LibTactics]
equatesLemma.A3 [variable, in LibTactics]
equatesLemma.A4 [variable, in LibTactics]
equatesLemma.A5 [variable, in LibTactics]
equatesLemma.A6 [variable, in LibTactics]
equates_6 [lemma, in LibTactics]
equates_5 [lemma, in LibTactics]
equates_4 [lemma, in LibTactics]
equates_3 [lemma, in LibTactics]
equates_2 [lemma, in LibTactics]
equates_1 [lemma, in LibTactics]
equates_0 [lemma, in LibTactics]
eq_dom_env [definition, in assertion]
eq_int [constructor, in opsem]
eq_struct [constructor, in opsem]
eq_array [constructor, in opsem]
eq_vcomptr [constructor, in opsem]
eq_vptr [constructor, in opsem]
eq_tvoid [constructor, in opsem]
eq_tnull [constructor, in opsem]
eq_zero_zero [lemma, in IntLib]
eq_one_zero [lemma, in IntLib]
eq_tp [lemma, in tst_prop]
eq_beq_int_true [lemma, in IntBool]
eq_next [definition, in OSTimeTickPure]
eq_beq_addrval [lemma, in OSTimeTickPure]
eq_13 [lemma, in mathlib]
eq_12 [lemma, in mathlib]
eq_11 [lemma, in mathlib]
eq_10 [lemma, in mathlib]
eq_9 [lemma, in mathlib]
eq_8 [lemma, in mathlib]
eq_7 [lemma, in mathlib]
eq_6 [lemma, in mathlib]
eq_5 [lemma, in mathlib]
eq_4 [lemma, in mathlib]
eq_3 [lemma, in mathlib]
eq_2 [lemma, in mathlib]
eq_1 [lemma, in mathlib]
eq_impl_trans [lemma, in aux_for_hoare_lemmas]
eq_impl_trans [lemma, in symbolic_execution]
eq' [definition, in LibTactics]
eq2inteq [lemma, in OSMutex_common]
err [definition, in os_code_defs]
esidaddr_step [constructor, in opsem]
esid_step [constructor, in opsem]
estep [inductive, in opsem]
estepstar [inductive, in opsem]
estepstar_imply_star [lemma, in cstepLib]
estepstar_mem_same [lemma, in cstepLib]
estepstar_deter [lemma, in cstepLib]
estepstar_estepstar_trans [lemma, in cstepLib]
estepstar_estep_trans [lemma, in cstepLib]
estepstar_msim_hold [lemma, in ruleLib]
estepstar_imply_lostidstepstar [lemma, in loststepLib]
estepv_notabortm [lemma, in cstepLib]
estep_mem_same [lemma, in cstepLib]
estep_deter [lemma, in cstepLib]
estep_msim_hold [lemma, in ruleLib]
estep_frame_loststep [lemma, in loststepLib]
estep_lstep_deter [lemma, in loststepLib]
estep_join_lstep [lemma, in loststepLib]
estep_imply_loststep [lemma, in loststepLib]
etraceref [library]
etrace_subset [definition, in etraceref]
ETrRef [inductive, in etraceref]
etrref_subset [constructor, in etraceref]
eunop [constructor, in language]
euopstep [constructor, in opsem]
evabort [constructor, in etraceref]
evaddrelem_step [constructor, in opsem]
evaddrv_step [constructor, in opsem]
evaladdr [definition, in opsem]
evaladdr_imply_estepstar [lemma, in cstepLib]
evaladdr_val_eq [lemma, in cstepLib]
evaladdr_mono [lemma, in lmachLib]
evalexprlist [definition, in assertion]
evalexprlist_imply_evalexprlist' [lemma, in lmachLib]
evalexprlist_i [constructor, in lmachLib]
evalexprlist_b [constructor, in lmachLib]
evalexprlist_len_eq [lemma, in lmachLib]
evalexprlist_imply_eqlen [lemma, in asrtLib]
evalexprlist_imply_evalexprlist' [lemma, in asrtLib]
evalexprlist_i [constructor, in asrtLib]
evalexprlist_b [constructor, in asrtLib]
evalexprlist_idstep_star [lemma, in loststepLib]
evalexprlist' [inductive, in lmachLib]
evalexprlist' [inductive, in asrtLib]
evalexprlist'_imply_evalexprlist [lemma, in lmachLib]
evalexprlist'_imply_evalexprlist [lemma, in asrtLib]
evallist_length_leb_rev [lemma, in lmachLib]
evallist_length_leb [lemma, in lmachLib]
evaltype [definition, in opsem]
evaltype_GE_eq [lemma, in cstepLib]
evaltype_deter [lemma, in lmachLib]
evaltype_eq_prop [lemma, in lmachLib]
evaltype_mono [lemma, in lmachLib]
evaltype_irrev_mem [lemma, in lmachLib]
evaltype_GE_eq [lemma, in asrtLib]
evalval [definition, in opsem]
evalvaladdr_mono [lemma, in lmachLib]
evalval_imply_estepstar [lemma, in cstepLib]
evalval_evaladdr_imply_estepstar [lemma, in cstepLib]
evalval_deter [lemma, in lmachLib]
evalval_eq_prop [lemma, in lmachLib]
evalval_mono [lemma, in lmachLib]
evalval_imply_evaltype [lemma, in lmachLib]
evalval_type [lemma, in progtaskstepLib]
evalval_frame_prop [lemma, in asrtLib]
evalval_imply_lostidstepstar [lemma, in loststepLib]
eval_length_rev [lemma, in lmachLib]
eval_length_tlmatch [lemma, in lmachLib]
eval_type_match [lemma, in lmachLib]
eval_addr_prop [lemma, in lmachLib]
eval_addr_eq [lemma, in aux_for_hoare_lemmas]
eval_type_addr_eq [lemma, in aux_for_hoare_lemmas]
eval_addr_eq [lemma, in symbolic_execution]
eval_type_addr_eq [lemma, in symbolic_execution]
evar [constructor, in language]
evar_step [constructor, in opsem]
evbop1_step [constructor, in opsem]
evbop2_step [constructor, in opsem]
evcastint_step [constructor, in opsem]
evcons [constructor, in etraceref]
evderef_step [constructor, in opsem]
EventCtr [definition, in assertion]
EventCtr [definition, in OSQInvDef]
EventData [inductive, in assertion]
eventsearch_after_get_H [lemma, in sem_common]
eventtype_neq_mutex [lemma, in OSMutex_common]
eventtype_neq_q [lemma, in common]
eventtype_neq_mbox' [lemma, in Mbox_common]
eventtype_neq_mbox [lemma, in Mbox_common]
event_type_n_match [lemma, in OSQPostPure]
event_type_n_match'' [lemma, in OSQPostPure]
event_type_n_match' [lemma, in OSQPostPure]
event_type_n_match [lemma, in OSQPendPure]
event_wait_rl_tbl_grp'' [lemma, in OSTimeDlyPure]
event_wait_rl_tbl_grp [lemma, in OSTimeDlyPure]
event_wait_rl_tbl_grp' [lemma, in OSTimeDlyPure]
event_rdy_post6' [definition, in InternalFunSpec]
event_rdy_post5' [definition, in InternalFunSpec]
event_rdy_post4' [definition, in InternalFunSpec]
event_rdy_post3' [definition, in InternalFunSpec]
event_rdy_post2' [definition, in InternalFunSpec]
event_rdy_post1' [definition, in InternalFunSpec]
event_rdy_post6 [definition, in InternalFunSpec]
event_rdy_post5 [definition, in InternalFunSpec]
event_rdy_post4 [definition, in InternalFunSpec]
event_rdy_post3 [definition, in InternalFunSpec]
event_rdy_post2 [definition, in InternalFunSpec]
event_rdy_post1 [definition, in InternalFunSpec]
Event_Type_P [definition, in OSQInvDef]
EVENT_TBL_INIT_VL [definition, in OSQInvDef]
evnil [constructor, in etraceref]
evoff_step [constructor, in opsem]
evsllseg [definition, in OSQInvDef]
evsllseg_aux [lemma, in OSMutex_common]
evsllseg_merge' [lemma, in OSEventRemovePure]
evsllseg_astruct_not_in [lemma, in OSEventRemovePure]
evsllseg_ecbls_ptr_distinct [lemma, in OSEventRemovePure]
evsllseg_get_last_eq_p [lemma, in OSEventRemovePure]
evsllseg_vnull_nil_p [lemma, in OSEventRemovePure]
evsllseg_append1 [lemma, in OSEventRemovePure]
evsllseg_has_node [lemma, in OSEventRemovePure]
evsllseg_head_isptr' [lemma, in OSEventRemovePure]
evsllseg_vnull_false_p [lemma, in OSEventRemovePure]
evsllseg_vnull_false [lemma, in OSEventRemovePure]
evsllseg_list_len_eq' [lemma, in OSEventRemovePure]
evsllseg_ptr_dup_false [lemma, in OSEventRemovePure]
evsllseg_distinct' [lemma, in OSEventRemovePure]
evsllseg_not_in_vnull' [lemma, in OSEventRemovePure]
evsllseg_not_in_vnull [lemma, in OSEventRemovePure]
evsllseg_distinct [lemma, in OSEventRemovePure]
evsllseg_head_isptr [lemma, in hoare_tactics]
evsllseg_append [lemma, in OSESearchPure]
evsllseg_aux [lemma, in OSMutexPendPure1]
evsllseg_eid_neq [lemma, in common]
evsllseg_list_len_eq [lemma, in common]
evsllseg_isptr [lemma, in common]
evsllseg_compose [lemma, in common]
evsllseg_app [lemma, in common]
evsllseg_add_head [lemma, in common]
evsllseg_merge [lemma, in common]
evsllseg_get_last_eq [lemma, in common]
evsllseg_precise [lemma, in inv_prop]
evsllseg_osabst_emp [lemma, in inv_prop]
evsllseg_isptr [lemma, in inv_prop]
evtrace [inductive, in etraceref]
evuop_step [constructor, in opsem]
excrit [constructor, in language]
excrit_step [constructor, in opsem]
excrit_rule_pre [lemma, in derivedrules]
excrit1_rule [constructor, in inferules]
excrit1_rule'_ISnil_ISRemp' [lemma, in hoare_tactics]
excrit1_rule'_ISnil_ISRemp [lemma, in hoare_tactics]
excrit1_rule'_ISnil [lemma, in hoare_tactics]
excrit1_rule' [lemma, in derivedrules]
excrit1_rule_sound [lemma, in crtsound]
excrit2_rule [constructor, in inferules]
excrit2_rule' [lemma, in derivedrules]
excrit2_rule_sound [lemma, in crtsound]
exint [constructor, in language]
exint_step [constructor, in opsem]
exint_dec [lemma, in lemmasfortoptheo]
exint_notabortm [lemma, in asrtLib]
exists_some_unmap_is_x [lemma, in OSMutex_common]
exists2Ex [lemma, in lemmasforseplog]
exitint_rule_sound [lemma, in retsound]
expr [inductive, in language]
exprcont [inductive, in language]
exprlist [definition, in language]
ExProp [lemma, in lemmasforseplog]
expr_step [constructor, in opsem]
expr_array_member_rv [lemma, in symbolic_execution]
expr_array_member_rv' [lemma, in symbolic_execution]
extac [library]
extensionality [lemma, in Coqlib]
ext_step [constructor, in absop]
ex_intro_rule [constructor, in inferules]
ex_intro_rule_sound [lemma, in simplrulesound]
ex_intro_rule' [lemma, in derivedrules]
Ex2exists [lemma, in lemmasforseplog]
e_stepn [constructor, in opsem]
e_step0 [constructor, in opsem]


F

fcallsound [library]
fcall_kstop [lemma, in asrtLib]
fcall_not [lemma, in asrtLib]
fexec_abt_eq [lemma, in progtaskstepLib]
fid [definition, in language]
field_offset [definition, in opsem]
field_offsetfld [definition, in opsem]
field_offset_plus [lemma, in lmachLib]
field_deref_asrt_impl_g [lemma, in hoare_assign]
field_deref_asrt_impl [lemma, in hoare_assign]
field_array_asrt_impl_g [lemma, in hoare_assign]
field_array_asrt_impl [lemma, in hoare_assign]
field_asrt_impl_g [lemma, in aux_for_hoare_lemmas]
field_asrt_impl [lemma, in aux_for_hoare_lemmas]
field_offsetfld_pos_mono [lemma, in aux_for_hoare_lemmas]
field_asrt_impl_g [lemma, in symbolic_execution]
field_asrt_impl [lemma, in symbolic_execution]
find [inductive, in seplog_tactics]
find [inductive, in tacticsforseplog]
FORALL2 [section, in Coqlib]
FORALL2.A [variable, in Coqlib]
FORALL2.B [variable, in Coqlib]
FORALL2.P [variable, in Coqlib]
forward_rule4 [lemma, in derivedrules]
forward_rule3 [lemma, in derivedrules]
forward_rule2 [lemma, in derivedrules]
forward_rule1 [lemma, in derivedrules]
fpost [definition, in assertion]
fpre [definition, in assertion]
framesound [library]
frame_rule_all [constructor, in inferules]
frame_rule [constructor, in inferules]
frame_rule_sound [lemma, in framesound]
frame_rule_all_sound [lemma, in framesound]
frame_sim_aux [lemma, in framesound]
frame_rule_all' [lemma, in derivedrules]
frame_rule' [lemma, in derivedrules]
free [definition, in memory]
freeb [definition, in memory]
freeb_get_same [lemma, in memory]
freeb_mono [lemma, in lmachLib]
freeb_mem_join [lemma, in progtaskstepLib]
freeb_inconsistent [lemma, in progtaskstepLib]
freeb_consistent [lemma, in progtaskstepLib]
freeb_sub [lemma, in progtaskstepLib]
freeb_get [lemma, in progtaskstepLib]
freeb_mem_join [lemma, in tst_prop]
freeb_join_rev [lemma, in asrtLib]
freeb_join [lemma, in asrtLib]
freeb_join_elim [lemma, in asrtLib]
freelist [definition, in language]
freelist_n [constructor, in asrtLib]
freelist_0 [constructor, in asrtLib]
freelist'_n [constructor, in asrtLib]
freelist'_0 [constructor, in asrtLib]
freels [inductive, in asrtLib]
freels_split [lemma, in asrtLib]
freels_imply_freels' [lemma, in asrtLib]
freels_merge [lemma, in asrtLib]
freels_exchage2 [lemma, in asrtLib]
freels_exchange1 [lemma, in asrtLib]
freels' [inductive, in asrtLib]
freels'_split [lemma, in asrtLib]
freels'_imply_freels [lemma, in asrtLib]
freev_notabortm [lemma, in asrtLib]
free_stepn_sim_hold [lemma, in funsim]
free_step_sim_hold [lemma, in funsim]
free_false [lemma, in memory]
free_mono [lemma, in lmachLib]
free_nabt [lemma, in progtaskstepLib]
free_step_mem_join [lemma, in progtaskstepLib]
free_step [lemma, in progtaskstepLib]
free_join_disj [lemma, in progtaskstepLib]
free_local [lemma, in progtaskstepLib]
free_inconsistent [lemma, in progtaskstepLib]
free_consistent [lemma, in progtaskstepLib]
free_sub [lemma, in progtaskstepLib]
free_get [lemma, in progtaskstepLib]
free_intro [lemma, in asrtLib]
free_intro_aux2 [lemma, in asrtLib]
free_intro_aux1 [lemma, in asrtLib]
free_locality2 [lemma, in asrtLib]
free_locality2' [lemma, in asrtLib]
free_exchage [lemma, in asrtLib]
free_exchange' [lemma, in asrtLib]
free_locality [lemma, in asrtLib]
free_locality_pre [lemma, in asrtLib]
free_frame_prop [lemma, in asrtLib]
fresh [definition, in memory]
fresh_exist [lemma, in memory]
fresh_mono [lemma, in memory]
fresh_implies_fresh_index [lemma, in lmachLib]
fresh_index [definition, in lmachLib]
fresh_join [lemma, in tst_prop]
frm_asrt_prop [lemma, in ruleLib]
frp [definition, in loststepLib]
fspec [definition, in assertion]
ftype [definition, in memory]
fu [lemma, in cancel_absdata]
FullMemory [definition, in memory]
funasrt [record, in assertion]
funbody_inos [lemma, in tst_prop]
funbody'_inos [lemma, in lemmasfortoptheo]
function [definition, in language]
funsim [library]
funspec [definition, in assertion]
funtype [definition, in language]
fun_free_comp [lemma, in funsim]
fun_free_ignore [lemma, in funsim]
fun_seq_comp [lemma, in funsim]
fun_goodks [lemma, in tst_prop]
fx [definition, in InternalFunSpec]


G

GAarray [definition, in BaseAsrtDef]
GAarray_imp_length_P [lemma, in sep_pure]
GAarray_imp_length [lemma, in sep_pure]
genv_introexint_rule [constructor, in inferules]
genv_introret_rule [constructor, in inferules]
genv_introexint_rule_sound [lemma, in simplrulesound]
genv_introexint_rule_sound_aux [lemma, in simplrulesound]
genv_introret_rule_sound [lemma, in simplrulesound]
genv_introret_rule_sound_aux [lemma, in simplrulesound]
gen_MutexPostPart3 [definition, in gen_lemmas]
gen_MutexPostNoUnliftSuccReturn [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post5 [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post5' [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post3 [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post3' [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post1 [definition, in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post1' [definition, in gen_lemmas]
gen_post5' [definition, in gen_lemmas]
gen_post3' [definition, in gen_lemmas]
gen_post1' [definition, in gen_lemmas]
gen_post5 [definition, in gen_lemmas]
gen_post3 [definition, in gen_lemmas]
gen_tmp2 [definition, in gen_lemmas]
gen_tmp [definition, in gen_lemmas]
gen_MutexPostPIRdyTable2 [definition, in gen_lemmas]
gen_MutexPostPart10 [definition, in gen_lemmas]
gen_MutexPostPart3133 [definition, in gen_lemmas]
gen_MutexPostPart1 [definition, in gen_lemmas]
gen_mutex_pend_pip_is_not_hold_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_cur_prio_eql_mprio_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_not_rdy_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_idle_err_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_pip_is_not_hold_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_cur_prio_eql_mprio_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_not_rdy_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_idle_err_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_cur_err [definition, in gen_lemmas]
gen_mutex_pend_part_0 [definition, in gen_lemmas]
gen_mutex_pend_can_not_lift_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_right_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_right_to_cur' [definition, in gen_lemmas]
gen_mutex_pend_can_not_lift_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_left_to_cur [definition, in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_left_to_cur' [definition, in gen_lemmas]
gen_OSQPostProofPart2 [definition, in gen_lemmas]
gen_OSQPostProofPart1 [definition, in gen_lemmas]
gen_OSQPendRightPart2 [definition, in gen_lemmas]
gen_sempost_part_0 [definition, in gen_lemmas]
gen_sempost_part_6 [definition, in gen_lemmas]
gen_sempost_part_5 [definition, in gen_lemmas]
gen_sempost_part_4 [definition, in gen_lemmas]
gen_sempost_part_3 [definition, in gen_lemmas]
gen_sempost_part_2 [definition, in gen_lemmas]
gen_sempost_part_1 [definition, in gen_lemmas]
gen_sempend_part1 [definition, in gen_lemmas]
gen_mbox_post_part0 [definition, in gen_lemmas]
gen_mbox_post_part6 [definition, in gen_lemmas]
gen_mbox_post_part5 [definition, in gen_lemmas]
gen_mbox_post_part4 [definition, in gen_lemmas]
gen_mbox_post_part3 [definition, in gen_lemmas]
gen_mbox_post_part2 [definition, in gen_lemmas]
gen_mbox_post_part1 [definition, in gen_lemmas]
gen_mbox_pend_part0 [definition, in gen_lemmas]
gen_lemmas [library]
getabsop [definition, in assertion]
getabst [definition, in assertion]
getaddr [definition, in opsem]
getaddrlist [definition, in opsem]
getaddr_exist [lemma, in asrtLib]
getaddr_nil_empenv [lemma, in asrtLib]
getasrt [projection, in assertion]
getcs [definition, in assertion]
getfunrettype [definition, in opsem]
getgenv [definition, in assertion]
GetHPrio [definition, in absop]
GetHWait [definition, in absop]
GetHWait_In [lemma, in OSMutex_common]
getie [definition, in assertion]
getinv [projection, in assertion]
getis [definition, in assertion]
getisr [definition, in assertion]
getlenv [definition, in assertion]
getlenvdom [definition, in simulation]
getmem [definition, in assertion]
getmsg [definition, in absop]
getmsgapi [definition, in absop]
getmsg_succ [definition, in absop]
getoff [definition, in opsem]
getoff_mono [lemma, in lmachLib]
getop_del_hold [lemma, in PIF_aux]
getop_cre_hold [lemma, in PIF_aux]
getprop [projection, in assertion]
getSG [definition, in etraceref]
getsmem [definition, in assertion]
gets_m [definition, in opsem]
gets_g [definition, in opsem]
gettaskst [definition, in assertion]
gettopis [definition, in assertion]
get_last_prop [lemma, in OSMutex_common]
get_last_app [lemma, in OSEventRemovePure]
get_last_get_last_ptr_eq [lemma, in OSEventRemovePure]
get_last_ptr_ptr_in_ectrls_true [lemma, in OSEventRemovePure]
get_last_not_in_false [lemma, in OSEventRemovePure]
get_last [definition, in OSEventRemovePure]
get_is_s [definition, in assertion]
get_isr_s [definition, in assertion]
get_tcb_stat_mutex [lemma, in OSMutexPostPure]
get_mem [definition, in opsem]
get_lenv [definition, in opsem]
get_genv [definition, in opsem]
get_env [definition, in opsem]
get_tcb_stat [lemma, in OSQPostPure]
get_wellformedosq_in_setst' [lemma, in OSQPostPure]
get_wellformedosq_in_setst [lemma, in OSQPostPure]
get_last_tcb_ptr_prop' [lemma, in OSQPostPure]
get_last_tcb_ptr_prop [lemma, in OSQPostPure]
get_get_neq [lemma, in OSQPostPure]
GET_OP [definition, in PIF_def]
get_smem [definition, in language]
get_highest_rdy [lemma, in oscore_common]
get_afun [definition, in lemmasfortoptheo]
get_ifun [definition, in lemmasfortoptheo]
get_lint [definition, in lemmasfortoptheo]
get_last_prop [lemma, in semdel_pure]
get_mem_eq [lemma, in tst_prop]
get_env_eq [lemma, in asrtLib]
get_env_addrlist_ex [lemma, in asrtLib]
get_ptomvallist_less_none [lemma, in asrtLib]
get_els_len [definition, in absop]
get_tls_len [definition, in absop]
get_wellformedosq_end' [lemma, in OSQAcceptPure]
get_wellformedosq_end [lemma, in OSQAcceptPure]
get_eid_list [definition, in common]
get_eid_list' [definition, in common]
get_none_joinisig [lemma, in cancel_absdata]
get_set_ideq [lemma, in cancel_absdata]
get_set_idneq [lemma, in cancel_absdata]
get_last_tcb_ptr [definition, in InternalFunSpec]
get_highest_tcb [definition, in InternalFunSpec]
get_highest_prio [definition, in InternalFunSpec]
get_last_ptr [definition, in InternalFunSpec]
get_eidls [definition, in InternalFunSpec]
get_eid_ecbls [definition, in InternalFunSpec]
get_last_prop [lemma, in OSQDelPure]
get_last_ecb_ptr_eq [lemma, in OSTimeTickPure]
get_last_tcb_ptr_in [lemma, in OSTimeTickPure]
get_last_ecb_ptr [definition, in OSTimeTickPure]
get_ectr_decompose [lemma, in OSTimeTickPure]
get_ectr [definition, in OSTimeTickPure]
get_option_value [definition, in mathlib]
get_remove_exchange [lemma, in mathlib]
get_eidls_inlist [lemma, in mathlib]
GET_OP_remove_tid_irrel [lemma, in PIF_aux]
GET_OP_st_irrel [lemma, in PIF_aux]
get_tcb_stat_mbox [lemma, in Mbox_common]
get_last_prop [lemma, in Mbox_common]
ge_n_change [lemma, in progtaskstepLib]
ge_0_minus_1_in_range [lemma, in mathlib]
ge_zero_eq [lemma, in aux_for_hoare_lemmas]
ge0_z_nat_le [lemma, in symbolic_execution]
GlobalVariables [definition, in os_ucos_h]
GoodAcc [definition, in PIF_aux]
GoodClient [definition, in etraceref]
goodcode_h [definition, in PIF_aux]
GoodCre [definition, in PIF_aux]
gooddecl_neq [lemma, in aux_for_hoare_lemmas]
gooddecl_off_add [lemma, in aux_for_hoare_lemmas]
gooddecl_gettype [lemma, in aux_for_hoare_lemmas]
gooddecl_neq [lemma, in symbolic_execution]
gooddecl_gettype [lemma, in symbolic_execution]
GoodDel [definition, in PIF_aux]
goodeval_h [definition, in PIF_aux]
GoodFrame [definition, in assertion]
GoodFrm [definition, in inferules]
GoodFrm_sat_absop [lemma, in ruleLib]
goodfrm_prop [lemma, in ruleLib]
GoodFunAsrt [definition, in assertion]
GoodFunAsrt_invlth_isr' [lemma, in InternalFunSpec]
GoodFunAsrt_sll [lemma, in InternalFunSpec]
GoodFunAsrt_sllseg [lemma, in InternalFunSpec]
GoodFunAsrt_ecbf_sll [lemma, in InternalFunSpec]
GoodFunAsrt_ecbf_sllseg [lemma, in InternalFunSpec]
GoodFunAsrt_qblkf_sll [lemma, in InternalFunSpec]
GoodFunAsrt_qblkf_sllseg [lemma, in InternalFunSpec]
GoodFunAsrt_tcbdllseg [lemma, in InternalFunSpec]
GoodFunAsrt_dllseg [lemma, in InternalFunSpec]
GoodFunAsrt_evsllseg [lemma, in InternalFunSpec]
GoodFunAsrt_AEventData [lemma, in InternalFunSpec]
GoodFunAsrt_AOSEvent [lemma, in InternalFunSpec]
GoodFunAsrt_Aarray [lemma, in InternalFunSpec]
GoodFunAsrt_Aarray' [lemma, in InternalFunSpec]
GoodFunAsrt_Astruct [lemma, in InternalFunSpec]
GoodFunAsrt_Astruct' [lemma, in InternalFunSpec]
GoodFunAstr_AEventNode [lemma, in InternalFunSpec]
Goodg_hmstepstar [lemma, in ruleLib]
GoodI [definition, in inferules]
goodinv [lemma, in inv_prop]
GoodInvAsrt [definition, in assertion]
GoodInvAsrt_dllseg [lemma, in inv_prop]
GoodInvAsrt_AEventNode [lemma, in inv_prop]
GoodInvAsrt_Aarray [lemma, in inv_prop]
GoodInvAsrt_Aarray' [lemma, in inv_prop]
GoodInvAsrt_Astruct [lemma, in inv_prop]
GoodInvAsrt_Astruct' [lemma, in inv_prop]
goodinv_atoy [lemma, in inv_prop]
goodinv_aemp [lemma, in inv_prop]
goodI_sw_empO [lemma, in ruleLib]
GoodI_I [lemma, in hoare_tactics]
goodI_swinv_samet [lemma, in lemmasfortoptheo]
GoodI_SWINV_indom_curt [lemma, in lemmasfortoptheo]
goodks [definition, in auxdef]
goodks_int_call_inos [lemma, in tst_prop]
goodks_int_call_inos' [lemma, in tst_prop]
goodks_call_inos [lemma, in tst_prop]
goodks_int_inos [lemma, in tst_prop]
goodks_int_int_inos [lemma, in tst_prop]
goodks_int_inos' [lemma, in tst_prop]
goodks_intcont_os [lemma, in tst_prop]
goodks_callcont_os [lemma, in tst_prop]
goodks_intcont_still [lemma, in tst_prop]
goodks_callcont_still [lemma, in tst_prop]
goodks_noinos_noos [lemma, in tst_prop]
goodks_h [definition, in PIF_aux]
GoodPend [definition, in PIF_aux]
GoodPost [definition, in PIF_aux]
GoodP_to_S [lemma, in lemmasfortoptheo]
GoodSched [definition, in inferules]
GoodSched_GetHPrio [lemma, in hoare_tactics]
GoodStmt [definition, in etraceref]
GoodStmt_ndym [lemma, in ruleLib]
Goodstmt_good_clt_stmt [lemma, in progtaskstepLib]
goodstmt_n_dym_com_s [lemma, in lemmasfortoptheo]
GoodStmt_to_GoodStmt' [lemma, in lemmasfortoptheo]
goodstmt_h [definition, in PIF_aux]
GoodStmt_h [definition, in PIF_aux]
GoodStmt' [definition, in inferules]
goodstmt'_n_dym_com_s [lemma, in lemmasfortoptheo]
goodtasks_h [definition, in PIF_aux]
GoodTick [definition, in PIF_aux]
GoodToy [definition, in PIF_aux]
good_i [lemma, in ucos_correctaux]
good_fun_internal [lemma, in ucos_correctaux]
good_fun_api [lemma, in ucos_correctaux]
good_dl_le_care [lemma, in progtaskstepLib]
good_dl_le_step' [lemma, in progtaskstepLib]
good_dl_le_init' [lemma, in progtaskstepLib]
good_clt_scont_callcont [lemma, in progtaskstepLib]
good_cli_pu [definition, in toptheorem]
Good_Clt_Stmt [definition, in toptheorem]
good_os_pu [definition, in toptheorem]
good_call [definition, in toptheorem]
good_dl_le [definition, in auxdef]
good_is_S [definition, in auxdef]
good_is [definition, in auxdef]
good_clt [definition, in auxdef]
good_clt_scont [definition, in auxdef]
good_clt_cureval [definition, in auxdef]
good_clt_stmt [definition, in auxdef]
good_t_ks [definition, in auxdef]
good_dl_add [lemma, in tst_prop]
good_inv_prop_iret [lemma, in tst_prop]
good_inv_prop' [lemma, in tst_prop]
good_inv [lemma, in tst_prop]
good_fun_asrt_absop [lemma, in asrtLib]
good_frame_asrt_prop [lemma, in asrtLib]
good_inv_prop [lemma, in asrtLib]
good_env_decllist [definition, in loststepLib]
GOOD_ST_Prop [lemma, in PIF_aux]
GOOD_ST_Prop' [lemma, in PIF_aux]
good_clt_imp [lemma, in PIF_aux]
good_client_code [definition, in PIF_aux]
good_api_stmt [definition, in PIF_aux]
GOOD_API_CODE [definition, in PIF_aux]
GOOD_ST [definition, in PIF_aux]
good_frm_AOSRdyTblGrp [lemma, in sep_pure]
good_frm_AOSRdyGrp [lemma, in sep_pure]
good_frm_AOSRdyTbl [lemma, in sep_pure]
good_frm_AOSTCBFreeList [lemma, in sep_pure]
good_frm_AOSTCBList [lemma, in sep_pure]
good_frm_AGVars [lemma, in sep_pure]
good_frm_AOSTime [lemma, in sep_pure]
good_frm_AOSIntNesting [lemma, in sep_pure]
good_frm_AOSTCBPrioTbl [lemma, in sep_pure]
good_frm_AOSUnMapTbl [lemma, in sep_pure]
good_frm_AOSMapTbl [lemma, in sep_pure]
good_frm_AMsgQList [lemma, in sep_pure]
good_frm_EventList' [lemma, in sep_pure]
good_frm_AOSQFreeBlk [lemma, in sep_pure]
good_frm_AOSQFreeList [lemma, in sep_pure]
good_frm_qblkf_sll [lemma, in sep_pure]
good_frm_qblkf_sllseg [lemma, in sep_pure]
good_frm_AOSEventFreeList [lemma, in sep_pure]
good_frm_ecbfsll [lemma, in sep_pure]
good_frm_ecbfslleg [lemma, in sep_pure]
good_frm_mqsllseg [lemma, in sep_pure]
good_frm_amsgnode [lemma, in sep_pure]
good_frm_AMsgData [lemma, in sep_pure]
good_frm_AOSQCtr [lemma, in sep_pure]
good_frm_AOSQBlk [lemma, in sep_pure]
good_frm_AOSEvent [lemma, in sep_pure]
good_frm_node [lemma, in sep_pure]
good_frm_AOSEventTbl [lemma, in sep_pure]
good_frm_ptr [lemma, in sep_pure]
good_frm_lvar [lemma, in sep_pure]
good_frm_gvar [lemma, in sep_pure]
good_frm_absop [lemma, in sep_pure]
good_frm_pure [lemma, in sep_pure]
good_frm_garray [lemma, in sep_pure]
good_frm_array [lemma, in sep_pure]
good_frm_array' [lemma, in sep_pure]
good_frm_tcbdllseg [lemma, in sep_pure]
good_frm_dllseg [lemma, in sep_pure]
good_frm_sll [lemma, in sep_pure]
good_frm_sllseg [lemma, in sep_pure]
good_frm_astruct [lemma, in sep_pure]
good_frm_astruct' [lemma, in sep_pure]
good_frm_lenv [lemma, in sep_pure]
good_frm_aemp [lemma, in sep_pure]
good_frm_ex [lemma, in sep_pure]
good_frm_star [lemma, in sep_pure]
good_decllist [definition, in simulation]
gvarlist1 [definition, in os_ucos_h]
gvarlist2 [definition, in os_ucos_h]
gvarlist3 [definition, in os_ucos_h]
gvar_off_zero [lemma, in oscore_common]
gvar_rv [lemma, in symbolic_execution]
gvar_rv' [lemma, in symbolic_execution]
gvar_to_lv [lemma, in symbolic_execution]


H

hapienter_step [constructor, in opsem]
hapiexit_step [constructor, in opsem]
hapistep [inductive, in opsem]
hapistep_eqdomO [lemma, in progtaskstepLib]
hapistep_AddKsToTail [lemma, in progtaskstepLib]
hapistep_tidsame [lemma, in progtaskstepLib]
hapistep_goodcode [lemma, in PIF_aux]
hapistep1_locality [lemma, in progtaskstepLib]
hapi_step [constructor, in opsem]
hapi_code [constructor, in language]
hclt_stepev [constructor, in opsem]
HCurTCB [abbreviation, in OSTCBInvDef]
HECBList [abbreviation, in OSTCBInvDef]
HETr [inductive, in etraceref]
HETr_abt [constructor, in etraceref]
HETr_e [constructor, in etraceref]
HETr_ne [constructor, in etraceref]
HETr_emp [constructor, in etraceref]
hid [definition, in language]
hidapi_step [constructor, in opsem]
higherint [definition, in language]
higherint_update_eq [lemma, in tst_prop]
HighestRdy [definition, in PIF_def]
highest_rdy_eq [lemma, in oscore_common]
highest_rdy_eq' [lemma, in oscore_common]
highest_rdy [definition, in oscore_common]
highpri [definition, in language]
highpri' [definition, in language]
hinten_step [constructor, in opsem]
hintex_step [constructor, in opsem]
hi_step [constructor, in opsem]
hmstep [abbreviation, in simulation]
hmstepstar [abbreviation, in simulation]
hmstepstart_dom_exprop [lemma, in ruleLib]
hmstepstar_eqdomO [lemma, in ruleLib]
hmstepstar_seq [lemma, in conseqsound]
hmstepstar_tidsame [lemma, in progtaskstepLib]
hmstepstar_trans [lemma, in asrtLib]
hmstepS_One [lemma, in cancel_absdata]
hmstep_locality [lemma, in ruleLib]
hmstep_eqdomO [lemma, in ruleLib]
hmstep_disj [lemma, in progtaskstepLib]
hmstep_locality' [lemma, in progtaskstepLib]
hmstep_locality [lemma, in progtaskstepLib]
hmstep_tidsame [lemma, in progtaskstepLib]
hmstep_merge_emp [lemma, in absop_rules]
hmstep1_disj [lemma, in progtaskstepLib]
hmstestar_disj [lemma, in asrtLib]
hn_tlmatch_abt [lemma, in progtaskstepLib]
hoare_disj_afalse_r_pre [lemma, in hoare_tactics]
hoare_disj_afalseP_l_pre [lemma, in hoare_tactics]
hoare_disj_afalseP_r_pre [lemma, in hoare_tactics]
hoare_disj_afalse_l_pre [lemma, in hoare_tactics]
hoare_pure_gen' [lemma, in oscore_common]
hoare_pure_gen [lemma, in oscore_common]
hoare_tactics [library]
hoare_lemmas [library]
hoare_conseq [library]
hoare_assign [library]
hpabt_step [constructor, in opsem]
hprog [definition, in language]
hpstep [inductive, in opsem]
hpstepabt [inductive, in opsem]
hpstepabtstar [inductive, in opsem]
hpstepev [inductive, in opsem]
hpstepevstar [inductive, in opsem]
hpstepev_eqdomTO [lemma, in progtaskstepLib]
hpstepev_eqdomto [lemma, in progtaskstepLib]
hpstepstar [inductive, in opsem]
hpstepstar_goodcode_h [lemma, in PIF_aux]
hpstep_star [lemma, in progtaskstepLib]
hpstep_eqdomO [lemma, in progtaskstepLib]
hpstep_eqdomto [lemma, in progtaskstepLib]
hpstep_pif_hold [lemma, in PIF_aux]
hpstep_wpif_hold [lemma, in PIF_aux]
hpstep_inv_prop_hold [lemma, in PIF_aux]
hpstep_goodcode_goodapi [lemma, in PIF_aux]
hpstep_goodcode_h [lemma, in PIF_aux]
hpt_stepev [constructor, in opsem]
hp_stepstarabt [constructor, in opsem]
hp_stepev [constructor, in opsem]
hp_stepS [constructor, in opsem]
hp_stepO [constructor, in opsem]
hp_step [constructor, in opsem]
hret_spec [lemma, in lemmasfortoptheo]
Hstepstar_with_ev [lemma, in etraceref]
Hstepstar_no_ev [lemma, in etraceref]
hswi_step [constructor, in opsem]
ht [module, in mathlib]
htabtstar [constructor, in opsem]
HTCBList [abbreviation, in OSTCBInvDef]
htclt_step [constructor, in opsem]
htev_stepstar [constructor, in opsem]
HTime [abbreviation, in OSTCBInvDef]
htistep [inductive, in opsem]
htistep_eqdomO [lemma, in progtaskstepLib]
htstep [inductive, in opsem]
htstepabt [inductive, in opsem]
htstepabtstar [inductive, in opsem]
htstepev [inductive, in opsem]
htstepevstar [inductive, in opsem]
htstepevstar_tidsame [lemma, in progtaskstepLib]
htstepstar [inductive, in opsem]
htstepstar_compose_tail [lemma, in ruleLib]
htstepstar_tidsame [lemma, in progtaskstepLib]
htstep_abt [constructor, in opsem]
htstep_locality [lemma, in progtaskstepLib]
htstep_eqdomO [lemma, in progtaskstepLib]
htstep_locality' [lemma, in progtaskstepLib]
htstep_AddKsToTail [lemma, in progtaskstepLib]
htstep_tidsame [lemma, in progtaskstepLib]
htstep_goodcode_h [lemma, in PIF_aux]
htstep1_locality [lemma, in progtaskstepLib]
ht_starS [constructor, in opsem]
ht_starO [constructor, in opsem]
ht.and_xy_x [lemma, in mathlib]
ht.a_mult_b_ge_b [lemma, in mathlib]
ht.a_div_b_multi_b_plus_b_ge_a [lemma, in mathlib]
ht.disj_star_elim'' [lemma, in mathlib]
ht.div_in_intrange [lemma, in mathlib]
ht.div_lt_lt [lemma, in mathlib]
ht.if_eq_true_cond_is_true [lemma, in mathlib]
ht.int_not_0_sz_not_0 [lemma, in mathlib]
ht.le_is_ge [lemma, in mathlib]
ht.lt_is_gt [lemma, in mathlib]
ht.lt_imply_le [lemma, in mathlib]
ht.mod_0_div_eq_eq [lemma, in mathlib]
ht.nthval'_has_value [lemma, in mathlib]
hworld [definition, in language]
h_has_same_msg [lemma, in OSQAcceptPure]


I

i [definition, in os_code_defs]
I [definition, in inv_prop]
ident [definition, in memdata]
identity_step_msim_hold [lemma, in ruleLib]
identspec [module, in memory]
identspec.A [definition, in memory]
identspec.beq [definition, in memory]
identspec.beq_false_neq [lemma, in memory]
identspec.beq_true_eq [lemma, in memory]
identspec.blt [definition, in memory]
identspec.blt_beq_dec [lemma, in memory]
identspec.blt_asym [lemma, in memory]
identspec.blt_irrefl [lemma, in memory]
identspec.blt_trans [lemma, in memory]
identspec.eq_beq_true [lemma, in memory]
identspec.neq_beq_false [lemma, in memory]
idle_in_rtbl_hold' [lemma, in OSMutexPostPure]
idle_in_rtbl_hold' [lemma, in OSQPostPure]
idle_in_rtbl_hold [lemma, in mathlib]
id_nth [definition, in BaseAsrtDef]
id_nth' [definition, in BaseAsrtDef]
id_addrval [definition, in BaseAsrtDef]
id_nth_eq [lemma, in aux_for_hoare_lemmas]
id_nth'_suc [lemma, in aux_for_hoare_lemmas]
id_nth_ge [lemma, in aux_for_hoare_lemmas]
id_addrval' [definition, in OSQInvDef]
id_nth_ueq_0 [lemma, in symbolic_execution]
id_nth_eq_0 [lemma, in symbolic_execution]
id_nth_eq [lemma, in symbolic_execution]
id_nth'_suc [lemma, in symbolic_execution]
id_nth_ge [lemma, in symbolic_execution]
ie [definition, in language]
ieoff [abbreviation, in assertion]
ieon [abbreviation, in assertion]
ifE [lemma, in OSMutex_common]
iff_intro_swap [lemma, in LibTactics]
ifsound [library]
ift_rule_sound [lemma, in ifsound]
ift_rule [constructor, in inferules]
ift_rule'' [lemma, in hoare_tactics]
ift_rule' [lemma, in hoare_tactics]
ift_rule_general [lemma, in hoare_tactics]
ift_rule_general' [lemma, in sem_lab]
ifun [definition, in os_cpu_a]
if_rule_sound [lemma, in ifsound]
if_rule [constructor, in inferules]
if_rule2' [lemma, in hoare_lemmas]
if_rule2 [lemma, in hoare_lemmas]
if_rule' [lemma, in hoare_lemmas]
if_true_false_eq_false_intro [lemma, in type_val_match]
if_true_false_eq_false_elim [lemma, in type_val_match]
if_true_false_eq_true_intro [lemma, in type_val_match]
if_true_false_eq_true_elim [lemma, in type_val_match]
ih_no_lvar' [lemma, in ToyIntPure]
ih_no_lvar [lemma, in OSTimeTickPure]
II [definition, in assertion]
ImplMonoL [lemma, in tacticsforseplog]
ImplMonoR [lemma, in tacticsforseplog]
imp_rl_priotbl_p [lemma, in common]
imp_isrclr [lemma, in common]
inapi_step [constructor, in opsem]
include [library]
includeLib [library]
incl_same_head [lemma, in Coqlib]
incl_app_inv_r [lemma, in Coqlib]
incl_app_inv_l [lemma, in Coqlib]
incl_cons_inv [lemma, in Coqlib]
indom_join_a2b [lemma, in OSMutex_common]
indom_eq_join_eq [lemma, in mathlib]
inferules [library]
InfRules [inductive, in inferules]
infrules_swap_r [lemma, in sem_lab]
infrules_swap_l [lemma, in sem_lab]
InitAemp [lemma, in tst_prop]
InitAsrt [definition, in etraceref]
InitG [axiom, in simulation]
InitTaskAsrt [definition, in assertion]
InitTasks [definition, in etraceref]
InitTaskSt [definition, in auxdef]
inittasks_good_t_ks [lemma, in tst_prop]
init_mem_get_some [lemma, in lmachLib]
init_mem_not_in_dom [lemma, in lmachLib]
init_mem [definition, in lmachLib]
init_st [definition, in PIF_def]
init_asrt [definition, in toptheorem]
init_goodis [lemma, in lemmasfortoptheo]
init_empisr [lemma, in tst_prop]
init_emple [lemma, in tst_prop]
init_tst_oemp [lemma, in tst_prop]
init_rdy_empm [lemma, in tst_prop]
INIT_EVENT_TBL [abbreviation, in InternalFunSpec]
init_goodks_h' [lemma, in PIF_aux]
init_goodks_h [lemma, in PIF_aux]
init_spec [library]
inj_pointer [definition, in memdata]
inj_proj_bytes [lemma, in memdata]
inj_bytes [definition, in memdata]
inj_pair2 [axiom, in LibTactics]
inlist_ex [lemma, in mathlib]
InOS [definition, in opsem]
inos_int' [lemma, in progtaskstepLib]
inos_step_still [lemma, in progtaskstepLib]
inos_lift [lemma, in lemmasfortoptheo]
inos_call [lemma, in tst_prop]
inos_call' [lemma, in tst_prop]
inos_int [lemma, in tst_prop]
inos_sw_still [lemma, in tst_prop]
insert_star [lemma, in aux_for_hoare_lemmas]
insert_star [lemma, in symbolic_execution]
int [abbreviation, in Integers]
Int [module, in Integers]
int [definition, in IntBool]
intandcomm [lemma, in OSMutex_common]
IntBool [library]
intbound [definition, in PIF_aux]
intcbnotvhold [lemma, in OSMutex_common]
intcont [definition, in opsem]
intcont_dec [lemma, in progtaskstepLib]
intcont_ndym [lemma, in progtaskstepLib]
intcont_kcall_intcont [lemma, in progtaskstepLib]
intcont_notnone_callcont_none [lemma, in progtaskstepLib]
intcont_calcont_not_none [lemma, in contLib]
intcont_addkcall_imply_intcont_addkcall_exist [lemma, in contLib]
intcont_addkcall_imply_intcont [lemma, in contLib]
intcont_addkcall_exist [lemma, in contLib]
intcont_intcont_none [lemma, in contLib]
intcont_some_kcall_none [lemma, in contLib]
intcont_none [lemma, in contLib]
intcont_nont_addstmt_prev [lemma, in contLib]
intcont_none_addcont [lemma, in contLib]
intcont_none_addstmsts_rev [lemma, in contLib]
intcont_none_addstmts [lemma, in contLib]
intcont_some_addstmts [lemma, in contLib]
intcont_some_addcont [lemma, in contLib]
intcont_local [lemma, in tst_prop]
Integers [library]
inteq_has_value [lemma, in OSMutex_common]
InternalFunSpec [library]
internal_fun_list [definition, in os_program]
InterRule [inductive, in toprule]
interrupt_list [definition, in os_program]
inter_rule [constructor, in toprule]
IntExitProof [library]
intlemmaf [lemma, in OSMutex_common]
intlemmag [lemma, in OSMutex_common]
intlemma1 [lemma, in OSMutex_common]
intlemma1 [lemma, in MboxCreatePure]
intlemma11 [lemma, in OSMutex_common]
intlemma13 [lemma, in OSMutex_common]
IntLib [library]
intlt2intlt [lemma, in OSMutex_common]
intlt2nat [lemma, in OSMutex_common]
IntMethSim [lemma, in lemmasfortoptheo]
intorcomm [lemma, in OSMutex_common]
IntSeq' [lemma, in lemmasfortoptheo]
IntSeq'' [lemma, in lemmasfortoptheo]
intunit [definition, in language]
int_ltu_maxq_eq [lemma, in OSQCreatePure]
int_ltu_zero_notbool_zero_true [lemma, in OSMutex_common]
int_ltu_zero_zero_false [lemma, in OSMutex_common]
int_ltu_zero_notbool_one_false [lemma, in OSMutex_common]
int_ltu_zero_one_true [lemma, in OSMutex_common]
int_ltu_prop [lemma, in OSMutex_common]
int_aux'' [lemma, in OSMutex_common]
int_aux' [lemma, in OSMutex_common]
int_auxxx [lemma, in OSMutex_common]
int_eq_true_eq [lemma, in OSEventRemovePure]
int_nabt_lift [lemma, in progtaskstepLib]
int_mem_trans [lemma, in progtaskstepLib]
int_code [definition, in language]
int_bpr'_to_bpr [lemma, in lemmasfortoptheo]
int_ndymint_false [lemma, in lemmasfortoptheo]
int_inos_sw_still [lemma, in tst_prop]
int_lift_rule [lemma, in tst_prop]
int_wordsize_divides_modulus [lemma, in Integers]
int_eq_dec [lemma, in IntBool]
int_eq_false_false [lemma, in OSTimeTickPure]
int_dec_zero_one [lemma, in OSTimeTickPure]
int_not_shrl_and [lemma, in mathlib]
int_ltu_neq_zero [lemma, in mathlib]
int_ltu_eq_false [lemma, in mathlib]
int_add_lt_max [lemma, in mathlib]
int_ltu_shru_ltu [lemma, in mathlib]
int_nat_ltu_lt [lemma, in mathlib]
int_list_length_dec [lemma, in mathlib]
int_minus4_mod4 [lemma, in mathlib]
int_divu_zero [lemma, in mathlib]
int_ltu_false_eq0 [lemma, in mathlib]
int_ltu_true [lemma, in mathlib]
int_eq_false_ltu [lemma, in mathlib]
int_or_zero_split [lemma, in mathlib]
int_unsigned_inj [lemma, in mathlib]
int_usigned_tcb_range [lemma, in mathlib]
Int_eq_false_Vptr_neq [lemma, in mathlib]
int_unsigned_or_prop' [lemma, in mathlib]
int_unsigned_le_z2nat_lt [lemma, in mathlib]
int_iwordsize_gt_3 [lemma, in mathlib]
int_lemma1 [lemma, in mathlib]
int_unsigned_or_prop [lemma, in mathlib]
int_usign_eq [lemma, in mathlib]
int_true_le255 [lemma, in mathlib]
int_land_zero [lemma, in mathlib]
int_aux [lemma, in mathlib]
int_not_leq [lemma, in mathlib]
int_count_eq [lemma, in aux_for_hoare_lemmas]
int_Z_lt [lemma, in aux_for_hoare_lemmas]
Int_i2_i_1_iftrue [lemma, in sep_pure]
Int_i2_i_1 [lemma, in sep_pure]
int_Z_ltu [lemma, in symbolic_execution]
Int_modu_to_Z_mod [lemma, in symbolic_execution]
Int_div_to_Z_div [lemma, in symbolic_execution]
int_spec [definition, in os_spec]
int_spec_list [definition, in os_spec]
int16 [abbreviation, in Integers]
Int16 [module, in Integers]
int16_max_unsigned_val [lemma, in type_val_match]
int32 [abbreviation, in Integers]
int32_inj_neq_Vundef [lemma, in sep_pure]
int64 [abbreviation, in Integers]
Int64 [module, in Integers]
Int64.bits_ofwords [lemma, in Integers]
Int64.bits_hiword [lemma, in Integers]
Int64.bits_loword [lemma, in Integers]
Int64.bits_shr' [lemma, in Integers]
Int64.bits_shru' [lemma, in Integers]
Int64.bits_shl' [lemma, in Integers]
Int64.decompose_le [lemma, in Integers]
Int64.decompose_lt [lemma, in Integers]
Int64.decompose_leu [lemma, in Integers]
Int64.decompose_ltu [lemma, in Integers]
Int64.decompose_mul_2 [lemma, in Integers]
Int64.decompose_mul [lemma, in Integers]
Int64.decompose_sub' [lemma, in Integers]
Int64.decompose_sub [lemma, in Integers]
Int64.decompose_add [lemma, in Integers]
Int64.decompose_shr_2 [lemma, in Integers]
Int64.decompose_shr_1 [lemma, in Integers]
Int64.decompose_shru_2 [lemma, in Integers]
Int64.decompose_shru_1 [lemma, in Integers]
Int64.decompose_shl_2 [lemma, in Integers]
Int64.decompose_shl_1 [lemma, in Integers]
Int64.decompose_not [lemma, in Integers]
Int64.decompose_xor [lemma, in Integers]
Int64.decompose_or [lemma, in Integers]
Int64.decompose_and [lemma, in Integers]
Int64.decompose_bitwise_binop [lemma, in Integers]
Int64.eqm_mul_2p32 [lemma, in Integers]
Int64.hiword [definition, in Integers]
Int64.hi_ofwords [lemma, in Integers]
Int64.iwordsize' [definition, in Integers]
Int64.loword [definition, in Integers]
Int64.lo_ofwords [lemma, in Integers]
Int64.mul' [definition, in Integers]
Int64.mul'_mulhu [lemma, in Integers]
Int64.ofwords [definition, in Integers]
Int64.ofwords_add'' [lemma, in Integers]
Int64.ofwords_add' [lemma, in Integers]
Int64.ofwords_add [lemma, in Integers]
Int64.ofwords_recompose [lemma, in Integers]
Int64.shl' [definition, in Integers]
Int64.shru' [definition, in Integers]
Int64.shr' [definition, in Integers]
int8 [abbreviation, in Integers]
int8ule255 [lemma, in OSMutex_common]
int8_range_nat [lemma, in mathlib]
int8_neq0_ex [lemma, in mathlib]
INUM [definition, in language]
INV [definition, in assertion]
Inv [definition, in assertion]
invasrt [record, in assertion]
invisr_imply_noisr' [lemma, in tst_prop]
invisr_imply_noisr [lemma, in tst_prop]
invlth_isr [definition, in assertion]
invlth_noisr [definition, in assertion]
invlth_isr_invlth_isr'_imp [lemma, in OSIntExitPure]
invlth_isr_minus' [lemma, in tst_prop]
invlth_isr_minus [lemma, in tst_prop]
invlth_isr_add_iret [lemma, in tst_prop]
invlth_add_sinum' [lemma, in tst_prop]
invlth_divide [lemma, in tst_prop]
invlth_add_sinum [lemma, in tst_prop]
invlth_isr_add' [lemma, in tst_prop]
invlth_isr_add [lemma, in tst_prop]
invlth_noisr' [definition, in derivedrules]
invlth_isr' [definition, in InternalFunSpec]
invnoisr_imply_isr' [lemma, in derivedrules]
invp [projection, in assertion]
invprop [lemma, in inv_prop]
invprop_atoyinv [lemma, in inv_prop]
invprop_aemp [lemma, in inv_prop]
inv_ieoff [definition, in assertion]
inv_ieon [definition, in assertion]
inv_prop [definition, in assertion]
inv_isr_prop [definition, in assertion]
inv_isr_irrev_prop_noempisr [lemma, in tst_prop]
inv_noisr_irrev_prop_enint [lemma, in tst_prop]
inv_ncare_le [lemma, in tst_prop]
inv_ncare_ab [lemma, in tst_prop]
inv_substask_emple [lemma, in tst_prop]
inv_isr_irrev_prop'' [lemma, in tst_prop]
inv_isr_irrev_prop' [lemma, in tst_prop]
inv_isr_prop [lemma, in asrtLib]
inv_destr [lemma, in asrtLib]
inv_simpl [lemma, in asrtLib]
INV_irrev_prop [lemma, in asrtLib]
inv_noisr_irrev_prop [lemma, in asrtLib]
inv_isr_irrev_prop [lemma, in asrtLib]
inv_precise_imply_eqo [lemma, in asrtLib]
inv_precise_imply_eqm [lemma, in asrtLib]
inv_precise_prop [lemma, in asrtLib]
INV_PROP [definition, in PIF_aux]
inv_prop [library]
in_ptbl_no_ct_get [lemma, in OSEventTaskRdyPure]
in_list_repeat [lemma, in Coqlib]
in_app [lemma, in Coqlib]
in_cns [lemma, in Coqlib]
in_wtset_rm_notin [lemma, in OSQPostPure]
in_remove_tid' [lemma, in OSTimeTickPure]
in_remove_tid [lemma, in OSTimeTickPure]
in_neq_remove_in [lemma, in OSTimeTickPure]
in_remove_in [lemma, in OSTimeTickPure]
in_remove_tid_false [lemma, in OSTimeTickPure]
in_TCBList_P_TCBNode_P [lemma, in OSTimeTickPure]
in_get_eidls [lemma, in mathlib]
in_decllist_field_offsetfld_some [lemma, in aux_for_hoare_lemmas]
In_remove_tid_false [lemma, in PIF_aux]
In_remove_tid' [lemma, in PIF_aux]
In_remove_tid [lemma, in PIF_aux]
in_decllist [definition, in simulation]
ipreasrt [definition, in auxdef]
ipreasrt' [definition, in auxdef]
iretasrt [definition, in auxdef]
iretasrt' [definition, in auxdef]
iret_ieoff [definition, in assertion]
iret_ieon [definition, in assertion]
iret_rule [constructor, in inferules]
iret_spec [lemma, in tst_prop]
iret_rule' [lemma, in derivedrules]
IRINV [definition, in assertion]
IRINV_irrev_prop [lemma, in asrtLib]
is [definition, in language]
isalloc [definition, in ruleLib]
isallocate [definition, in loststepLib]
isarray_type [definition, in symbolic_execution]
isched [definition, in absop]
IsCur [axiom, in pif_theory]
IsEnd [definition, in opsem]
IsFcall [definition, in opsem]
IsFcall_kstop [lemma, in asrtLib]
isfree [definition, in ruleLib]
IsIRet [definition, in opsem]
isiret_nabt [lemma, in progtaskstepLib]
IsOwner [axiom, in pif_theory]
isptr [definition, in BaseAsrtDef]
isptr_zh [lemma, in OSMutex_common]
isptr_val_inj_vundef [lemma, in OSEventRemovePure]
isptr_vundef1 [lemma, in OSEventRemovePure]
isptr_zh [lemma, in OSQPostPure]
isptr_zh [lemma, in OSQPendProof]
isptr_is_definitely_ptr [lemma, in laby]
isptr_is_definitely_ptr [lemma, in lab]
isptr_ecbf_sllseg [lemma, in inv_prop]
isptr_ecbf_sll [lemma, in inv_prop]
isptr_list_tail_add [lemma, in mathlib]
isptr_length_nth [lemma, in mathlib]
isptr_val_inj_false [lemma, in mathlib]
isptr_vundef_not [lemma, in mathlib]
isptr_vundef2 [lemma, in mathlib]
isptr_list [definition, in OSQInvDef]
isptr_val_inj_neqvundef [lemma, in sep_pure]
isptr_pointer_intro [lemma, in sep_pure]
isptr_match_eq_true [lemma, in sep_pure]
isptr_neq_notint_vundef [lemma, in sep_pure]
isptr_neq_vundef [lemma, in sep_pure]
isptr2_bool_and [lemma, in sep_pure]
isptr2_bool_not_vundef [lemma, in sep_pure]
isr [definition, in language]
isrclr [definition, in assertion]
isrclr_imp [lemma, in common]
IsRdy [axiom, in pif_theory]
isrdy [definition, in os_code_defs]
isrdy [definition, in language]
isrdy [definition, in absop]
IsRet [definition, in opsem]
IsRetE [definition, in opsem]
isrete_nabt [lemma, in progtaskstepLib]
isret_nabt [lemma, in progtaskstepLib]
isrnclear_nordy [lemma, in tst_prop]
isrupd [definition, in language]
isrupd_true_false [lemma, in OSTimeTickPure]
isrupd_empisr [lemma, in OSTimeTickPure]
isr_inv [definition, in assertion]
isr_true_S_i_rev [lemma, in tst_prop]
isr_false_inv_eq [lemma, in tst_prop]
isr_true_S_i' [lemma, in tst_prop]
isr_true_aux [lemma, in tst_prop]
isr_false_sat1 [lemma, in tst_prop]
isr_false_eq [lemma, in tst_prop]
isr_false_inv_eq' [lemma, in derivedrules]
isr_false_inv_eq [lemma, in derivedrules]
isr_is_prop_emp [lemma, in common]
isr_is_prop [definition, in OSQInvDef]
IsSwitch [definition, in opsem]
istrue [definition, in opsem]
iswaiting_del_hold [lemma, in PIF_aux]
iswaiting_cre_hold [lemma, in PIF_aux]
iswaiting_set_ct_neq_hold [lemma, in PIF_aux]
IsWt [axiom, in pif_theory]
is_tail_trans [lemma, in Coqlib]
is_tail_incl [lemma, in Coqlib]
is_tail_cons_left [lemma, in Coqlib]
is_tail_in [lemma, in Coqlib]
is_tail_cons [constructor, in Coqlib]
is_tail_refl [constructor, in Coqlib]
is_tail [inductive, in Coqlib]
is_length [definition, in opsem]
is_int_type [definition, in opsem]
IS_WAITING_E [definition, in PIF_def]
IS_WAITING [definition, in PIF_def]
IS_OWNER_P [definition, in PIF_def]
IS_OWNER [definition, in PIF_def]
is_nest [definition, in auxdef]
is_orderset_remove_mid [lemma, in asrtLib]
is_orderset_sub_l [lemma, in asrtLib]
is_orderset_sub_r [lemma, in asrtLib]
is_orderset_get'_none [lemma, in asrtLib]
is_isr_qblkf_sllseg [lemma, in inv_prop]
is_isr_tcbdllseg [lemma, in inv_prop]
is_isr_dllseg [lemma, in inv_prop]
is_isr_qblkf_evsllseg [lemma, in inv_prop]
is_isr_AEventNode [lemma, in inv_prop]
is_isr_AEventData [lemma, in inv_prop]
is_isr_AOSEvent [lemma, in inv_prop]
is_isr_irrel_sll [lemma, in inv_prop]
is_isr_irrel_sllseg [lemma, in inv_prop]
is_isr_irrel_Aarray [lemma, in inv_prop]
is_isr_irrel_Aarray' [lemma, in inv_prop]
is_isr_irrel_node [lemma, in inv_prop]
is_isr_irrel_Astruct [lemma, in inv_prop]
is_isr_irrel_Astruct' [lemma, in inv_prop]
is_length_neq_zero_elim [lemma, in mathlib]
is_owner_set_other [lemma, in PIF_aux]
IS_OWNER_P_remove_tid_irrel [lemma, in PIF_aux]
IS_OWNER_remove_tid_irrel' [lemma, in PIF_aux]
IS_OWNER_remove_tid_irrel [lemma, in PIF_aux]
ItrpRule [inductive, in toprule]
itrp_rule [constructor, in toprule]


J

joinenvmem [definition, in loststepLib]
joinisig_get_none [lemma, in cancel_absdata]
joinmem [definition, in assertion]
joinmemLib [library]
joinmem_eqg [lemma, in joinmemLib]
joinmem_get_disj [lemma, in joinmemLib]
joinmem_emple [lemma, in tst_prop]
joinmem_get_env_eq [lemma, in asrtLib]
joinmem_prop_in [lemma, in asrtLib]
joinmem_intro [lemma, in asrtLib]
joinsig_join_sig2 [lemma, in mathlib_join]
joinsig_join_sig2_my [lemma, in mathlib_join]
joinsig_join_ex [lemma, in mathlib_join]
joinsig_join_ex_my [lemma, in mathlib_join]
joinsig_get_minus [lemma, in OSTimeTickPure]
joinsig_in_other [lemma, in OSTimeTickPure]
joinsig_emp [lemma, in OSTimeTickPure]
joinsig_eq [lemma, in OSTimeTickPure]
joinsig_join_joinmergesig_eq_set [lemma, in OSTimeTickPure]
joinsig_joinsig_neq_ecb [lemma, in OSTimeTickPure]
joinsig_joinsig_neq [lemma, in OSTimeTickPure]
joinsig_false [lemma, in OSTimeTickPure]
joinsig_listset_con [lemma, in OSTimeTickPure]
joinsig_beq_addrval_false_get [lemma, in OSTimeTickPure]
joinsig_get_none [lemma, in mathlib]
joinsig_join_getnone [lemma, in mathlib]
joinsig_neq_get [lemma, in PIF_aux]
joinsig_joinsig_eq [lemma, in PIF_aux]
joinsig_join_ex [lemma, in Mbox_common]
joinsig_join_ex_my [lemma, in Mbox_common]
joinsig3_neqtid_joinsig [lemma, in OSTimeTickPure]
join_sig_minus_tcb [lemma, in OSEventTaskRdyPure]
join_eqenv [lemma, in joinmemLib]
join_join_getlenv [lemma, in joinmemLib]
join_join_getgenv [lemma, in joinmemLib]
join_eq_dom_env [lemma, in joinmemLib]
join_join_intro' [lemma, in joinmemLib]
join_swinv_prop_rev [lemma, in joinmemLib]
join_swinv_prop [lemma, in joinmemLib]
join_join_intro [lemma, in joinmemLib]
join_disj_disj [lemma, in joinmemLib]
join_memj_intro [lemma, in joinmemLib]
join_inject [lemma, in joinmemLib]
join_sub_inv_rev [lemma, in joinmemLib]
join_sub_inv [lemma, in joinmemLib]
join_frame_dis [lemma, in joinmemLib]
join_mjoin_intro_intro [lemma, in joinmemLib]
join_intro_r [lemma, in joinmemLib]
join_intro_l [lemma, in joinmemLib]
join_minus_r [lemma, in joinmemLib]
join_store_allocb [lemma, in memory]
join_allocb' [lemma, in memory]
join_allocb_emp [lemma, in memory]
join_store [lemma, in memory]
join_storebytes [lemma, in memory]
join_free [lemma, in memory]
join_freeb [lemma, in memory]
join_allocb [lemma, in memory]
join_join_disj_copy [lemma, in hoare_tactics]
join_mapstoval_store_allocb [lemma, in lmachLib]
join_mapstoval_allocb [lemma, in lmachLib]
join_mapstoval_allocb' [lemma, in lmachLib]
join_eqe [lemma, in progtaskstepLib]
join_prop2 [lemma, in mathlib_join]
join_prop2_my [lemma, in mathlib_join]
join_prop1 [lemma, in mathlib_join]
join_prop1_my [lemma, in mathlib_join]
join_prop2_my' [lemma, in sem_common]
join_store_join [lemma, in lemmasfortoptheo]
join_store [lemma, in lemmasfortoptheo]
join_store_general [lemma, in lemmasfortoptheo]
join_storebytes_storebytes [lemma, in lemmasfortoptheo]
join_prop_mutexpend'''' [lemma, in OSMutexPendPure1]
join_prop_mutexpend''' [lemma, in OSMutexPendPure1]
join_prop_mutexpend'' [lemma, in OSMutexPendPure1]
join_mutexpend' [lemma, in OSMutexPendPure1]
join_prop_mutexpend' [lemma, in OSMutexPendPure1]
join_prop_mutexpend [lemma, in OSMutexPendPure1]
join_join [lemma, in tst_prop]
join_join_join_move [lemma, in tst_prop]
join_join_disj [lemma, in tst_prop]
join_add_disj [lemma, in tst_prop]
join_disj_trans' [lemma, in tst_prop]
join_merge_minus [lemma, in tst_prop]
join_tst_wo_mem_eq [lemma, in tst_prop]
join_subs_merge_minus [lemma, in tst_prop]
join_subs_merge [lemma, in tst_prop]
join_eq_nmst [lemma, in tst_prop]
join_trans' [lemma, in tst_prop]
join_sub [lemma, in tst_prop]
join_disj_trans [lemma, in tst_prop]
join_disj [lemma, in tst_prop]
join_trans [lemma, in tst_prop]
join_tst_join [lemma, in tst_prop]
join_merge_eq [lemma, in tst_prop]
join_mem [lemma, in tst_prop]
join_disj_merge_join [lemma, in tst_prop]
join_merge_disj [lemma, in tst_prop]
join_merge_trans [lemma, in tst_prop]
join_minus_join_r [lemma, in tst_prop]
join_merge [lemma, in common]
join_sub_sub_sig_neq [lemma, in common]
join_sig_set_join [lemma, in cancel_absdata]
join_join_merge_1_ecb [lemma, in OSTimeTickPure]
join_sig_neq_set [lemma, in OSTimeTickPure]
join_sig_false [lemma, in OSTimeTickPure]
join_tcbjoin_joinsig_eq' [lemma, in OSTimeTickPure]
join_join_merge'_ecb [lemma, in OSTimeTickPure]
join_join_merge_ecb [lemma, in OSTimeTickPure]
join_join_merge' [lemma, in OSTimeTickPure]
join_join_merge [lemma, in OSTimeTickPure]
join_fst [lemma, in OSTimeTickPure]
join_join_disj [lemma, in OSTimeTickPure]
join_join_minus [lemma, in OSTimeTickPure]
join_indom_or [lemma, in mathlib]
join_indom_r [lemma, in mathlib]
join3mem_eqenv [lemma, in ruleLib]


K

kassignl [constructor, in language]
kassignl_ex [lemma, in progtaskstepLib]
kassignl_addcont [lemma, in contLib]
kassignr [constructor, in language]
kassignr_ex [lemma, in progtaskstepLib]
kassignr_addcont [lemma, in contLib]
kcall [constructor, in language]
kcall_ex [lemma, in progtaskstepLib]
kcall_addcont [lemma, in contLib]
kearrbase [constructor, in language]
kearrindex [constructor, in language]
kecast [constructor, in language]
kederef [constructor, in language]
kenil [constructor, in language]
keoffset [constructor, in language]
keop1 [constructor, in language]
keop2l [constructor, in language]
keop2r [constructor, in language]
kevent [constructor, in language]
kfuneval [constructor, in language]
kfuneval_ex2 [lemma, in progtaskstepLib]
kfuneval_ex1 [lemma, in progtaskstepLib]
kfuneval_addcont [lemma, in contLib]
kif [constructor, in language]
kif_ex [lemma, in progtaskstepLib]
kif_addcont [lemma, in contLib]
kint [constructor, in language]
kint_addcont [lemma, in contLib]
kret [constructor, in language]
kret_ex [lemma, in progtaskstepLib]
kret_addcont [lemma, in contLib]
kseq [constructor, in language]
kseq_ex [lemma, in progtaskstepLib]
kseq_addcont [lemma, in contLib]
kseq_eq_addstmt [lemma, in contLib]
kseq_not_kstop [lemma, in contLib]
kstop [constructor, in language]
ks_puls_kcall_neq [lemma, in contLib]
ks_add_call_false [lemma, in tst_prop]
ks_add_int_false [lemma, in tst_prop]
kwhile [constructor, in language]
kwhile_ex [lemma, in progtaskstepLib]
kwhile_addcont [lemma, in contLib]
kz [module, in mathlib]
kz.unsigned_ge0 [lemma, in mathlib]
kz.Zplus_minus [lemma, in mathlib]


L

LAarray [definition, in BaseAsrtDef]
LAarray_imp_length_P [lemma, in sep_pure]
LAarray_imp_length [lemma, in sep_pure]
lab [library]
laby [library]
language [library]
last_eq [lemma, in OSEventTaskRdyPure]
last_get [lemma, in OSTimeTickPure]
last_remain [lemma, in mathlib]
lb_remove_mid [lemma, in asrtLib]
lb_sub_l [lemma, in asrtLib]
lb_sub_r [lemma, in asrtLib]
lb_blt_mid [lemma, in asrtLib]
lb_get_false [lemma, in OSTimeTickPure]
leb_nat [definition, in language]
leb_int16max_true_intro [lemma, in type_val_match]
leb_bytemax_true_intro [lemma, in type_val_match]
leb_int16max_true_elim [lemma, in type_val_match]
leb_bytemax_true_elim [lemma, in type_val_match]
leftmoven [lemma, in mathlib]
legal [definition, in os_code_defs]
lemmasforseplog [library]
lemmasfortoptheo [library]
lemma_trans_temp [lemma, in lemmasfortoptheo]
length_list_repeat [lemma, in Coqlib]
length_prop [lemma, in lmachLib]
length_list_repeat [lemma, in lmachLib]
length_dl [definition, in lmachLib]
length_addcont [lemma, in contLib]
length_eq [definition, in auxdef]
length_eq_td [definition, in tst_prop]
length_length_dl_eq [lemma, in tst_prop]
length_dl_revlcons_add [lemma, in tst_prop]
length_tl_1 [lemma, in asrtLib]
length_tl_3 [lemma, in asrtLib]
length_inj_bytes [lemma, in memdata]
length_exists [lemma, in common]
length_encode_val [lemma, in common]
length_n_change [lemma, in mathlib]
length_zero_nil [lemma, in mathlib]
length8_ex [lemma, in mathlib]
length8_ex [lemma, in Mbox_common]
len_stmtcont [definition, in opsem]
len_exprcont [definition, in opsem]
len_rev [lemma, in lmachLib]
len_eq_rev_eq [lemma, in progtaskstepLib]
len_exist_6 [lemma, in init_spec]
len_exist_5 [lemma, in init_spec]
len_exist_4 [lemma, in init_spec]
len_exist_3 [lemma, in init_spec]
len_exist_2 [lemma, in init_spec]
len_exist_1 [lemma, in init_spec]
len_exist_0 [lemma, in init_spec]
len_lt_update_get_eq [lemma, in hoare_assign]
LETr [inductive, in etraceref]
LETr_abt [constructor, in etraceref]
LETr_e [constructor, in etraceref]
LETr_ne [constructor, in etraceref]
LETr_emp [constructor, in etraceref]
lex_ord_right [constructor, in Coqlib]
lex_ord_left [constructor, in Coqlib]
lex_ord [inductive, in Coqlib]
LEX_ORDER.ordB [variable, in Coqlib]
LEX_ORDER.ordA [variable, in Coqlib]
LEX_ORDER.B [variable, in Coqlib]
LEX_ORDER.A [variable, in Coqlib]
LEX_ORDER [section, in Coqlib]
le_beq_nat_false [lemma, in tst_prop]
le_change [lemma, in mathlib]
le255_and_le255 [lemma, in laby]
le255_and_le255 [lemma, in lab]
le65535shr8mod255self [lemma, in OSMutex_common]
le7_le7_range64 [lemma, in sempost_pure]
le7_le7_range64 [lemma, in Mbox_common]
LibTactics [library]
LibTacticsCompatibility [module, in LibTactics]
lift [definition, in simulation]
lintstep [inductive, in opsem]
lintstep' [inductive, in lemmasfortoptheo]
listeq [inductive, in seplog_tactics]
listeq [inductive, in tacticsforseplog]
listeq_addemp [lemma, in seplog_tactics]
listeq_getl [lemma, in seplog_tactics]
listeq_getl_sort [lemma, in seplog_tactics]
listeq_lowern [lemma, in seplog_tactics]
listeq_prop2 [lemma, in seplog_tactics]
listeq_comm [lemma, in seplog_tactics]
listeq_liftn [lemma, in seplog_tactics]
listeq_prop1 [lemma, in seplog_tactics]
listeq_addemp [lemma, in tacticsforseplog]
listeq_getl [lemma, in tacticsforseplog]
listeq_getl_sort [lemma, in tacticsforseplog]
listeq_lowern [lemma, in tacticsforseplog]
listeq_prop2 [lemma, in tacticsforseplog]
listeq_comm [lemma, in tacticsforseplog]
listeq_liftn [lemma, in tacticsforseplog]
listeq_prop1 [lemma, in tacticsforseplog]
listliftn [definition, in seplog_tactics]
listliftn [definition, in tacticsforseplog]
listliftn' [definition, in seplog_tactics]
listliftn' [definition, in tacticsforseplog]
listlowern [definition, in seplog_tactics]
listlowern [definition, in tacticsforseplog]
ListSet_set_In_cons_intro [lemma, in joinmemLib]
ListSet_set_In_cons_elim [lemma, in joinmemLib]
ListSet_setIn_in_decllist_true [lemma, in asrtLib]
listsimpl [definition, in seplog_tactics]
listsimplA [definition, in seplog_tactics]
listsimplA_prop [lemma, in seplog_tactics]
listsimplB [definition, in seplog_tactics]
listsimpl_prop [lemma, in seplog_tactics]
listsub [inductive, in mathlib]
listsubrec [constructor, in mathlib]
listsub1 [constructor, in mathlib]
list_app_neq_nil [lemma, in OSEventTaskRdyPure]
list_addempR [definition, in seplog_tactics]
list_getl_prop1 [lemma, in seplog_tactics]
list_dropn_prop4 [lemma, in seplog_tactics]
list_dropn_prop3 [lemma, in seplog_tactics]
list_dropn_prop2 [lemma, in seplog_tactics]
list_dropn_prop1 [lemma, in seplog_tactics]
list_dropn [definition, in seplog_tactics]
list_getl [definition, in seplog_tactics]
list_getn [definition, in seplog_tactics]
list_liftn_prop1 [lemma, in seplog_tactics]
list_insert_prop1 [lemma, in seplog_tactics]
list_insert [definition, in seplog_tactics]
list_to_asrtTree_listsimpl [lemma, in seplog_tactics]
list_to_asrtTree_simpl_prop2 [lemma, in seplog_tactics]
list_to_asrtTree_prop2 [lemma, in seplog_tactics]
list_to_asrtTree_simpl_prop1 [lemma, in seplog_tactics]
list_to_asrtTree_prop1 [lemma, in seplog_tactics]
list_to_asrtTree_simpl [definition, in seplog_tactics]
list_to_asrtTree [definition, in seplog_tactics]
list_repeat [definition, in Coqlib]
list_map_drop [lemma, in Coqlib]
list_drop_norepet [lemma, in Coqlib]
list_drop_incl [lemma, in Coqlib]
list_drop [definition, in Coqlib]
list_forall2_imply [lemma, in Coqlib]
list_forall2_length [lemma, in Coqlib]
list_forall2_app [lemma, in Coqlib]
list_forall2_cons [constructor, in Coqlib]
list_forall2_nil [constructor, in Coqlib]
list_forall2 [inductive, in Coqlib]
list_norepet_append_left [lemma, in Coqlib]
list_norepet_append_right [lemma, in Coqlib]
list_norepet_append [lemma, in Coqlib]
list_norepet_app [lemma, in Coqlib]
list_norepet_append_commut [lemma, in Coqlib]
list_map_norepet [lemma, in Coqlib]
list_norepet_dec [lemma, in Coqlib]
list_norepet_cons [constructor, in Coqlib]
list_norepet_nil [constructor, in Coqlib]
list_norepet [inductive, in Coqlib]
list_equiv [definition, in Coqlib]
list_disjoint_dec [lemma, in Coqlib]
list_disjoint_sym [lemma, in Coqlib]
list_disjoint_notin [lemma, in Coqlib]
list_disjoint_cons_right [lemma, in Coqlib]
list_disjoint_cons_left [lemma, in Coqlib]
list_disjoint_cons_r [lemma, in Coqlib]
list_disjoint_cons_l [lemma, in Coqlib]
list_disjoint [definition, in Coqlib]
list_in_insert [lemma, in Coqlib]
list_fold_right_spec [lemma, in Coqlib]
list_fold_right_eq [lemma, in Coqlib]
list_fold_left_app [lemma, in Coqlib]
list_fold_right [definition, in Coqlib]
list_fold_left [definition, in Coqlib]
LIST_FOLD.f [variable, in Coqlib]
LIST_FOLD.B [variable, in Coqlib]
LIST_FOLD.A [variable, in Coqlib]
LIST_FOLD [section, in Coqlib]
list_append_map_inv [lemma, in Coqlib]
list_append_map [lemma, in Coqlib]
list_in_map_inv [lemma, in Coqlib]
list_length_map [lemma, in Coqlib]
list_map_nth [lemma, in Coqlib]
list_map_identity [lemma, in Coqlib]
list_map_compose [lemma, in Coqlib]
list_map_exten [lemma, in Coqlib]
list_nth_z_range [lemma, in Coqlib]
list_nth_z_map [lemma, in Coqlib]
list_nth_z_in [lemma, in Coqlib]
list_nth_z [definition, in Coqlib]
list_length_z_map [lemma, in Coqlib]
list_length_z_pos [lemma, in Coqlib]
list_length_z_cons [lemma, in Coqlib]
list_length_z [definition, in Coqlib]
list_length_z_aux_shift [lemma, in Coqlib]
list_length_z_aux [definition, in Coqlib]
list_reverse_prop2 [lemma, in hoare_lemmas]
list_reverse_prop1 [lemma, in hoare_lemmas]
list_addempR [definition, in tacticsforseplog]
list_getl_prop1 [lemma, in tacticsforseplog]
list_dropn_prop4 [lemma, in tacticsforseplog]
list_dropn_prop3 [lemma, in tacticsforseplog]
list_dropn_prop2 [lemma, in tacticsforseplog]
list_dropn_prop1 [lemma, in tacticsforseplog]
list_dropn [definition, in tacticsforseplog]
list_getl [definition, in tacticsforseplog]
list_getn [definition, in tacticsforseplog]
list_liftn_prop1 [lemma, in tacticsforseplog]
list_insert_prop1 [lemma, in tacticsforseplog]
list_insert [definition, in tacticsforseplog]
list_move [lemma, in tst_prop]
list_rev_prop [lemma, in asrtLib]
list_cs_noteq [lemma, in loststepLib]
list_is_noteq [lemma, in loststepLib]
list_app_in [lemma, in OSTimeTickPure]
list_split_last [lemma, in OSTimeTickPure]
list_gt_0_ex [lemma, in mathlib]
list_maxsize_le [lemma, in mathlib]
list_length_lt [lemma, in mathlib]
list_append_split [lemma, in mathlib]
list_cons_assoc [lemma, in mathlib]
list_sub_prop4 [lemma, in mathlib]
list_sub_prop3 [lemma, in mathlib]
list_sub_prop2 [lemma, in mathlib]
list_sub_prop1 [lemma, in mathlib]
list_prop1 [lemma, in mathlib]
list2asrtTree [definition, in tacticsforseplog]
list2asrtTree_prop2 [lemma, in tacticsforseplog]
list2asrtTree_prop1 [lemma, in tacticsforseplog]
list2asrtTree_noClearEmp [definition, in tacticsforseplog]
li_step [constructor, in opsem]
li_step [constructor, in lemmasfortoptheo]
lmachLib [library]
load [definition, in opsem]
loadbytes [definition, in memory]
loadbytes_mono [lemma, in lmachLib]
loadbytes_ptomvallist_memjoin [lemma, in tst_prop]
loadbytes_join [lemma, in tst_prop]
loadbytes_minus [lemma, in tst_prop]
loadbytes_local [lemma, in aux_for_hoare_lemmas]
loadm [definition, in memory]
loadm_mono [lemma, in lmachLib]
load_mem_deter [lemma, in lmachLib]
load_mem_mono [lemma, in lmachLib]
load_mono [lemma, in lmachLib]
load_local [lemma, in aux_for_hoare_lemmas]
localst [definition, in language]
LocalStSpec [module, in language]
LocalStSpec.B [definition, in language]
logicvar [inductive, in assertion]
logic_code [constructor, in assertion]
logic_absecb [constructor, in assertion]
logic_abstcb [constructor, in assertion]
logic_leventc [constructor, in assertion]
logic_leventd [constructor, in assertion]
logic_llv [constructor, in assertion]
logic_lv [constructor, in assertion]
logic_val [constructor, in assertion]
logic_hid [constructor, in assertion]
logic_cs [constructor, in assertion]
logic_ie [constructor, in assertion]
logic_is [constructor, in assertion]
logic_isr [constructor, in assertion]
losallocstep [definition, in loststepLib]
losallocstepn [inductive, in loststepLib]
losallocstepstar [inductive, in loststepLib]
losallocstepstar_n [constructor, in loststepLib]
losallocstepstar_0 [constructor, in loststepLib]
losallocstep_irev_prog [lemma, in loststepLib]
losallocstep_n [constructor, in loststepLib]
losallocstep_0 [constructor, in loststepLib]
losidstepn [inductive, in loststepLib]
losidstepstar_imply_losallocstepn [lemma, in loststepLib]
losidstepstar_imply_losidstepn [lemma, in loststepLib]
losidstep_n [constructor, in loststepLib]
losidstep_0 [constructor, in loststepLib]
losstep_idmove_determistic [lemma, in loststepLib]
losstep_idmove_frame [lemma, in loststepLib]
lostabt_cont_frm [lemma, in loststepLib]
lostidstepstar [inductive, in loststepLib]
lostidstepstarn [constructor, in loststepLib]
lostidstepstar_transitivity [lemma, in loststepLib]
lostidstepstar0 [constructor, in loststepLib]
loststep [inductive, in opsem]
loststepabt [definition, in opsem]
loststepabt_cont_loststepabt' [lemma, in loststepLib]
loststepabt_cont_loststepabt [lemma, in loststepLib]
loststepLib [library]
loststepn [inductive, in loststepLib]
loststepn_n [constructor, in loststepLib]
loststepn_0 [constructor, in loststepLib]
loststepstar [inductive, in loststepLib]
loststepstar_n [constructor, in loststepLib]
loststepstar_0 [constructor, in loststepLib]
loststep_eqenv [lemma, in ruleLib]
loststep_code_prop [lemma, in ruleLib]
loststep_good_code_prop [lemma, in ruleLib]
loststep_no_api_local [lemma, in progtaskstepLib]
loststep_not_free [lemma, in progtaskstepLib]
loststep_not_alloc [lemma, in progtaskstepLib]
loststep_nofree_notabt [lemma, in progtaskstepLib]
loststep_no_api_elim [lemma, in lemmasfortoptheo]
loststep_cont_locality [lemma, in tst_prop]
loststep_keepG [lemma, in loststepLib]
loststep_keq_while_mono [lemma, in loststepLib]
loststep_cont_locality [lemma, in loststepLib]
loststep_genv_prev [lemma, in loststepLib]
loststep_frame_prop [lemma, in loststepLib]
loststep_join_notabt [lemma, in loststepLib]
loststep_join_notabt' [lemma, in loststepLib]
low_stat_q_impl_high_stat_q [lemma, in OSQPendPure]
low_level_os_code [definition, in os_program]
low_stat_nordy_imp_high [lemma, in OSTimeDlyPure]
low_stat_rdy_imp_high [lemma, in OSTimeDlyPure]
low_stat_rdy_imp_high [lemma, in sempend_pure]
low_stat_nordy_imp_high [lemma, in Mbox_common]
low_stat_q_impl_high_stat_q [lemma, in Mbox_common]
lprog [definition, in language]
lpstep [inductive, in opsem]
lpstepabt [inductive, in opsem]
lpstepev [inductive, in opsem]
lpstepev_goodks [lemma, in progtaskstepLib]
lpstepev_good_is_S [lemma, in tst_prop]
lpstep_goodks [lemma, in progtaskstepLib]
lpstep_eqg [lemma, in progtaskstepLib]
lpstep_good_is_S [lemma, in tst_prop]
ltac_something_show [lemma, in LibTactics]
ltac_something_hide [lemma, in LibTactics]
ltac_something_eq [lemma, in LibTactics]
ltac_something [definition, in LibTactics]
ltac_to_generalize [definition, in LibTactics]
ltac_tag_subst [definition, in LibTactics]
ltac_nat_from_int [definition, in LibTactics]
ltac_database_provide [lemma, in LibTactics]
ltac_database [definition, in LibTactics]
ltac_mark [constructor, in LibTactics]
ltac_Mark [inductive, in LibTactics]
ltac_wilds [constructor, in LibTactics]
ltac_Wilds [inductive, in LibTactics]
ltac_wild [constructor, in LibTactics]
ltac_Wild [inductive, in LibTactics]
ltac_no_arg [constructor, in LibTactics]
ltac_No_arg [inductive, in LibTactics]
ltaskstset [definition, in language]
ltstep [inductive, in opsem]
ltstepabt [inductive, in opsem]
ltstepev [inductive, in opsem]
ltstepev_goodks [lemma, in progtaskstepLib]
ltstepev_n_dym_com_int_cd [lemma, in lemmasfortoptheo]
ltstep_eqg [lemma, in progtaskstepLib]
ltstep_goodks [lemma, in progtaskstepLib]
ltstep_no_exint [lemma, in progtaskstepLib]
ltstep_inos_nupd_clst [lemma, in progtaskstepLib]
ltstep_inos_loststep [lemma, in progtaskstepLib]
ltstep_n_dym_com_int_cd [lemma, in lemmasfortoptheo]
ltstep_good_is [lemma, in tst_prop]
ltstep_keepG [lemma, in asrtLib]
ltu_eq_false_ltu' [lemma, in OSMutex_common]
ltu_false_eq_false_ltu_true [lemma, in OSMutex_common]
ltu_zero_notbool_true [lemma, in mathlib]
ltu_zero_eq_zero [lemma, in mathlib]
ltu_eq_false [lemma, in mathlib]
ltu_ex_and [lemma, in mathlib]
ltu_zero_false_imp_eq_zero [lemma, in sep_pure]
lval [definition, in assertion]
lvar_rv [lemma, in symbolic_execution]
lvar_to_lv [lemma, in symbolic_execution]
lv_mapsto_to_rv [lemma, in symbolic_execution]
lworld [definition, in language]
lzh_ecb_join_set_one [lemma, in OSMutex_common]
lzh_tcb_list_split [lemma, in OSMutex_common]
lzh_join [section, in OSMutexPendPure1]
lzh_evsllseg_compose [lemma, in sem_lab]
lzh_if_then_rule [lemma, in sem_lab]
lzh_if_else_rule [lemma, in sem_lab]
lzh_if_rule' [lemma, in sem_lab]
l2 [lemma, in OSMutex_common]
l4 [lemma, in mathlib]
l5 [lemma, in mathlib]


M

Make [module, in Integers]
MakeProtectWrapper [lemma, in OSMutex_common]
Make.add [definition, in Integers]
Make.add_and [lemma, in Integers]
Make.add_is_xor [lemma, in Integers]
Make.add_is_or [lemma, in Integers]
Make.add_neg_zero [lemma, in Integers]
Make.add_permut [lemma, in Integers]
Make.add_assoc [lemma, in Integers]
Make.add_zero_l [lemma, in Integers]
Make.add_zero [lemma, in Integers]
Make.add_commut [lemma, in Integers]
Make.add_signed [lemma, in Integers]
Make.add_unsigned [lemma, in Integers]
Make.add_overflow [definition, in Integers]
Make.add_carry [definition, in Integers]
Make.and [definition, in Integers]
Make.and_interval [lemma, in Integers]
Make.and_positive [lemma, in Integers]
Make.and_shr_shru [lemma, in Integers]
Make.and_shr [lemma, in Integers]
Make.and_shru [lemma, in Integers]
Make.and_shl [lemma, in Integers]
Make.and_not_self [lemma, in Integers]
Make.and_le [lemma, in Integers]
Make.and_xor_distrib [lemma, in Integers]
Make.and_or_absorb [lemma, in Integers]
Make.and_or_distrib_l [lemma, in Integers]
Make.and_or_distrib [lemma, in Integers]
Make.and_idem [lemma, in Integers]
Make.and_mone_l [lemma, in Integers]
Make.and_mone [lemma, in Integers]
Make.and_zero_l [lemma, in Integers]
Make.and_zero [lemma, in Integers]
Make.and_assoc [lemma, in Integers]
Make.and_commut [lemma, in Integers]
Make.bits_size_4 [lemma, in Integers]
Make.bits_size_3 [lemma, in Integers]
Make.bits_size_2 [lemma, in Integers]
Make.bits_size_1 [lemma, in Integers]
Make.bits_sign_ext [lemma, in Integers]
Make.bits_zero_ext [lemma, in Integers]
Make.bits_ror [lemma, in Integers]
Make.bits_rol [lemma, in Integers]
Make.bits_shr [lemma, in Integers]
Make.bits_shru [lemma, in Integers]
Make.bits_shl [lemma, in Integers]
Make.bits_not [lemma, in Integers]
Make.bits_xor [lemma, in Integers]
Make.bits_or [lemma, in Integers]
Make.bits_and [lemma, in Integers]
Make.bits_le [lemma, in Integers]
Make.bits_signed [lemma, in Integers]
Make.bits_mone [lemma, in Integers]
Make.bits_one [lemma, in Integers]
Make.bits_zero [lemma, in Integers]
Make.bits_above [lemma, in Integers]
Make.bitwise_binop_rol [lemma, in Integers]
Make.bitwise_binop_shr [lemma, in Integers]
Make.bitwise_binop_shru [lemma, in Integers]
Make.bitwise_binop_shl [lemma, in Integers]
Make.cmp [definition, in Integers]
Make.cmpu [definition, in Integers]
Make.divs [definition, in Integers]
Make.divs_pow2 [lemma, in Integers]
Make.divs_mone [lemma, in Integers]
Make.divu [definition, in Integers]
Make.divu_pow2 [lemma, in Integers]
Make.divu_one [lemma, in Integers]
Make.eq [definition, in Integers]
Make.eqm [definition, in Integers]
Make.eqmod [definition, in Integers]
Make.eqmod_sign_ext [lemma, in Integers]
Make.eqmod_sign_ext' [lemma, in Integers]
Make.eqmod_zero_ext [lemma, in Integers]
Make.eqmod_same_bits [lemma, in Integers]
Make.eqmod_divides [lemma, in Integers]
Make.eqmod_mult [lemma, in Integers]
Make.eqmod_sub [lemma, in Integers]
Make.eqmod_neg [lemma, in Integers]
Make.eqmod_add [lemma, in Integers]
Make.eqmod_mod [lemma, in Integers]
Make.eqmod_mod_eq [lemma, in Integers]
Make.eqmod_small_eq [lemma, in Integers]
Make.eqmod_trans [lemma, in Integers]
Make.eqmod_sym [lemma, in Integers]
Make.eqmod_refl2 [lemma, in Integers]
Make.eqmod_refl [lemma, in Integers]
Make.eqm_same_bits [lemma, in Integers]
Make.eqm_repr_eq [lemma, in Integers]
Make.eqm_signed_unsigned [lemma, in Integers]
Make.eqm_unsigned_repr_r [lemma, in Integers]
Make.eqm_unsigned_repr_l [lemma, in Integers]
Make.eqm_unsigned_repr [lemma, in Integers]
Make.eqm_samerepr [lemma, in Integers]
Make.eqm_mult [lemma, in Integers]
Make.eqm_sub [lemma, in Integers]
Make.eqm_neg [lemma, in Integers]
Make.eqm_add [lemma, in Integers]
Make.eqm_small_eq [lemma, in Integers]
Make.eqm_trans [lemma, in Integers]
Make.eqm_sym [lemma, in Integers]
Make.eqm_refl2 [lemma, in Integers]
Make.eqm_refl [lemma, in Integers]
Make.equal_same_bits [lemma, in Integers]
Make.eq_signed [lemma, in Integers]
Make.eq_false [lemma, in Integers]
Make.eq_true [lemma, in Integers]
Make.eq_spec [lemma, in Integers]
Make.eq_sym [lemma, in Integers]
Make.EQ_MODULO.modul_pos [variable, in Integers]
Make.EQ_MODULO.modul [variable, in Integers]
Make.EQ_MODULO [section, in Integers]
Make.eq_dec [lemma, in Integers]
Make.half_modulus_pos [lemma, in Integers]
Make.half_modulus_modulus [lemma, in Integers]
Make.half_modulus_power [lemma, in Integers]
Make.half_modulus [definition, in Integers]
Make.int [record, in Integers]
Make.intrange [projection, in Integers]
Make.intval [projection, in Integers]
Make.int_of_one_bits [definition, in Integers]
Make.is_power2_two_p [lemma, in Integers]
Make.is_power2_correct [lemma, in Integers]
Make.is_power2_range [lemma, in Integers]
Make.is_power2_rng [lemma, in Integers]
Make.is_true [definition, in Integers]
Make.is_false [definition, in Integers]
Make.is_power2 [definition, in Integers]
Make.iwordsize [definition, in Integers]
Make.lt [definition, in Integers]
Make.ltu [definition, in Integers]
Make.ltu_range_test [lemma, in Integers]
Make.ltu_iwordsize_inv [lemma, in Integers]
Make.ltu_inv [lemma, in Integers]
Make.lt_sub_overflow [lemma, in Integers]
Make.max_signed_unsigned [lemma, in Integers]
Make.max_signed_pos [lemma, in Integers]
Make.max_signed [definition, in Integers]
Make.max_unsigned [definition, in Integers]
Make.min_signed_neg [lemma, in Integers]
Make.min_signed [definition, in Integers]
Make.mkint [constructor, in Integers]
Make.mkint_eq [lemma, in Integers]
Make.mods [definition, in Integers]
Make.mods_mone [lemma, in Integers]
Make.mods_divs [lemma, in Integers]
Make.mods_divs_Euclid [lemma, in Integers]
Make.modu [definition, in Integers]
Make.modulus [definition, in Integers]
Make.modulus_pos [lemma, in Integers]
Make.modulus_power [lemma, in Integers]
Make.modu_and [lemma, in Integers]
Make.modu_one [lemma, in Integers]
Make.modu_divu [lemma, in Integers]
Make.modu_divu_Euclid [lemma, in Integers]
Make.mone [definition, in Integers]
Make.mul [definition, in Integers]
Make.mulhs [definition, in Integers]
Make.mulhu [definition, in Integers]
Make.mul_pow2 [lemma, in Integers]
Make.mul_signed [lemma, in Integers]
Make.mul_add_distr_r [lemma, in Integers]
Make.mul_add_distr_l [lemma, in Integers]
Make.mul_assoc [lemma, in Integers]
Make.mul_mone [lemma, in Integers]
Make.mul_one [lemma, in Integers]
Make.mul_zero [lemma, in Integers]
Make.mul_commut [lemma, in Integers]
Make.neg [definition, in Integers]
Make.negate_cmpu [lemma, in Integers]
Make.negate_cmp [lemma, in Integers]
Make.negative [definition, in Integers]
Make.neg_not [lemma, in Integers]
Make.neg_mul_distr_r [lemma, in Integers]
Make.neg_mul_distr_l [lemma, in Integers]
Make.neg_add_distr [lemma, in Integers]
Make.neg_involutive [lemma, in Integers]
Make.neg_zero [lemma, in Integers]
Make.neg_repr [lemma, in Integers]
Make.not [definition, in Integers]
Make.notbool [definition, in Integers]
Make.notbool_istrue_isfalse [lemma, in Integers]
Make.notbool_isfalse_istrue [lemma, in Integers]
Make.not_neg [lemma, in Integers]
Make.not_and_or_not [lemma, in Integers]
Make.not_or_and_not [lemma, in Integers]
Make.not_mone [lemma, in Integers]
Make.not_zero [lemma, in Integers]
Make.not_involutive [lemma, in Integers]
Make.no_overlap_sound [lemma, in Integers]
Make.no_overlap [definition, in Integers]
Make.one [definition, in Integers]
Make.one_bits_decomp [lemma, in Integers]
Make.one_bits_range [lemma, in Integers]
Make.one_not_zero [lemma, in Integers]
Make.one_bits [definition, in Integers]
Make.or [definition, in Integers]
Make.or_interval [lemma, in Integers]
Make.or_ror [lemma, in Integers]
Make.or_rolm [lemma, in Integers]
Make.or_shr [lemma, in Integers]
Make.or_shru [lemma, in Integers]
Make.or_shl [lemma, in Integers]
Make.or_not_self [lemma, in Integers]
Make.or_le [lemma, in Integers]
Make.or_and_absorb [lemma, in Integers]
Make.or_and_distrib_l [lemma, in Integers]
Make.or_and_distrib [lemma, in Integers]
Make.or_idem [lemma, in Integers]
Make.or_mone [lemma, in Integers]
Make.or_zero_l [lemma, in Integers]
Make.or_zero [lemma, in Integers]
Make.or_assoc [lemma, in Integers]
Make.or_commut [lemma, in Integers]
Make.powerserie [definition, in Integers]
Make.P_mod_two_p_eq [lemma, in Integers]
Make.P_mod_two_p_range [lemma, in Integers]
Make.P_mod_two_p [definition, in Integers]
Make.repr [definition, in Integers]
Make.repr_signed [lemma, in Integers]
Make.repr_unsigned [lemma, in Integers]
Make.rol [definition, in Integers]
Make.rolm [definition, in Integers]
Make.rolm_rolm [lemma, in Integers]
Make.rolm_zero [lemma, in Integers]
Make.rol_rol [lemma, in Integers]
Make.rol_xor [lemma, in Integers]
Make.rol_or [lemma, in Integers]
Make.rol_and [lemma, in Integers]
Make.rol_zero [lemma, in Integers]
Make.ror [definition, in Integers]
Make.ror_rol_neg [lemma, in Integers]
Make.ror_rol [lemma, in Integers]
Make.same_bits_eq [lemma, in Integers]
Make.same_bits_eqm [lemma, in Integers]
Make.same_bits_eqmod [lemma, in Integers]
Make.shifted_or_is_add [lemma, in Integers]
Make.shl [definition, in Integers]
Make.shl_mul [lemma, in Integers]
Make.shl_mul_two_p [lemma, in Integers]
Make.shl_rolm [lemma, in Integers]
Make.shl_shl [lemma, in Integers]
Make.shl_zero [lemma, in Integers]
Make.shr [definition, in Integers]
Make.shru [definition, in Integers]
Make.shru_div_two_p [lemma, in Integers]
Make.shru_rolm [lemma, in Integers]
Make.shru_lt_zero [lemma, in Integers]
Make.shru_shru [lemma, in Integers]
Make.shru_zero [lemma, in Integers]
Make.shrx [definition, in Integers]
Make.shrx_carry [lemma, in Integers]
Make.shrx_shr_2 [lemma, in Integers]
Make.shrx_shr [lemma, in Integers]
Make.shr_and_is_shru_and [lemma, in Integers]
Make.shr_shru_positive [lemma, in Integers]
Make.shr_div_two_p [lemma, in Integers]
Make.shr_lt_zero [lemma, in Integers]
Make.shr_and_shru_and [lemma, in Integers]
Make.shr_shr [lemma, in Integers]
Make.shr_zero [lemma, in Integers]
Make.shr_carry [definition, in Integers]
Make.signed [definition, in Integers]
Make.signed_mone [lemma, in Integers]
Make.signed_zero [lemma, in Integers]
Make.signed_positive [lemma, in Integers]
Make.signed_eq_unsigned [lemma, in Integers]
Make.signed_repr [lemma, in Integers]
Make.signed_eq_zero [lemma, in Integers]
Make.signed_range [lemma, in Integers]
Make.signed_repr_eq [lemma, in Integers]
Make.sign_ext_range [lemma, in Integers]
Make.sign_ext_shr_shl [lemma, in Integers]
Make.sign_ext_equal_if_zero_equal [lemma, in Integers]
Make.sign_ext_zero_ext [lemma, in Integers]
Make.sign_ext_idem [lemma, in Integers]
Make.sign_ext_narrow [lemma, in Integers]
Make.sign_zero_ext_widen [lemma, in Integers]
Make.sign_ext_widen [lemma, in Integers]
Make.sign_ext_above [lemma, in Integers]
Make.sign_bit_of_unsigned [lemma, in Integers]
Make.sign_ext [definition, in Integers]
Make.size [definition, in Integers]
Make.size_xor [lemma, in Integers]
Make.size_or [lemma, in Integers]
Make.size_and [lemma, in Integers]
Make.size_interval_2 [lemma, in Integers]
Make.size_interval_1 [lemma, in Integers]
Make.size_range [lemma, in Integers]
Make.size_zero [lemma, in Integers]
Make.sub [definition, in Integers]
Make.sub_borrow_add_carry [lemma, in Integers]
Make.sub_add_not_3 [lemma, in Integers]
Make.sub_add_not [lemma, in Integers]
Make.sub_signed [lemma, in Integers]
Make.sub_shifted [lemma, in Integers]
Make.sub_add_r [lemma, in Integers]
Make.sub_add_l [lemma, in Integers]
Make.sub_idem [lemma, in Integers]
Make.sub_add_opp [lemma, in Integers]
Make.sub_zero_r [lemma, in Integers]
Make.sub_zero_l [lemma, in Integers]
Make.sub_overflow [definition, in Integers]
Make.sub_borrow [definition, in Integers]
Make.swap_cmpu [lemma, in Integers]
Make.swap_cmp [lemma, in Integers]
Make.testbit [definition, in Integers]
Make.testbit_repr [lemma, in Integers]
Make.translate_cmp [lemma, in Integers]
Make.translate_lt [lemma, in Integers]
Make.translate_cmpu [lemma, in Integers]
Make.translate_ltu [lemma, in Integers]
Make.translate_eq [lemma, in Integers]
Make.two_p_range [lemma, in Integers]
Make.two_power_nat_infinity [lemma, in Integers]
Make.two_wordsize_max_unsigned [lemma, in Integers]
Make.unsigned [definition, in Integers]
Make.unsigned_not [lemma, in Integers]
Make.unsigned_sub_borrow [lemma, in Integers]
Make.unsigned_add_either [lemma, in Integers]
Make.unsigned_add_carry [lemma, in Integers]
Make.unsigned_repr_wordsize [lemma, in Integers]
Make.unsigned_mone [lemma, in Integers]
Make.unsigned_one [lemma, in Integers]
Make.unsigned_zero [lemma, in Integers]
Make.unsigned_repr [lemma, in Integers]
Make.unsigned_eq_zero [lemma, in Integers]
Make.unsigned_range_2 [lemma, in Integers]
Make.unsigned_range [lemma, in Integers]
Make.unsigned_repr_eq [lemma, in Integers]
Make.wordsize [definition, in Integers]
Make.wordsize_max_unsigned [lemma, in Integers]
Make.wordsize_pos [lemma, in Integers]
Make.xor [definition, in Integers]
Make.xor_interval [lemma, in Integers]
Make.xor_shr [lemma, in Integers]
Make.xor_shru [lemma, in Integers]
Make.xor_shl [lemma, in Integers]
Make.xor_is_or [lemma, in Integers]
Make.xor_not_self [lemma, in Integers]
Make.xor_zero_equal [lemma, in Integers]
Make.xor_one_one [lemma, in Integers]
Make.xor_zero_one [lemma, in Integers]
Make.xor_idem [lemma, in Integers]
Make.xor_zero_l [lemma, in Integers]
Make.xor_zero [lemma, in Integers]
Make.xor_assoc [lemma, in Integers]
Make.xor_commut [lemma, in Integers]
Make.Zdecomp [lemma, in Integers]
Make.Zdiv_shift [lemma, in Integers]
Make.zero [definition, in Integers]
Make.zero_ext_range [lemma, in Integers]
Make.zero_ext_shru_shl [lemma, in Integers]
Make.zero_ext_sign_ext [lemma, in Integers]
Make.zero_ext_idem [lemma, in Integers]
Make.zero_sign_ext_narrow [lemma, in Integers]
Make.zero_ext_narrow [lemma, in Integers]
Make.zero_ext_widen [lemma, in Integers]
Make.zero_ext_mod [lemma, in Integers]
Make.zero_ext_and [lemma, in Integers]
Make.zero_ext_above [lemma, in Integers]
Make.zero_ext [definition, in Integers]
Make.Ziter_succ [lemma, in Integers]
Make.Ziter_base [lemma, in Integers]
Make.Znatlike_ind [lemma, in Integers]
Make.Zquot_Zdiv [lemma, in Integers]
Make.Zshiftin [definition, in Integers]
Make.Zshiftin_pos_ind [lemma, in Integers]
Make.Zshiftin_ind [lemma, in Integers]
Make.Zshiftin_inj [lemma, in Integers]
Make.Zshiftin_spec [lemma, in Integers]
Make.Zshiftl_mul_two_p [lemma, in Integers]
Make.Zshiftr_div_two_p [lemma, in Integers]
Make.Zsign_ext_spec [lemma, in Integers]
Make.Zsign_bit [lemma, in Integers]
Make.Zsign_ext [definition, in Integers]
Make.Zsize [definition, in Integers]
Make.Zsize_monotone [lemma, in Integers]
Make.Zsize_interval_2 [lemma, in Integers]
Make.Zsize_interval_1 [lemma, in Integers]
Make.Zsize_shiftin [lemma, in Integers]
Make.Zsize_pos' [lemma, in Integers]
Make.Zsize_pos [lemma, in Integers]
Make.Ztestbit_size_2 [lemma, in Integers]
Make.Ztestbit_size_1 [lemma, in Integers]
Make.Ztestbit_two_p_m1 [lemma, in Integers]
Make.Ztestbit_mod_two_p [lemma, in Integers]
Make.Ztestbit_le [lemma, in Integers]
Make.Ztestbit_above_neg [lemma, in Integers]
Make.Ztestbit_above [lemma, in Integers]
Make.Ztestbit_succ [lemma, in Integers]
Make.Ztestbit_base [lemma, in Integers]
Make.Ztestbit_eq [lemma, in Integers]
Make.Ztestbit_shiftin_succ [lemma, in Integers]
Make.Ztestbit_shiftin_base [lemma, in Integers]
Make.Ztestbit_shiftin [lemma, in Integers]
Make.Ztestbit_m1 [lemma, in Integers]
Make.Ztestbit_1 [lemma, in Integers]
Make.Ztestbit_0 [lemma, in Integers]
Make.zwordsize [definition, in Integers]
Make.Zzero_ext_spec [lemma, in Integers]
Make.Zzero_ext [definition, in Integers]
Make.Z_one_bits_two_p [lemma, in Integers]
Make.Z_one_bits_zero [lemma, in Integers]
Make.Z_one_bits_range [lemma, in Integers]
Make.Z_one_bits_powerserie [lemma, in Integers]
Make.Z_add_is_or [lemma, in Integers]
Make.Z_one_complement [lemma, in Integers]
Make.Z_one_bits [definition, in Integers]
Make.Z_mod_modulus_eq [lemma, in Integers]
Make.Z_mod_modulus_range' [lemma, in Integers]
Make.Z_mod_modulus_range [lemma, in Integers]
Make.Z_mod_modulus [definition, in Integers]
Map [library]
MapFun [module, in Map]
MapFun [module, in MapLib]
MapFun.A [definition, in Map]
MapFun.app' [definition, in MapLib]
MapFun.B [definition, in Map]
MapFun.beq_A [definition, in Map]
MapFun.beq_t_bgt_f [lemma, in MapLib]
MapFun.beq_t_blt_f [lemma, in MapLib]
MapFun.beq_trans [lemma, in MapLib]
MapFun.beq_refl [lemma, in MapLib]
MapFun.beq_sym [lemma, in MapLib]
MapFun.beq_dec [lemma, in MapLib]
MapFun.bgt_t_beq_f [lemma, in MapLib]
MapFun.blt_beq_blt [lemma, in MapLib]
MapFun.blt_t_beq_f [lemma, in MapLib]
MapFun.blt_dec [lemma, in MapLib]
MapFun.compat [definition, in Map]
MapFun.compat [definition, in MapLib]
MapFun.compat_sub_r [lemma, in MapLib]
MapFun.compat_sub_l [lemma, in MapLib]
MapFun.compat_sym [lemma, in MapLib]
MapFun.compat_refl [lemma, in MapLib]
MapFun.disj [definition, in MapLib]
MapFun.disjoint [definition, in Map]
MapFun.disjoint_merge_subseteq [lemma, in Map]
MapFun.disjoint_commut [lemma, in Map]
MapFun.disjUnion [definition, in Map]
MapFun.disjUnion_subseteq_right [lemma, in Map]
MapFun.disjUnion_subseteq_left [lemma, in Map]
MapFun.disjUnion_presv_eqDom [lemma, in Map]
MapFun.disjUnion_presv_in_dom [lemma, in Map]
MapFun.disjUnion_reshuffle [lemma, in Map]
MapFun.disjUnion_equ [lemma, in Map]
MapFun.disjUnion_unique [lemma, in Map]
MapFun.disjUnion_assoc_right_left [lemma, in Map]
MapFun.disjUnion_assoc_left_right [lemma, in Map]
MapFun.disjUnion_in_right [lemma, in Map]
MapFun.disjUnion_in_left [lemma, in Map]
MapFun.disjUnion_commut [lemma, in Map]
MapFun.disjUnion3 [definition, in Map]
MapFun.disj_merge_unique_right [lemma, in Map]
MapFun.disj_merge_unique [lemma, in Map]
MapFun.disj_emp_B [lemma, in Map]
MapFun.disj_emp [lemma, in Map]
MapFun.disj_merge_ABC_CAB [lemma, in Map]
MapFun.disj_merge_ABC_BAC [lemma, in Map]
MapFun.disj_merge_assoc_right_left [lemma, in Map]
MapFun.disj_merge_assoc_left_right [lemma, in Map]
MapFun.disj_merge_B [lemma, in Map]
MapFun.disj_merge_A [lemma, in Map]
MapFun.disj_merge_disjUnion [lemma, in Map]
MapFun.disj_merge_commut [lemma, in Map]
MapFun.disj_x_merge_disj_right [lemma, in Map]
MapFun.disj_x_merge_disj_left [lemma, in Map]
MapFun.disj_merge_disj_right [lemma, in Map]
MapFun.disj_merge_disj_left [lemma, in Map]
MapFun.disj_remove_merge_merge_remove [lemma, in Map]
MapFun.disj_exclusive_right [lemma, in Map]
MapFun.disj_exclusive_left [lemma, in Map]
MapFun.disj_get_neq [lemma, in MapLib]
MapFun.disj_trans_sub [lemma, in MapLib]
MapFun.disj_comm [lemma, in MapLib]
MapFun.disj_set_disj_2 [lemma, in MapLib]
MapFun.disj_set_disj_1 [lemma, in MapLib]
MapFun.disj_meq_join [lemma, in MapLib]
MapFun.disj_merge_elim_lr [lemma, in MapLib]
MapFun.disj_merge_intro_lr [lemma, in MapLib]
MapFun.disj_merge_elim_r [lemma, in MapLib]
MapFun.disj_merge_intro_r [lemma, in MapLib]
MapFun.disj_merge_elim_l [lemma, in MapLib]
MapFun.disj_merge_intro_l [lemma, in MapLib]
MapFun.disj_compat [lemma, in MapLib]
MapFun.disj_meq_disj_l [lemma, in MapLib]
MapFun.disj_meq_disj_r [lemma, in MapLib]
MapFun.disj_indom [lemma, in MapLib]
MapFun.disj_sig [lemma, in MapLib]
MapFun.disj_sym [lemma, in MapLib]
MapFun.disj_emp_r [lemma, in MapLib]
MapFun.disj_emp_l [lemma, in MapLib]
MapFun.emp [definition, in Map]
MapFun.emp [definition, in MapLib]
MapFun.emp_disjUnion_unique [lemma, in Map]
MapFun.emp_sem [lemma, in MapLib]
MapFun.emp' [definition, in MapLib]
MapFun.eqDom [definition, in Map]
MapFun.eqdom [definition, in MapLib]
MapFun.eqDom_disj_presv [lemma, in Map]
MapFun.eqDom_notin_presv [lemma, in Map]
MapFun.eqDom_disjUnion_right [lemma, in Map]
MapFun.eqDom_disjUnion_left [lemma, in Map]
MapFun.eqDom_merge [lemma, in Map]
MapFun.eqDom_indom_update_eq [lemma, in Map]
MapFun.eqDom_trans [lemma, in Map]
MapFun.eqDom_sym [lemma, in Map]
MapFun.eqDom_refl [lemma, in Map]
MapFun.eqdom_merge_set [lemma, in MapLib]
MapFun.equal_ext [lemma, in MapLib]
MapFun.eq_get [lemma, in Map]
MapFun.eq_dec [lemma, in MapLib]
MapFun.extend_presv_disjUnion_right [lemma, in Map]
MapFun.extend_presv_disjUnion_left [lemma, in Map]
MapFun.extend_presv_disj_right [lemma, in Map]
MapFun.extend_presv_disj_left [lemma, in Map]
MapFun.extensionality [lemma, in MapLib]
MapFun.ext_presv_mapsto [lemma, in Map]
MapFun.ext_mapsto [lemma, in Map]
MapFun.ext_in_dom [lemma, in Map]
MapFun.ext_emp_sglton [lemma, in Map]
MapFun.get [definition, in MapLib]
MapFun.get_sub_get [lemma, in MapLib]
MapFun.get_indom [lemma, in MapLib]
MapFun.get_lookup [lemma, in MapLib]
MapFun.get_sig_some_eq' [lemma, in MapLib]
MapFun.get_sig_some_eq [lemma, in MapLib]
MapFun.get_a_sig_a' [lemma, in MapLib]
MapFun.get_a_sig_a [lemma, in MapLib]
MapFun.get_sig_none [lemma, in MapLib]
MapFun.get_sig_some [lemma, in MapLib]
MapFun.get_sig [lemma, in MapLib]
MapFun.get_set_same [lemma, in MapLib]
MapFun.get_dec [lemma, in MapLib]
MapFun.get' [definition, in MapLib]
MapFun.get'_set'_neq [lemma, in MapLib]
MapFun.get'_set' [lemma, in MapLib]
MapFun.index_beq_false_1 [lemma, in MapLib]
MapFun.indom [definition, in MapLib]
MapFun.indom_merge_elim [lemma, in MapLib]
MapFun.indom_merge_intro [lemma, in MapLib]
MapFun.indom_disj [lemma, in MapLib]
MapFun.indom_meq_indom [lemma, in MapLib]
MapFun.indom_sub_indom [lemma, in MapLib]
MapFun.indom_get [lemma, in MapLib]
MapFun.indom_lookup [lemma, in MapLib]
MapFun.in_right_in_merge [lemma, in Map]
MapFun.in_left_in_merge [lemma, in Map]
MapFun.in_merge_commut [lemma, in Map]
MapFun.in_merge_not_right_in_left [lemma, in Map]
MapFun.in_merge_not_left_in_right [lemma, in Map]
MapFun.in_merge_left_or_right [lemma, in Map]
MapFun.in_or_notin [lemma, in Map]
MapFun.in_not_notin [lemma, in Map]
MapFun.in_dom [definition, in Map]
MapFun.in_notlb [lemma, in MapLib]
MapFun.is_orderset_minus' [lemma, in MapLib]
MapFun.is_set_app' [lemma, in MapLib]
MapFun.is_orderset_set' [lemma, in MapLib]
MapFun.is_orderset_sig' [lemma, in MapLib]
MapFun.is_orderset_emp' [lemma, in MapLib]
MapFun.is_orderset [definition, in MapLib]
MapFun.join [definition, in MapLib]
MapFun.joinsig [definition, in MapLib]
MapFun.joinsig_merge_sig [lemma, in MapLib]
MapFun.joinsig_set_set [lemma, in MapLib]
MapFun.joinsig_set [lemma, in MapLib]
MapFun.join_get_get_neq [lemma, in MapLib]
MapFun.join_meq_eql [lemma, in MapLib]
MapFun.join_get_l [lemma, in MapLib]
MapFun.join_get_r [lemma, in MapLib]
MapFun.join_whole2part [lemma, in MapLib]
MapFun.join_join_disj_l [lemma, in MapLib]
MapFun.join_join_disj_r [lemma, in MapLib]
MapFun.join_assoc_spec_1 [lemma, in MapLib]
MapFun.join_assoc [lemma, in MapLib]
MapFun.join_meq_sub_1st [lemma, in MapLib]
MapFun.join_shift_l [lemma, in MapLib]
MapFun.join_joinsig_get [lemma, in MapLib]
MapFun.join_sig_get [lemma, in MapLib]
MapFun.join_index_beq_false [lemma, in MapLib]
MapFun.join_join_join3 [lemma, in MapLib]
MapFun.join_sub_sub [lemma, in MapLib]
MapFun.join_sub_minus [lemma, in MapLib]
MapFun.join_emp_eq [lemma, in MapLib]
MapFun.join_meq [lemma, in MapLib]
MapFun.join_unique_r [lemma, in MapLib]
MapFun.join_sig_set [lemma, in MapLib]
MapFun.join_emp [lemma, in MapLib]
MapFun.join_set_nindom_r [lemma, in MapLib]
MapFun.join_set_nindom_l [lemma, in MapLib]
MapFun.join_set_l_rev [lemma, in MapLib]
MapFun.join_set_r [lemma, in MapLib]
MapFun.join_set_l [lemma, in MapLib]
MapFun.join_get_or [lemma, in MapLib]
MapFun.join_lookup_or [lemma, in MapLib]
MapFun.join_merge_disj [lemma, in MapLib]
MapFun.join_get_get_r [lemma, in MapLib]
MapFun.join_get_get_l [lemma, in MapLib]
MapFun.join_lookup_lookup_r [lemma, in MapLib]
MapFun.join_lookup_lookup_l [lemma, in MapLib]
MapFun.join_unique [lemma, in MapLib]
MapFun.join_sub_r [lemma, in MapLib]
MapFun.join_sub_l [lemma, in MapLib]
MapFun.join_disj_meq [lemma, in MapLib]
MapFun.join_assoc_r [lemma, in MapLib]
MapFun.join_assoc_l [lemma, in MapLib]
MapFun.join_comm [lemma, in MapLib]
MapFun.join3 [definition, in MapLib]
MapFun.join3_2join [lemma, in MapLib]
MapFun.join3_comm_132 [lemma, in MapLib]
MapFun.join3_comm_231 [lemma, in MapLib]
MapFun.join3_comm_312 [lemma, in MapLib]
MapFun.join3_comm_213 [lemma, in MapLib]
MapFun.join3_join_join [lemma, in MapLib]
MapFun.lb [definition, in MapLib]
MapFun.lb_minus' [lemma, in MapLib]
MapFun.lb_set'_gt [lemma, in MapLib]
MapFun.lb_set'_lt [lemma, in MapLib]
MapFun.lb_notin [lemma, in MapLib]
MapFun.lb_trans [lemma, in MapLib]
MapFun.listset [inductive, in MapLib]
MapFun.listset_con [constructor, in MapLib]
MapFun.lookup [definition, in MapLib]
MapFun.lookup_merge_intro [lemma, in MapLib]
MapFun.lookup_merge_elim [lemma, in MapLib]
MapFun.lookup_meq_lookup [lemma, in MapLib]
MapFun.lookup_sub_lookup [lemma, in MapLib]
MapFun.lookup_indom [lemma, in MapLib]
MapFun.lookup_unique [lemma, in MapLib]
MapFun.lookup_get [lemma, in MapLib]
MapFun.lookup_emp [lemma, in MapLib]
MapFun.lst [definition, in MapLib]
MapFun.Map [definition, in Map]
MapFun.map [definition, in MapLib]
MapFun.mapsto_subseteq_mapsto [lemma, in Map]
MapFun.mapsto_mapsto_put [lemma, in Map]
MapFun.mapsto_put_neq [lemma, in Map]
MapFun.mapsto_put_eq [lemma, in Map]
MapFun.mapsto_put [lemma, in Map]
MapFun.mapsto_indom [lemma, in Map]
MapFun.maps_to [definition, in Map]
MapFun.meq [definition, in MapLib]
MapFun.meq_merge_meq [lemma, in MapLib]
MapFun.meq_merge_emp_r [lemma, in MapLib]
MapFun.meq_merge_emp_l [lemma, in MapLib]
MapFun.meq_merge_assoc_r [lemma, in MapLib]
MapFun.meq_merge_assoc_l [lemma, in MapLib]
MapFun.meq_merge_sym [lemma, in MapLib]
MapFun.meq_eq [lemma, in MapLib]
MapFun.meq_sem [lemma, in MapLib]
MapFun.meq_trans [lemma, in MapLib]
MapFun.meq_sym [lemma, in MapLib]
MapFun.meq_refl [lemma, in MapLib]
MapFun.merge [definition, in Map]
MapFun.merge [definition, in MapLib]
MapFun.merge_assoc [lemma, in Map]
MapFun.merge_extends_map [lemma, in Map]
MapFun.merge_presv_indom_right [lemma, in Map]
MapFun.merge_presv_indom_left [lemma, in Map]
MapFun.merge_set_eq_2 [lemma, in MapLib]
MapFun.merge_set_eq_1 [lemma, in MapLib]
MapFun.merge_sub_intro [lemma, in MapLib]
MapFun.merge_sem [lemma, in MapLib]
MapFun.minus [definition, in Map]
MapFun.minus [definition, in MapLib]
MapFun.minus_disjUnion [lemma, in Map]
MapFun.minus_disjoint [lemma, in Map]
MapFun.minus_sem [lemma, in MapLib]
MapFun.minus' [definition, in MapLib]
MapFun.my_join_disj [lemma, in MapLib]
MapFun.my_joinsig_set [lemma, in MapLib]
MapFun.my_join_sig_abc [lemma, in MapLib]
MapFun.my_joinsig_join_set [lemma, in MapLib]
MapFun.nid_remove [lemma, in Map]
MapFun.nindom_get [lemma, in MapLib]
MapFun.notin_left_notin_right_notin_merge [lemma, in Map]
MapFun.notin_merge_distr_right [lemma, in Map]
MapFun.notin_merge_distr_left [lemma, in Map]
MapFun.notin_not_in [lemma, in Map]
MapFun.not_in_merge_commut [lemma, in Map]
MapFun.not_notin_in [lemma, in Map]
MapFun.not_in_notin [lemma, in Map]
MapFun.not_in_dom [definition, in Map]
MapFun.option2false [lemma, in MapLib]
MapFun.option2val [lemma, in MapLib]
MapFun.prf [definition, in MapLib]
MapFun.put [definition, in Map]
MapFun.putA_presv_nidB [lemma, in Map]
MapFun.put_xx_update [lemma, in Map]
MapFun.put_xy_commut [lemma, in Map]
MapFun.put_merge_merge_put [lemma, in Map]
MapFun.put_cancel_remove [lemma, in Map]
MapFun.put_unique [lemma, in Map]
MapFun.put_noninterfere [lemma, in Map]
MapFun.put_get_eq [lemma, in Map]
MapFun.remove [definition, in Map]
MapFun.removeX_presv_Y [lemma, in Map]
MapFun.remove_left_presv_disjUnion_right [lemma, in Map]
MapFun.remove_left_presv_disjUnion_left [lemma, in Map]
MapFun.remove_merge_merge_remove_right [lemma, in Map]
MapFun.remove_presv_disj_right [lemma, in Map]
MapFun.remove_presv_disj_left [lemma, in Map]
MapFun.remove_ext_ext_remove [lemma, in Map]
MapFun.remove_cancel_put [lemma, in Map]
MapFun.remove_nothing [lemma, in Map]
MapFun.remove_shrinks_dom [lemma, in Map]
MapFun.rlist [definition, in MapLib]
MapFun.set [definition, in MapLib]
MapFun.set_emp_sig [lemma, in MapLib]
MapFun.set_sig [lemma, in MapLib]
MapFun.set_a_get_a' [lemma, in MapLib]
MapFun.set_a_get_a [lemma, in MapLib]
MapFun.set_sem [lemma, in MapLib]
MapFun.set_sem_old [lemma, in MapLib]
MapFun.set' [definition, in MapLib]
MapFun.sgltonM [definition, in Map]
MapFun.sig [definition, in Map]
MapFun.sig [definition, in MapLib]
MapFun.sig_sem [lemma, in MapLib]
MapFun.sig' [definition, in MapLib]
MapFun.split_sglton_free [lemma, in Map]
MapFun.sub [definition, in MapLib]
MapFun.subDom_inDom_update [lemma, in Map]
MapFun.subDom_update [lemma, in Map]
MapFun.subDom_trans [lemma, in Map]
MapFun.subseteq [definition, in Map]
MapFun.subseteq_split [lemma, in Map]
MapFun.subseteq_transitivity [lemma, in Map]
MapFun.subset_unique_map [lemma, in Map]
MapFun.sub_dom [definition, in Map]
MapFun.sub_exists_join [lemma, in MapLib]
MapFun.sub_merge_intro_r [lemma, in MapLib]
MapFun.sub_merge_intro_l [lemma, in MapLib]
MapFun.sub_merge_elim_r [lemma, in MapLib]
MapFun.sub_merge_elim_l [lemma, in MapLib]
MapFun.sub_merge_r [lemma, in MapLib]
MapFun.sub_merge_l [lemma, in MapLib]
MapFun.sub_compat [lemma, in MapLib]
MapFun.sub_sig [lemma, in MapLib]
MapFun.sub_trans [lemma, in MapLib]
MapFun.sub_asym [lemma, in MapLib]
MapFun.sub_refl [lemma, in MapLib]
MapFun.Test [section, in MapLib]
MapFun.Test.a [variable, in MapLib]
MapFun.Test.a' [variable, in MapLib]
MapFun.Test.b [variable, in MapLib]
MapFun.unit_emp_disjUnion [lemma, in Map]
MapFun.unit_emp_merge_B [lemma, in Map]
MapFun.unit_emp_merge [lemma, in Map]
MapFun.update_presv_disjUnion_right [lemma, in Map]
MapFun.update_presv_disjUnion_left [lemma, in Map]
MapFun.update_presv_disj_right [lemma, in Map]
MapFun.update_presv_disj_left [lemma, in Map]
MapLib [library]
MapSpec [module, in Map]
MapSpec.beq_Domain [axiom, in Map]
MapSpec.domain [axiom, in Map]
MapSpec.image [axiom, in Map]
mapstoval [definition, in assertion]
mapstoval_exist [lemma, in lmachLib]
mapstoval_load_vptr [lemma, in tst_prop]
mapstoval_load [lemma, in tst_prop]
mapstoval_loadbytes [lemma, in tst_prop]
mapstoval_disj_false [lemma, in common]
mapstoval_vptr_eq1 [lemma, in inv_prop]
mapstoval_vptr_eq [lemma, in inv_prop]
mapstoval_mem_eq [lemma, in inv_prop]
mapstoval_rule_type_val_match_eq [lemma, in inv_prop]
mapsto_load_eq [lemma, in tst_prop]
MAP_RANGE.B [axiom, in MapLib]
MAP_RANGE [module, in MapLib]
MAP_DOMAIN.blt_beq_dec [axiom, in MapLib]
MAP_DOMAIN.blt_asym [axiom, in MapLib]
MAP_DOMAIN.blt_irrefl [axiom, in MapLib]
MAP_DOMAIN.blt_trans [axiom, in MapLib]
MAP_DOMAIN.neq_beq_false [axiom, in MapLib]
MAP_DOMAIN.eq_beq_true [axiom, in MapLib]
MAP_DOMAIN.beq_false_neq [axiom, in MapLib]
MAP_DOMAIN.beq_true_eq [axiom, in MapLib]
MAP_DOMAIN.blt [axiom, in MapLib]
MAP_DOMAIN.beq [axiom, in MapLib]
MAP_DOMAIN.A [axiom, in MapLib]
MAP_DOMAIN [module, in MapLib]
MatchLHMsgLength [definition, in OSQInvDef]
MatchLHMsgList [definition, in OSQInvDef]
MatchLHMsgSize [definition, in OSQInvDef]
MatchMutexSem [definition, in OSQInvDef]
match_tid_prio [definition, in inferules]
match_loadbytes [lemma, in lmachLib]
mathlib [library]
mathlib_join [library]
mathsolver [library]
math_MN_le_max [lemma, in mathlib]
math_MN_le_int16 [lemma, in mathlib]
math_MN_max_prop [lemma, in mathlib]
math_le_int16 [lemma, in mathlib]
math_ltu_false_false [lemma, in mathlib]
math_int_lt_eq_split'' [lemma, in mathlib]
math_int_lt_eq_split' [lemma, in mathlib]
math_int_lt_eq_split [lemma, in mathlib]
math_int_eq_len [lemma, in mathlib]
math_inc_eq_ltu [lemma, in mathlib]
math_max_le_q [lemma, in mathlib]
math_length_int_eq [lemma, in mathlib]
math_len_le_and [lemma, in mathlib]
math_le_max_q [lemma, in mathlib]
math_prio_eq [lemma, in mathlib]
math_mapval_core_prop [lemma, in mathlib]
math_nth_8_eq_zero' [lemma, in mathlib]
math_pry_neq_prio_neq [lemma, in mathlib]
math_nth_8_eq_zero2 [lemma, in mathlib]
math_out_start_eq' [lemma, in mathlib]
math_xyz_prop4' [lemma, in mathlib]
math_xyz_prop3' [lemma, in mathlib]
math_xyz_prop2' [lemma, in mathlib]
math_le_trans [lemma, in mathlib]
math_nth_8_eq_zero [lemma, in mathlib]
math_nth_8_eq_shl [lemma, in mathlib]
math_nth_8_gt_zero [lemma, in mathlib]
math_nth_8_neq_zero' [lemma, in mathlib]
math_nth_8_neq_zero [lemma, in mathlib]
math_nth_8_neq_not [lemma, in mathlib]
math_xy_prio_cons [lemma, in mathlib]
math_prio_neq_zero [lemma, in mathlib]
math_prop_divu_ltmod [lemma, in mathlib]
math_prop_divu_zle [lemma, in mathlib]
math_prop_ltu_mod [lemma, in mathlib]
math_highest_prio_select [lemma, in mathlib]
math_prio_8_lt [lemma, in mathlib]
math_unmap_core_prop [lemma, in mathlib]
math_and_shf_ltu_true [lemma, in mathlib]
math_unmap_get_y [lemma, in mathlib]
math_88_prio_range [lemma, in mathlib]
math_shrl_3_eq [lemma, in mathlib]
math_8range_eqy [lemma, in mathlib]
math_64_le_8 [lemma, in mathlib]
math_prop_int_zero_eq [lemma, in mathlib]
math_8_255_eq [lemma, in mathlib]
math_unmap_range [lemma, in mathlib]
math_prop_ltu_20 [lemma, in mathlib]
math_prop_int_modu [lemma, in mathlib]
math_lt_mod_lt [lemma, in mathlib]
math_out_start_eq [lemma, in mathlib]
math_xyz_prop3 [lemma, in mathlib]
math_xyz_prop2 [lemma, in mathlib]
math_le_xyz [lemma, in mathlib]
math_prop_eq [lemma, in mathlib]
math_prop_neq_zero2 [lemma, in mathlib]
math_lshift_neq_zero [lemma, in mathlib]
math_prop_neq_zero [lemma, in mathlib]
math_and_zero [lemma, in mathlib]
math_prop_eq0 [lemma, in mathlib]
math_prop_and [lemma, in mathlib]
math_des88 [lemma, in mathlib]
math_prop_l3 [lemma, in mathlib]
math_prop_l2 [lemma, in mathlib]
math_prop_l1 [lemma, in mathlib]
maxlen [definition, in language]
max_signed_val [lemma, in IntLib]
max_unsigned_val [lemma, in IntLib]
max_unsigned_gt0 [lemma, in IntLib]
max_signed_gt0 [lemma, in IntLib]
MAX_TCB [definition, in absop]
MboxAcceptProof [lemma, in MboxAcceptProof]
MboxAcceptProof [library]
MboxCreateProof [lemma, in MboxCreateProof]
MboxCreateProof [library]
MboxCreatePure [library]
MboxDelProof [lemma, in MboxDelProof]
MboxDelProof [library]
MboxPendPart2 [library]
MboxPendProof [lemma, in MboxPendProof]
MboxPendProof [library]
MboxPostProof [lemma, in MboxPostProof]
MboxPostProof [library]
MBOX_PEND_SUCC [definition, in os_code_defs]
MBOX_PEND_TIMEOUT_ERR [definition, in os_code_defs]
MBOX_PEND_NOT_READY_ERR [definition, in os_code_defs]
MBOX_PEND_FROM_IDLE_ERR [definition, in os_code_defs]
MBOX_PEND_WRONG_TYPE_ERR [definition, in os_code_defs]
MBOX_PEND_P_NOT_LEGAL_ERR [definition, in os_code_defs]
MBOX_PEND_NULL_ERR [definition, in os_code_defs]
MBOX_POST_SUCC [definition, in os_code_defs]
MBOX_POST_FULL_ERR [definition, in os_code_defs]
MBOX_POST_TASK_WT_ERR [definition, in os_code_defs]
MBOX_POST_WRONG_TYPE_ERR [definition, in os_code_defs]
MBOX_POST_P_NOT_LEGAL_ERR [definition, in os_code_defs]
MBOX_POST_MSG_NULL_ERR [definition, in os_code_defs]
MBOX_POST_NULL_ERR [definition, in os_code_defs]
MBOX_DEL_SUCC [definition, in os_code_defs]
MBOX_DEL_TASK_WAITING_ERR [definition, in os_code_defs]
MBOX_DEL_WRONG_TYPE_ERR [definition, in os_code_defs]
MBOX_DEL_P_NOT_LEGAL_ERR [definition, in os_code_defs]
MBOX_DEL_NULL_ERR [definition, in os_code_defs]
mbox_pend_part0 [lemma, in MboxPendPart2]
mbox_pendapi [definition, in absop]
mbox_pend [definition, in absop]
mbox_pend_block_get_succ [definition, in absop]
mbox_pend_timeout_err [definition, in absop]
mbox_pend_block [definition, in absop]
mbox_pend_inst_get_succ [definition, in absop]
mbox_pend_not_ready_err [definition, in absop]
mbox_pend_from_idle_err [definition, in absop]
mbox_pend_wrong_type_err [definition, in absop]
mbox_pend_p_not_legal_err [definition, in absop]
mbox_pend_null_err [definition, in absop]
mbox_postapi [definition, in absop]
mbox_post [definition, in absop]
mbox_post_put_mail_in_succ [definition, in absop]
mbox_post_ex_wt_succ [definition, in absop]
mbox_post_full_err [definition, in absop]
mbox_post_wrong_type_err [definition, in absop]
mbox_post_p_not_legal_err [definition, in absop]
mbox_post_msg_null_err [definition, in absop]
mbox_post_null_err [definition, in absop]
mbox_accapi [definition, in absop]
mbox_acc [definition, in absop]
mbox_acc_succ [definition, in absop]
mbox_acc_err [definition, in absop]
mbox_delapi [definition, in absop]
mbox_del [definition, in absop]
mbox_del_succ [definition, in absop]
mbox_del_task_wt_err [definition, in absop]
mbox_del_wrong_type_err [definition, in absop]
mbox_del_p_not_legal_err [definition, in absop]
mbox_del_null_err [definition, in absop]
mbox_createapi [definition, in absop]
mbox_create [definition, in absop]
mbox_create_succ [definition, in absop]
mbox_create_err [definition, in absop]
mbox_post_part0 [lemma, in MboxPostProof]
mbox_post_part6 [lemma, in MboxPostProof]
mbox_post_part5 [lemma, in MboxPostProof]
mbox_post_part4 [lemma, in MboxPostProof]
mbox_post_part3 [lemma, in MboxPostProof]
mbox_post_part2 [lemma, in MboxPostProof]
mbox_post_part1 [lemma, in MboxPostProof]
MBox_Create_TCB_prop [lemma, in MboxCreatePure]
mbox_rh_tcblist_ecblist_p_hold [lemma, in Mbox_common]
mbox_acpt_rh_tcblist_ecblist_p_hold [lemma, in Mbox_common]
Mbox_common [library]
mem [definition, in memory]
memdata [library]
MemMod [module, in memory]
MemMod_join_sub' [lemma, in asrtLib]
MemMod_join_sub [lemma, in asrtLib]
MemMod_eq_join_eq [lemma, in inv_prop]
memory [library]
MemoryNotFull [axiom, in memory]
memset_allocb_comm [lemma, in lmachLib]
memval [inductive, in memdata]
Mem_join_disj [lemma, in joinmemLib]
Mem_minus_disj [lemma, in joinmemLib]
mem_join_sig_r [lemma, in lmachLib]
mem_set_a_set_a' [lemma, in lmachLib]
mem_set_a_set_a [lemma, in lmachLib]
mem_get_eq [lemma, in progtaskstepLib]
mem_sub_false [lemma, in progtaskstepLib]
mem_sub_get_get [lemma, in progtaskstepLib]
mem_disj_disj_join_disj [lemma, in progtaskstepLib]
mem_disj_merge_minus_merge' [lemma, in lemmasfortoptheo]
mem_disj_merge_minus_disj' [lemma, in lemmasfortoptheo]
mem_disj_join2_disj [lemma, in tst_prop]
mem_disj_join_join_sub [lemma, in tst_prop]
mem_join_disj_join [lemma, in tst_prop]
mem_join_merge_merge_eq [lemma, in tst_prop]
mem_join_join_disj_mergeeq [lemma, in tst_prop]
mem_join_disj_disj [lemma, in tst_prop]
mem_disj_join_disjmerge' [lemma, in tst_prop]
mem_disj_join_mergeeq [lemma, in tst_prop]
mem_disj_join_disjmerge [lemma, in tst_prop]
mem_join_disj_disj_join [lemma, in tst_prop]
mem_join_join_merge_eq [lemma, in tst_prop]
Mem_disj_join_dis [lemma, in tst_prop]
Mem_join_disj_disj_disj [lemma, in tst_prop]
Mem_join_disj_merge [lemma, in tst_prop]
mem_join_join_merge [lemma, in tst_prop]
mem_join_join_join_disj_merge' [lemma, in tst_prop]
mem_join_join_join_eqmerge [lemma, in tst_prop]
mem_join_disj_trans [lemma, in tst_prop]
mem_disj_merge_ass [lemma, in tst_prop]
mem_disj_merge_minus_merge [lemma, in tst_prop]
mem_disj_merge_minus_disj [lemma, in tst_prop]
mem_join_join_disj [lemma, in tst_prop]
mem_minus_disj [lemma, in tst_prop]
mem_join_minus [lemma, in tst_prop]
merge_set_eq [lemma, in lemmasfortoptheo]
merge_store_merge [lemma, in lemmasfortoptheo]
message [definition, in os_code_defs]
MethSim [inductive, in simulation]
MethSimAsrt [definition, in simulation]
methsimlift [library]
MethSimMod [inductive, in simulation]
MethSim_to_Methsim' [lemma, in soundness]
MethSim_to_Methsim'_aux [lemma, in methsimlift]
meth_sim [constructor, in simulation]
meth_sim_mod [constructor, in simulation]
minus_sub [lemma, in tst_prop]
minus_set_comm [lemma, in tst_prop]
minus1lt [lemma, in IntLib]
min_signed_val [lemma, in IntLib]
min_signed_lt0 [lemma, in IntLib]
mkfunasrt [constructor, in assertion]
mkinvasrt [constructor, in assertion]
mmapspec [module, in auxdef]
mmapspec.beq_Domain [definition, in auxdef]
mmapspec.domain [definition, in auxdef]
mmapspec.image [definition, in auxdef]
MNull [constructor, in memdata]
modulus_val [lemma, in IntLib]
modusponens [lemma, in Coqlib]
mprio [definition, in os_code_defs]
msg [definition, in language]
msglist_p_compose_mutex [lemma, in OSMutexPostPure]
msglist_p_compose_mbox [lemma, in Mbox_common]
msgqlist_p_compose' [lemma, in OSQPostPure]
msgqlist_p_compose [lemma, in OSQAcceptPure]
MsgqMod [module, in language]
MsgqMod_merge_emp_l [lemma, in lemmasforseplog]
MsgqMod_disj_merge_eq [lemma, in lemmasforseplog]
msgqnode_p_hold_no_end [lemma, in OSQAcceptPure]
msgqnode_p_hold_end [lemma, in OSQAcceptPure]
msgqnode_p_nomsg [lemma, in OSQAcceptPure]
msgqueuetbl [definition, in os_code_defs]
MSGQ_OVF_ERR [definition, in absop]
MSGQ_DEL_EX_ERR [definition, in absop]
MSGQ_NULL_ERR [definition, in absop]
MSG_NULL_ERR [definition, in absop]
msk [definition, in os_code_defs]
mul [definition, in val]
mund_nth_val_a1 [lemma, in OSMutex_common]
mund_to_nat_a1 [lemma, in OSMutex_common]
mund_int_byte_max_unsigned [lemma, in OSMutex_common]
mund_ltu_a2 [lemma, in OSMutex_common]
mund_ltu_a1 [lemma, in OSMutex_common]
mund_int_mod [lemma, in OSMutex_common]
mund_int_byte_modulus [lemma, in OSMutex_common]
mund_int_a3 [lemma, in OSMutex_common]
mund_int_ltu_revers [lemma, in OSMutex_common]
mund_val_inj_a1 [lemma, in OSMutex_common]
mund_val_inj_a0 [lemma, in OSMutex_common]
mund_int_a2 [lemma, in OSMutex_common]
mund_int_a1 [lemma, in OSMutex_common]
mund_int_c1 [lemma, in OSMutex_common]
mund_disj_sub_w [lemma, in OSMutexPendPure1]
mund_disj_sub_r [lemma, in OSMutexPendPure1]
mund_disj_sub_l [lemma, in OSMutexPendPure1]
mutexacc [definition, in absop]
mutexaccapi [definition, in absop]
mutexacc_succ_absinfer [lemma, in OSMutex_common]
mutexacc_prio_err_absinfer [lemma, in OSMutex_common]
mutexacc_no_available_absinfer [lemma, in OSMutex_common]
mutexacc_no_mutex_err_absinfer [lemma, in OSMutex_common]
mutexacc_null_absinfer [lemma, in OSMutex_common]
mutexacc_succ [definition, in absop]
mutexacc_prio_err [definition, in absop]
mutexacc_no_available [definition, in absop]
mutexacc_no_mutex_err [definition, in absop]
mutexacc_null [definition, in absop]
mutexandnotmutex [lemma, in OSMutexPostPure]
mutexcre [definition, in absop]
mutexcreapi [definition, in absop]
mutexcre_succ_absinfer [lemma, in OSMutex_common]
mutexcre_error_absinfer [lemma, in OSMutex_common]
mutexcre_succ [definition, in absop]
mutexcre_error [definition, in absop]
mutexdel [definition, in absop]
mutexdelapi [definition, in absop]
mutexdel_pr_not_holder_err_absinfer [lemma, in OSMutex_common]
mutexdel_succ_absinfer [lemma, in OSMutex_common]
mutexdel_ex_wt_err_absinfer [lemma, in OSMutex_common]
mutexdel_type_err_absinfer [lemma, in OSMutex_common]
mutexdel_no_mutex_err_absinfer [lemma, in OSMutex_common]
mutexdel_null_absinfer [lemma, in OSMutex_common]
mutexdel_intlemma1 [lemma, in OSMutex_common]
mutexdel_pr_not_holder_err [definition, in absop]
mutexdel_succ [definition, in absop]
mutexdel_ex_wt_err [definition, in absop]
mutexdel_type_err [definition, in absop]
mutexdel_no_mutex_err [definition, in absop]
mutexdel_null [definition, in absop]
mutexpend [definition, in absop]
mutexpendapi [definition, in absop]
mutexpend_TCBNode_P_in_tcb_rdy [lemma, in OSMutex_common]
mutexpend_block_get_step [lemma, in OSMutexPendPure1]
mutexpend_block_timeout_step [lemma, in OSMutexPendPure1]
mutexpend_block_no_lift_step [lemma, in OSMutexPendPure1]
mutexpend_cur_prio_eql_mprio_err [definition, in absop]
mutexpend_ptcb_prio_eql_idle_err [definition, in absop]
mutexpend_pr_not_holder_err [definition, in absop]
mutexpend_block_get [definition, in absop]
mutexpend_to [definition, in absop]
mutexpend_block_no_lift [definition, in absop]
mutexpend_block_lift [definition, in absop]
mutexpend_deadlock_err [definition, in absop]
mutexpend_nest_err [definition, in absop]
mutexpend_get_succ [definition, in absop]
mutexpend_prio_err [definition, in absop]
mutexpend_msg_not_null_err [definition, in absop]
mutexpend_stat_err [definition, in absop]
mutexpend_idle_err [definition, in absop]
mutexpend_type_err [definition, in absop]
mutexpend_no_mutex_err [definition, in absop]
mutexpend_null [definition, in absop]
mutexpost [definition, in absop]
mutexpostapi [definition, in absop]
MutexPostNoUnliftSuccReturn [lemma, in OSMutexPostPart3_3]
MutexPostPart1 [lemma, in OSMutexPostPart2]
MutexPostPart10 [lemma, in OSMutexPostPart2_0]
MutexPostPart3 [lemma, in OSMutexPostPart3]
MutexPostPart3133 [lemma, in OSMutexPostPart30]
MutexPostPIRdyTable2 [lemma, in OSMutexPostPart2_1]
mutexpost_intlemma1 [lemma, in OSMutex_common]
mutexpost_wl_highest_prio_err [definition, in absop]
mutexpost_prio_err [definition, in absop]
mutexpost_original_not_holder_err [definition, in absop]
mutexpost_exwt_no_return_prio_succ [definition, in absop]
mutexpost_exwt_return_prio_succ [definition, in absop]
mutexpost_nowt_no_return_prio_succ [definition, in absop]
mutexpost_nowt_return_prio_succ [definition, in absop]
mutexpost_no_owner_err [definition, in absop]
mutexpost_type_err [definition, in absop]
mutexpost_no_mutex_err [definition, in absop]
mutexpost_null [definition, in absop]
mutex_rh_tcblist_ecblist_p_hold [lemma, in OSMutex_common]
mutex_createpure [lemma, in OSMutex_common]
Mutex_Create_TCB_prop [lemma, in OSMutex_common]
mutex_triangle [lemma, in OSMutex_common]
mutex_eventtype_neq_mutex [lemma, in OSMutex_common]
mutex_pend_inv_update1 [lemma, in OSMutex_common]
mutex_acpt_rh_tcblist_ecblist_p_hold [lemma, in OSMutex_common]
Mutex_owner_set_true [lemma, in OSMutex_common]
mutex_ex_wt_ex_owner [lemma, in OSMutex_common]
Mutex_owner_set' [lemma, in OSMutex_common]
mutex_no_owner_nil_wls' [lemma, in OSMutex_common]
mutex_no_owner_nil_wls [lemma, in OSMutex_common]
mutex_rh_tcblist_ecblist_p_hold [lemma, in OSMutexPostPure]
mutex_pend_ptcb_is_rdy_right_to_cur' [lemma, in OSMutexPendPart4]
mutex_pend_part_0 [lemma, in OSMutexPendProof]
Mutex_owner_hold_for_set_tcb [lemma, in sem_common]
Mutex_owner_set [lemma, in sem_common]
mutex_pend_can_not_lift_right_to_cur [lemma, in OSMutexPendPart2]
mutex_pend_ptcb_is_rdy_right_to_cur [lemma, in OSMutexPendPart2]
mutex_pend_pip_is_not_hold_right_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_cur_prio_eql_mprio_right_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_not_rdy_right_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_idle_err_right_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_pip_is_not_hold_left_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_cur_prio_eql_mprio_left_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_not_rdy_left_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_idle_err_left_to_cur [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_cur_err [lemma, in OSMutexPendPart5]
mutex_pend_ptcb_is_rdy_left_to_cur' [lemma, in OSMutexPendPart3]
mutex_pend_can_not_lift_left_to_cur [lemma, in OSMutexPendPart1]
mutex_pend_ptcb_is_rdy_left_to_cur [lemma, in OSMutexPendPart1]
Mutex_owner_hold_for_set_tcb [lemma, in Mbox_common]
Mutex_owner_set [lemma, in Mbox_common]
mvallist [definition, in memdata]
myAconj [definition, in seplog_tactics]
myAconj [definition, in tacticsforseplog]
myAnd [definition, in mathlib]
myAppAsrtTree [definition, in seplog_tactics]
myAppAsrtTree_true_r [lemma, in seplog_tactics]
myAppAsrtTree_assoc [lemma, in seplog_tactics]
myAppAsrtTree_nil_r [lemma, in seplog_tactics]
myAppAssnTree [definition, in tacticsforseplog]
myAppAssnTree_assoc [lemma, in tacticsforseplog]
myAppAssnTree_nil_r [lemma, in tacticsforseplog]
myarrow [definition, in tacticsforseplog]
my_nth_val'_and_nth_val [lemma, in mathlib]
my_nth_val'_eql_yours [lemma, in mathlib]
my_nth_val' [definition, in mathlib]


N

nabt_lift [lemma, in progtaskstepLib]
natlist_sort [definition, in seplog_tactics]
natlist_insert [definition, in seplog_tactics]
natlist_sort [definition, in tacticsforseplog]
natlist_insert [definition, in tacticsforseplog]
nat_of_Z_plus [lemma, in Coqlib]
nat_of_Z_neg [lemma, in Coqlib]
nat_of_Z_eq [lemma, in Coqlib]
nat_of_Z_max [lemma, in Coqlib]
nat_of_Z_of_nat [lemma, in Coqlib]
nat_of_Z [definition, in Coqlib]
nat_n_Sn_neq [lemma, in progtaskstepLib]
nat_gt_neq [lemma, in tst_prop]
nat_exists [lemma, in asrtLib]
nat_elim [lemma, in mathlib]
nat_x_prop_range [lemma, in mathlib]
nat_8_range_conver [lemma, in mathlib]
nat_of_Z_eq [lemma, in mathlib]
nat_int64_range_eq [lemma, in mathlib]
nat8_ex_shift3 [lemma, in mathlib]
nat8_des [lemma, in mathlib]
nci [definition, in ruleLib]
ndym_cont_red [lemma, in progtaskstepLib]
negate_comparison [definition, in Integers]
negation [constructor, in val]
negb_false [lemma, in IntLib]
negb_true [lemma, in IntLib]
negint [definition, in val]
neg_priointbl_prionotintbl [lemma, in OSMutexPendPure1]
neq_imp_neqq [lemma, in OSMutex_common]
neq_beq_int_false [lemma, in IntBool]
neq_set_comm [lemma, in OSTimeTickPure]
neq_null_true_elim [lemma, in OSTimeTickPure]
neq_null_false_elim [lemma, in OSTimeTickPure]
neq_comm [lemma, in mathlib]
new_rtbl.prio_set_rdy_not_in_tbl_rev [lemma, in OSQPostPure]
new_rtbl.prio_set_rdy_not_in_tbl [lemma, in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl_rev [lemma, in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl [lemma, in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl_lemma_1 [lemma, in OSQPostPure]
new_rtbl.trans_lemma_1 [lemma, in OSQPostPure]
new_rtbl.set_rdy [definition, in OSQPostPure]
new_rtbl [module, in OSQPostPure]
new_t_taskm_eq [lemma, in tst_prop]
next [definition, in os_code_defs]
nextblk [definition, in os_code_defs]
ne_0_minus_1_in_range [lemma, in OSTimeTickPure]
nfx [definition, in InternalFunSpec]
nhapi [definition, in PIF_aux]
nhapi_set_hold [lemma, in PIF_aux]
nilcont [definition, in opsem]
nil_simp [lemma, in mathlib]
nil_get_eid_nil [lemma, in mathlib]
nnp_remove_nwait [lemma, in PIF_aux]
node [definition, in BaseAsrtDef]
NoDeadLock [definition, in pif_theory]
node_osabst_emp [lemma, in inv_prop]
node_vl_eq [lemma, in inv_prop]
node_precise [lemma, in inv_prop]
node_fold' [lemma, in sempost_pure]
node_fold [lemma, in sem_lab]
none [constructor, in seplog_tactics]
none [constructor, in tacticsforseplog]
nonemptylisteq [constructor, in seplog_tactics]
nonemptylisteq [constructor, in tacticsforseplog]
NoneT [constructor, in Coqlib]
NoneT1 [constructor, in Coqlib]
notabort [definition, in simulation]
notabortm [definition, in simulation]
notabortm_if_v [lemma, in asrtLib]
notabortm_if [lemma, in asrtLib]
notabort_expr [lemma, in asrtLib]
notabort_rete [lemma, in asrtLib]
notabort_sseq [lemma, in asrtLib]
notabt_frame [lemma, in loststepLib]
notbool_zero_one [lemma, in OSEventRemovePure]
notbool_one_zero [lemma, in OSEventRemovePure]
notint [definition, in val]
notint_neq_zero_eq [lemma, in mathlib]
notvundef_true_false [lemma, in ruleLib]
not_in_get_last_ptr_false [lemma, in OSEventRemovePure]
not_in [definition, in OSEventRemovePure]
not_add_os_stat_q [lemma, in OSEventTaskRdyPure]
not_eq_comm [lemma, in mathlib_join]
not_skipend [lemma, in asrtLib]
not_free_cont_loc [lemma, in loststepLib]
not_in_remove_last [lemma, in OSTimeTickPure]
not_in [definition, in OSTimeTickPure]
not_and_p' [lemma, in mathlib]
not_and_p [lemma, in mathlib]
not_in_two_wl [definition, in PIF_aux]
NO_NEST_PENDING_O [definition, in PIF_def]
NO_NEST_PENDING [definition, in PIF_def]
no_call_api_os_intcont [lemma, in progtaskstepLib]
no_call_api_os_callcont [lemma, in progtaskstepLib]
no_call_api_os_stmt [lemma, in progtaskstepLib]
no_call_api_loststep_still [lemma, in progtaskstepLib]
no_call_api_loststep_eq [lemma, in progtaskstepLib]
no_api_code [definition, in progtaskstepLib]
no_inos_pc [lemma, in progtaskstepLib]
no_call_api_os [definition, in auxdef]
no_call_api_ipu [definition, in auxdef]
no_call_api_pu [definition, in auxdef]
no_call_api [definition, in auxdef]
no_call_api_scont [definition, in auxdef]
no_call_api_cureval [definition, in auxdef]
no_call_api_stmt [definition, in auxdef]
no_os [definition, in auxdef]
no_fun_same [definition, in lemmasfortoptheo]
no_os_goodks' [lemma, in tst_prop]
no_os_goodks [lemma, in tst_prop]
NO_ERR [definition, in absop]
NO_TCB_ERR [definition, in absop]
no_nest_prop_step_hold [lemma, in PIF_aux]
no_nest_pif [lemma, in PIF_aux]
no_nest_client [definition, in PIF_aux]
no_owner_del [lemma, in PIF_aux]
no_owner_cre [lemma, in PIF_aux]
no_nest_pending_del [lemma, in PIF_aux]
no_nest_pending_cre_hold [lemma, in PIF_aux]
no_nest_pending_set_hold [lemma, in PIF_aux]
no_nest_pending_set_prio_eq [lemma, in PIF_aux]
no_nest_pending_set_none [lemma, in PIF_aux]
no_owner_prio_prop [definition, in PIF_aux]
nsc [definition, in absop]
nsc_isched_step [lemma, in oscore_common]
nth_val'_length [lemma, in OSMutex_common]
nth_val_upd_prop [lemma, in OSMutex_common]
nth_val_le_len_is_none [lemma, in OSMutex_common]
nth_val_exx [lemma, in OSMutex_common]
nth_val_upd_ex [lemma, in OSMutex_common]
nth_error_nil [lemma, in Coqlib]
nth_error_in [lemma, in Coqlib]
nth_val'2nth_val [lemma, in OSQPostPure]
nth_val' [definition, in BaseAsrtDef]
nth_vallist [definition, in BaseAsrtDef]
nth_id [definition, in BaseAsrtDef]
nth_val [definition, in BaseAsrtDef]
nth_val'2nth_val' [lemma, in oscore_common]
nth_val_upd_prop [lemma, in semdel_pure]
nth_val_nth_val'_some_eq [lemma, in common]
nth_val_vallist [definition, in InternalFunSpec]
nth_val_upd_prop [lemma, in OSQDelPure]
nth_vallist_append [lemma, in OSTimeTickPure]
nth_vallist_inc_eq [lemma, in OSTimeTickPure]
nth_val_length [lemma, in OSTimeTickPure]
nth_val'_imp_nth_val_vptr [lemma, in mathlib]
nth_val'_imply_nth_val [lemma, in mathlib]
nth_upd_neqrev [lemma, in mathlib]
nth_upd_eq [lemma, in mathlib]
nth_upd_neq [lemma, in mathlib]
nth_val'_imp_nth_val_int [lemma, in mathlib]
nth_val'_and_nth_val [lemma, in mathlib]
nth_id_exists_off [lemma, in aux_for_hoare_lemmas]
nth_id_Some_imply_in_decllist [lemma, in aux_for_hoare_lemmas]
nth_id_field_offsetfld_some [lemma, in aux_for_hoare_lemmas]
nth_id_some_in_decllist_true [lemma, in aux_for_hoare_lemmas]
nth_val_upd_prop [lemma, in Mbox_common]
nth_val_imp_nth_val'_2 [lemma, in symbolic_execution]
nth_val_imp_nth_val'_1 [lemma, in symbolic_execution]
nth_id_Some_imply_in_decllist [lemma, in symbolic_execution]
null_rv [lemma, in symbolic_execution]
n_dym_com_int_scont_intcont_n_dym_com_int_cd [lemma, in ruleLib]
n_dym_com_int_scont_callcont [lemma, in ruleLib]
n_dym_com_int_cd_cont [lemma, in progtaskstepLib]
n_tlmatch_abt [lemma, in progtaskstepLib]
n_dym_com_int_cd [definition, in auxdef]
n_dym_com_int_scont [definition, in auxdef]
n_dym_com_ceval [definition, in auxdef]
n_dym_com_s [definition, in auxdef]
n_dym_ks_call [lemma, in lemmasfortoptheo]
n07_arr_len_ex [lemma, in mathlib]


O

oand [constructor, in val]
obitand [constructor, in val]
obitor [constructor, in val]
odiv [constructor, in val]
oeq [constructor, in val]
offset [definition, in memdata]
offset_zero [definition, in OSQInvDef]
OldPr [axiom, in pif_theory]
Old_Priority_Inversion_Free_Proof [lemma, in PIF_aux]
Old_Priority_Inversion_Free_Proof' [lemma, in PIF_aux]
OLD_PIF_CHAIN [definition, in PIF_aux]
OLD_PIF [definition, in PIF_aux]
olshift [constructor, in val]
olt [constructor, in val]
ominus [constructor, in val]
omulti [constructor, in val]
oor [constructor, in val]
oplus [constructor, in val]
oppsite [constructor, in val]
opsem [library]
optgT [abbreviation, in Coqlib]
optionT [inductive, in Coqlib]
OptionT [inductive, in Coqlib]
option_map [definition, in Coqlib]
option_eq [definition, in Coqlib]
optpT [abbreviation, in Coqlib]
opt_predT2 [abbreviation, in Coqlib]
opt_predT [abbreviation, in Coqlib]
op_p_prop [definition, in PIF_aux]
or [definition, in val]
orshift [constructor, in val]
or_OS_MUTEX_AVAILABLE_le_65535 [lemma, in OSMutex_common]
or_true_ltrue_rtrue [lemma, in OSMutex_common]
or_one_one [lemma, in IntLib]
or_zero_one [lemma, in IntLib]
or_one_zero [lemma, in IntLib]
or_zero_zero [lemma, in IntLib]
or_and_combine_zero [lemma, in mathlib]
or_and_distrib_zero [lemma, in mathlib]
or_and_distrib [lemma, in mathlib]
or_and_combine [lemma, in mathlib]
osabst [definition, in language]
osabstep [definition, in language]
OSAbstMod [module, in language]
OSAbstMod_join_disj3' [lemma, in ruleLib]
OSAbstMod_disj_join3 [lemma, in ruleLib]
OSAbstMod_join_gettls [lemma, in ruleLib]
OSAbstMod_joinmerge_join [lemma, in ruleLib]
OSAbstMod_join_disj2 [lemma, in ruleLib]
OSAbstMod_disj_merge [lemma, in ruleLib]
OSAbstMod_join_disj2_merge [lemma, in ruleLib]
OSabstMod_disj_merger_disj2 [lemma, in ruleLib]
OSAbstMod_join_emp [lemma, in ruleLib]
OSAbstMod_join_emp_eq [lemma, in ruleLib]
OSAbstMod_join_disj3 [lemma, in ruleLib]
OSAbstMod_join_disj_eq [lemma, in ruleLib]
OSAbstMod_disj_join_meg [lemma, in ruleLib]
OSAbstMod_disj_disj [lemma, in ruleLib]
OSAbstMod_join_disj2' [lemma, in ruleLib]
OSAbstMod_disj_join2 [lemma, in ruleLib]
OSAbstMod_disj_join_disj3 [lemma, in ruleLib]
OSAbstMod_join_disj [lemma, in ruleLib]
OSAbstMod_join_exists_merge [lemma, in tst_prop]
OSAbstMod_disj_merge_disj [lemma, in asrtLib]
OSAbst_join_get2 [lemma, in ruleLib]
OSAbst_join_of [lemma, in ruleLib]
OSAbst_disj_merge_disj [lemma, in ruleLib]
OSAbst_disj_join [lemma, in ruleLib]
OSAbst_merge_eq' [lemma, in ruleLib]
OSAbst_merge_eq [lemma, in ruleLib]
OSAbst_disj_merge [lemma, in ruleLib]
OSAbst_join_merge [lemma, in ruleLib]
osabst_disj_merge_get_r [lemma, in ruleLib]
OSAbst_join_disj [lemma, in ruleLib]
OSAbst_disj_join_dis [lemma, in tst_prop]
OSAbst_join_disj_disj_disj [lemma, in tst_prop]
OSAbst_join_disj_merge [lemma, in tst_prop]
osabst_disj_eqdom_sym [lemma, in asrtLib]
osabst_disj_join_merge_lpro [lemma, in asrtLib]
OSAbst_join_sub' [lemma, in asrtLib]
OSAbst_join_sub [lemma, in asrtLib]
OsAbst_Merge_eq [lemma, in asrtLib]
osabst_eq_join_eq [lemma, in inv_prop]
osabst_get_get_disj_get [lemma, in PIF_aux]
osabst_get_get_disj_eq [lemma, in PIF_aux]
OSAbs_disj_eqdom [lemma, in asrtLib]
osapi [definition, in language]
osapispec [definition, in language]
osapi_lift' [lemma, in progtaskstepLib]
osapi_lift1' [lemma, in progtaskstepLib]
oscode [definition, in language]
oscore_common [library]
oscorrect_aux [definition, in lemmasfortoptheo]
OSCtxSwCtr [definition, in os_code_defs]
oscurt [constructor, in language]
OSESearchPure [library]
OSETWaitPure [library]
OSEventCnt [definition, in os_code_defs]
OSEventFreeList [definition, in os_code_defs]
OSEventGrp [definition, in os_code_defs]
OSEventList [definition, in os_code_defs]
OSEventListPtr [definition, in os_code_defs]
OSEventPtr [definition, in os_code_defs]
OSEventRemoveProof [library]
OSEventRemovePure [library]
OSEventRemove_proof [lemma, in OSEventRemoveProof]
OSEventSearchProof [library]
OSEventSearch_proof [lemma, in OSEventSearchProof]
OSEventTaskRdy [library]
OSEventTaskRdyPure [library]
OSEventTaskRdy_proof [lemma, in OSEventTaskRdy]
OSEventTaskWait [library]
OSEventTaskWait_proof [lemma, in OSEventTaskWait]
OSEventTbl [definition, in os_code_defs]
OSEventType [definition, in os_code_defs]
OSEventWaitListInitProof [library]
OSEventWaitListInit_proof [lemma, in OSEventWaitListInitProof]
OSIdleCtr [definition, in os_code_defs]
OSIdleCtrMax [definition, in os_code_defs]
OSIdleCtrRun [definition, in os_code_defs]
OSInit [definition, in os_code_defs]
OSInitHookBegin [definition, in os_code_defs]
OSInitHookEnd [definition, in os_code_defs]
OSInit_impl [definition, in os_core]
OSIntEnter [definition, in os_code_defs]
OSIntEnter_impl [definition, in os_core]
OSIntExit [definition, in os_code_defs]
OSIntExitPost [definition, in InternalFunSpec]
OSIntExitPostGood [lemma, in InternalFunSpec]
OSIntExitPost' [definition, in InternalFunSpec]
OSIntExitPre [definition, in InternalFunSpec]
OSIntExitPreGood [lemma, in InternalFunSpec]
OSIntExitPre' [definition, in InternalFunSpec]
OSIntExitPure [library]
OSIntExitY [definition, in os_code_defs]
OSIntExit_proof [lemma, in IntExitProof]
OSIntExit_impl [definition, in os_core]
OSIntExit_spec [definition, in InternalFunSpec]
OSIntNesting [definition, in os_code_defs]
osintspec [definition, in language]
OSIntToyCount [definition, in os_code_defs]
OSInv [definition, in OSQInvDef]
OSInv_set_curtid [lemma, in hoare_tactics]
OSInv_prop [lemma, in hoare_tactics]
OSInv_isr_is_irrel [lemma, in inv_prop]
OSInv_precise [lemma, in inv_prop]
OSLockNesting [definition, in os_code_defs]
OSMapTbl [definition, in os_code_defs]
OSMapVallist [definition, in OSTCBInvDef]
osmapvallist_length8 [lemma, in OSMutex_common]
osmapvallist_int8u [lemma, in OSMutex_common]
osmapvallist_prop [lemma, in OSEventTaskRdyPure]
OSMboxAccept [definition, in os_code_defs]
OSMboxAccept_impl [definition, in os_mbox]
OSMboxCreate [definition, in os_code_defs]
OSMboxCreate_impl [definition, in os_mbox]
OSMboxDel [definition, in os_code_defs]
OSMboxDel_impl [definition, in os_mbox]
OSMboxPend [definition, in os_code_defs]
OSMboxPend_impl [definition, in os_mbox]
OSMboxPost [definition, in os_code_defs]
OSMboxPost_impl [definition, in os_mbox]
OSMutexAccept [definition, in os_code_defs]
OSMutexAccepteRight [lemma, in OSMutexAcceptProof]
OSMutexAcceptProof [library]
OSMutexAccept_impl [definition, in os_mutex]
OSMutexCreate [definition, in os_code_defs]
OSMutexCreateProof [library]
OSMutexCreateRight [lemma, in OSMutexCreateProof]
OSMutexCreate_impl [definition, in os_mutex]
OSMutexDel [definition, in os_code_defs]
OSMutexDelProof [library]
OSMutexDelRight [lemma, in OSMutexDelProof]
OSMutexDel_impl [definition, in os_mutex]
OSMutexPend [definition, in os_code_defs]
OSMutexPendPart1 [library]
OSMutexPendPart2 [library]
OSMutexPendPart3 [library]
OSMutexPendPart4 [library]
OSMutexPendPart5 [library]
OSMutexPendProof [lemma, in OSMutexPendProof]
OSMutexPendProof [library]
OSMutexPendPure1 [library]
OSMutexPend_impl [definition, in os_mutex]
OSMutexPost [definition, in os_code_defs]
OSMutexPostPart2 [library]
OSMutexPostPart2_1 [library]
OSMutexPostPart2_2 [library]
OSMutexPostPart2_0 [library]
OSMutexPostPart3 [library]
OSMutexPostPart3_3_3a [library]
OSMutexPostPart3_3_5 [library]
OSMutexPostPart3_3_3 [library]
OSMutexPostPart3_3_5a [library]
OSMutexPostPart3_3_1 [library]
OSMutexPostPart3_3 [library]
OSMutexPostPart3_3_1a [library]
OSMutexPostPart3_3_0 [library]
OSMutexPostPart30 [library]
OSMutexPostProof [library]
OSMutexPostPure [library]
OSMutexPostRight [lemma, in OSMutexPostProof]
OSMutexPost_impl [definition, in os_mutex]
OSMutexPost3_3_event_rdy_post1 [lemma, in OSMutexPostPart3_3_1]
OSMutexPost3_3_event_rdy_post3' [lemma, in OSMutexPostPart3_3_3a]
OSMutexPost3_3_event_rdy_post5 [lemma, in OSMutexPostPart3_3_5]
OSMutexPost3_3_event_rdy_post3 [lemma, in OSMutexPostPart3_3_3]
OSMutexPost3_3_event_rdy_post1' [lemma, in OSMutexPostPart3_3_1a]
OSMutexPost3_3_event_rdy_post5' [lemma, in OSMutexPostPart3_3_5a]
OSMutex_common [library]
OSPlaceHolder [definition, in os_code_defs]
OSPrioCur [definition, in os_code_defs]
OSPrioHighRdy [definition, in os_code_defs]
OSQAccept [definition, in os_code_defs]
OSQAcceptProof [library]
OSQAcceptPure [library]
OSQAccept_impl [definition, in os_q]
OSQAccProof [lemma, in OSQAcceptProof]
OSQCreate [definition, in os_code_defs]
OSQCreateProof [lemma, in OSQCreateProof]
OSQCreateProof [library]
OSQCreatePure [library]
OSQCreate_impl [definition, in os_q]
OSQCRT_TCB_prop [lemma, in OSQCreatePure]
OSQDel [definition, in os_code_defs]
OSQDelProof [lemma, in OSQDelProof]
OSQDelProof [library]
OSQDelPure [library]
OSQDel_impl [definition, in os_q]
OSQEnd [definition, in os_code_defs]
OSQEnd_elim [lemma, in OSQPendPure]
OSQEntries [definition, in os_code_defs]
OSQFreeBlk [definition, in os_code_defs]
OSQFreeBlkTbl [definition, in os_code_defs]
OSQFreeList [definition, in os_code_defs]
OSQGetMsg [definition, in os_code_defs]
OSQGetMsgProof [lemma, in OSQGetMsgProof]
OSQGetMsgProof [library]
OSQGetMsgPure [library]
OSQGetMsg_high_level_step [lemma, in OSQGetMsgPure]
OSQGetMsg_impl [definition, in os_q]
OSQIn [definition, in os_code_defs]
OSQInvDef [library]
OSQOut [definition, in os_code_defs]
OSQOut_elim [lemma, in OSQPendPure]
OSQPend [definition, in os_code_defs]
OSQPendProof [library]
OSQPendPure [library]
OSQPendRight [lemma, in OSQPendProof]
OSQPendRightPart2 [lemma, in OSQPendProof]
OSQPend_high_step_block_get [lemma, in OSQPendPure]
OSQPend_high_step_to [lemma, in OSQPendPure]
OSQPend_high_step_block [lemma, in OSQPendPure]
OSQPend_high_step_get_succ [lemma, in OSQPendPure]
OSQPend_high_step_null [lemma, in OSQPendPure]
OSQPend_impl [definition, in os_q]
OSQPost [definition, in os_code_defs]
OSQPostProof [lemma, in OSQPostProof]
OSQPostProof [library]
OSQPostProofPart1 [lemma, in OSQPostProof]
OSQPostProofPart2 [lemma, in OSQPostProof]
OSQPostPure [library]
OSQPost_impl [definition, in os_q]
OSQPtr [definition, in os_code_defs]
OSQSize [definition, in os_code_defs]
OSQStart [definition, in os_code_defs]
OSQStart_elim [lemma, in OSQPendPure]
OSQTbl [definition, in os_code_defs]
osq_same_blk_st_in' [lemma, in OSQPostPure]
osq_inv_in [lemma, in hoare_tactics]
osq_same_blk_st_out' [lemma, in OSQAcceptPure]
osq_sll_precise [lemma, in inv_prop]
OSQ_spec [definition, in InternalFunSpec]
osq_spec_list [definition, in InternalFunSpec]
OSRdyGrp [definition, in os_code_defs]
OSRdyTbl [definition, in os_code_defs]
OSRunning [definition, in os_code_defs]
ossched [definition, in language]
OSSchedProof [library]
OSSched_proof [lemma, in OSSchedProof]
OSSemAccept [definition, in os_code_defs]
OSSemAcceptProof [library]
OSSemAccept_impl [definition, in os_sem]
OSSemAccProof [lemma, in OSSemAcceptProof]
OSSemCreate [definition, in os_code_defs]
OSSemCreateProof [library]
OSSemCreate_impl [definition, in os_sem]
OSSemCreProof [lemma, in OSSemCreateProof]
OSSemDel [definition, in os_code_defs]
OSSemDeleteProof [lemma, in OSSemDeleteProof]
OSSemDeleteProof [library]
OSSemDel_impl [definition, in os_sem]
OSSemPend [definition, in os_code_defs]
OSSemPendProof [lemma, in OSSemPendProof]
OSSemPendProof [library]
OSSemPend_impl [definition, in os_sem]
OSSemPost [definition, in os_code_defs]
OSSemPostProof [lemma, in OSSemPostProof]
OSSemPostProof [library]
OSSemPost_impl [definition, in os_sem]
osspec [definition, in language]
OSStart [definition, in os_code_defs]
OSStartHighRdy [definition, in os_code_defs]
OSStart_impl [definition, in os_core]
osstate [definition, in language]
OSStatRdy [definition, in os_code_defs]
OSSTKFreeList [definition, in os_code_defs]
OSSTKTbl [definition, in os_code_defs]
OSTaskCreate [definition, in os_code_defs]
OSTaskCtr [definition, in os_code_defs]
OSTaskDel [definition, in os_code_defs]
OSTCBBitX [definition, in os_code_defs]
OSTCBBitY [definition, in os_code_defs]
OSTCBCur [definition, in opsem]
OSTCBDly [definition, in os_code_defs]
OSTCBEventPtr [definition, in os_code_defs]
OSTCBFreeList [definition, in os_code_defs]
OSTCBHighRdy [axiom, in opsem]
OSTCBHighRdy [definition, in os_code_defs]
OSTCBInvDef [library]
OSTCBList [definition, in os_code_defs]
OSTCBMsg [definition, in os_code_defs]
OSTCBMutexOwn [definition, in os_code_defs]
OSTCBNext [definition, in os_code_defs]
OSTCBPrev [definition, in os_code_defs]
OSTCBPrio [definition, in os_code_defs]
OSTCBPrioTbl [definition, in os_code_defs]
OSTCBStat [definition, in os_code_defs]
OSTCBTbl [definition, in os_code_defs]
OSTCBX [definition, in os_code_defs]
OSTCBY [definition, in os_code_defs]
ostcb_sll_precise [lemma, in inv_prop]
ostc_step [constructor, in opsem]
OSTickISR [definition, in os_code_defs]
OSTickISR_impl [definition, in os_cpu_a]
ostidstep_imply_idstepn [lemma, in loststepLib]
OSTime [definition, in os_code_defs]
ostime [definition, in language]
OSTimeDly [definition, in os_code_defs]
OSTimeDlyProof [lemma, in OSTimeDlyProof]
OSTimeDlyProof [library]
OSTimeDlyPure [library]
OSTimeDly_high_level_step_3 [lemma, in absop_rules]
OSTimeDly_high_level_step_4 [lemma, in absop_rules]
OSTimeDly_high_level_step_2 [lemma, in absop_rules]
OSTimeDly_high_level_step_1 [lemma, in absop_rules]
OSTimeDly_impl [definition, in os_time]
OSTimeGet [definition, in os_code_defs]
OSTimeGetProof [library]
OSTimeGetRight [lemma, in OSTimeGetProof]
OSTimeGetRight' [lemma, in OSTimeGetProof]
OSTimeGet_high_level_step [lemma, in absop_rules]
OSTimeGet_impl [definition, in os_time]
OSTimeTick [definition, in os_code_defs]
OSTimeTickPost [definition, in InternalFunSpec]
OSTimeTickPostGood [lemma, in InternalFunSpec]
OSTimeTickPost' [definition, in InternalFunSpec]
OSTimeTickPre [definition, in InternalFunSpec]
OSTimeTickPreGood [lemma, in InternalFunSpec]
OSTimeTickPre' [definition, in InternalFunSpec]
OSTimeTickProof [library]
OSTimeTickPure [library]
OSTimeTick_proof [lemma, in OSTimeTickProof]
OSTimeTick_impl [definition, in os_core]
OSTimeTick_spec [definition, in InternalFunSpec]
ostm [constructor, in language]
ostmid [constructor, in language]
OSToyISR [definition, in os_code_defs]
OSToyISR_impl [definition, in os_cpu_a]
OSUnMapTbl [definition, in os_code_defs]
OSUnMapVallist [definition, in OSTCBInvDef]
osunmapvallist_prop [lemma, in mathlib]
OSUnMapVallist_type_vallist_match [lemma, in mathlib]
OSVersion [definition, in os_code_defs]
OSVersion_impl [definition, in os_core]
os_stat_q_not_and [lemma, in OSEventTaskRdyPure]
OS_STK_BLK [definition, in os_ucos_h]
OS_STK [definition, in os_ucos_h]
OS_TCB [definition, in os_ucos_h]
OS_Q [definition, in os_ucos_h]
OS_Q_FREEBLK [definition, in os_ucos_h]
OS_EVENT [definition, in os_ucos_h]
OS_PrioChange [definition, in os_code_defs]
OS_MUTEX_AVAILABLE [definition, in os_code_defs]
OS_MUTEX_KEEP_UPPER_8 [definition, in os_code_defs]
OS_MUTEX_KEEP_LOWER_8 [definition, in os_code_defs]
OS_VERSION [definition, in os_code_defs]
OS_ERR_DEL_ISR [definition, in os_code_defs]
OS_NO_MORE_TCB [definition, in os_code_defs]
OS_TASK_DEL_ISR [definition, in os_code_defs]
OS_TASK_DEL_IDLE [definition, in os_code_defs]
OS_TASK_DEL_ERR [definition, in os_code_defs]
OS_SEM_OVF [definition, in os_code_defs]
OS_ERR_MUTEX_IDLE [definition, in os_code_defs]
OS_ERR_MUTEX_DEADLOCK [definition, in os_code_defs]
OS_ERR_NEST [definition, in os_code_defs]
OS_PRIO_INVALID [definition, in os_code_defs]
OS_PRIO_ERR [definition, in os_code_defs]
OS_PRIO_EXIST [definition, in os_code_defs]
OS_ERR_MUTEX_WL_HIGHEST_PRIO [definition, in os_code_defs]
OS_ERR_ORIGINAL_NOT_HOLDER [definition, in os_code_defs]
OS_ERR_MUTEXPR_NOT_HOLDER [definition, in os_code_defs]
OS_ERR_OWN [definition, in os_code_defs]
OS_ERR_STAT [definition, in os_code_defs]
OS_ERR_IDLE [definition, in os_code_defs]
OS_ERR_PEVENT_NO_EX [definition, in os_code_defs]
OS_ERR_MUTEX_PRIO [definition, in os_code_defs]
OS_ERR_NOT_MUTEX_OWNER [definition, in os_code_defs]
OS_STAT_ERR [definition, in os_code_defs]
OS_Q_FULL [definition, in os_code_defs]
OS_TIMEOUT [definition, in os_code_defs]
OS_ERR_TASK_WAITING [definition, in os_code_defs]
OS_ERR_PEVENT_NULL [definition, in os_code_defs]
OS_ERR_POST_NULL_PTR [definition, in os_code_defs]
OS_ERR_PEND_ISR [definition, in os_code_defs]
OS_ERR_EVENT_TYPE [definition, in os_code_defs]
OS_NO_ERR [definition, in os_code_defs]
OS_EVENT_TYPE_MUTEX [definition, in os_code_defs]
OS_EVENT_TYPE_SEM [definition, in os_code_defs]
OS_EVENT_TYPE_Q [definition, in os_code_defs]
OS_EVENT_TYPE_MBOX [definition, in os_code_defs]
OS_EVENT_TYPE_UNUSED [definition, in os_code_defs]
OS_STAT_FLAG [definition, in os_code_defs]
OS_STAT_MUTEX [definition, in os_code_defs]
OS_STAT_SUSPEND [definition, in os_code_defs]
OS_STAT_Q [definition, in os_code_defs]
OS_STAT_MBOX [definition, in os_code_defs]
OS_STAT_SEM [definition, in os_code_defs]
OS_STAT_RDY [definition, in os_code_defs]
OS_RDY_TBL_SIZE [definition, in os_code_defs]
OS_EVENT_TBL_SIZE [definition, in os_code_defs]
OS_IDLE_PRIO [definition, in os_code_defs]
OS_N_SYS_TASKS [definition, in os_code_defs]
OS_PRIO_SELF [definition, in os_code_defs]
OS_LOWEST_PRIO [definition, in os_code_defs]
OS_MAX_TASKS [definition, in os_code_defs]
OS_MAX_Q_SIZE [definition, in os_code_defs]
OS_MAX_SEM [definition, in os_code_defs]
OS_MAX_QS [definition, in os_code_defs]
OS_MAX_EVENTS [definition, in os_code_defs]
os_sem_ptr [definition, in os_code_defs]
os_q_ptr [definition, in os_code_defs]
os_stk_blk [definition, in os_code_defs]
os_tcb [definition, in os_code_defs]
os_q_freeblk [definition, in os_code_defs]
os_q [definition, in os_code_defs]
os_event [definition, in os_code_defs]
OS_EventSearch [definition, in os_code_defs]
OS_EventRemove [definition, in os_code_defs]
OS_TaskIdle [definition, in os_code_defs]
OS_Sched [definition, in os_code_defs]
OS_EventTaskWait [definition, in os_code_defs]
OS_EventTaskRdy [definition, in os_code_defs]
OS_EventTO [definition, in os_code_defs]
OS_EventWaitListInit [definition, in os_code_defs]
OS_TCBInit [definition, in os_code_defs]
OS_InitTaskIdle [definition, in os_code_defs]
OS_SemInit [definition, in os_code_defs]
OS_QInit [definition, in os_code_defs]
OS_InitEventList [definition, in os_code_defs]
OS_InitTCBList [definition, in os_code_defs]
OS_InitSTKList [definition, in os_code_defs]
OS_InitRdyList [definition, in os_code_defs]
OS_InitMisc [definition, in os_code_defs]
os_no_call_api [lemma, in ucos_correctaux]
os_stat_mutexsem [constructor, in language]
os_stat_mbox [constructor, in language]
os_stat_time [constructor, in language]
os_stat_q [constructor, in language]
os_stat_sem [constructor, in language]
os_interrupt [definition, in os_program]
os_api [definition, in os_program]
os_internal [definition, in os_program]
OS_Correctness [definition, in toptheorem]
os_stat_mbox_and_le255 [lemma, in laby]
OS_EventSearch_impl [definition, in os_core]
OS_EventRemove_impl [definition, in os_core]
OS_TCBInit_impl [definition, in os_core]
OS_InitTCBList_impl [definition, in os_core]
OS_InitSTKList_impl [definition, in os_core]
OS_InitTaskIdle_impl [definition, in os_core]
OS_InitRdyList_impl [definition, in os_core]
OS_InitMisc_impl [definition, in os_core]
OS_InitEventList_impl [definition, in os_core]
OS_EventWaitListInit_impl [definition, in os_core]
OS_TaskIdle_impl [definition, in os_core]
OS_Sched_impl [definition, in os_core]
OS_EventTO_impl [definition, in os_core]
OS_EventTaskWait_impl [definition, in os_core]
OS_EventTaskRdy_impl [definition, in os_core]
os_stat_mbox_and_le255 [lemma, in lab]
os_exint_not_step_ks [lemma, in loststepLib]
os_ret_not_step_ks [lemma, in loststepLib]
os_ret_not_step [lemma, in loststepLib]
os_skip_not_step [lemma, in loststepLib]
OS_EventWaitListInit_spec [definition, in InternalFunSpec]
OS_EventTaskWait_spec [definition, in InternalFunSpec]
OS_EventTaskRdy_spec [definition, in InternalFunSpec]
OS_EventRemove_spec [definition, in InternalFunSpec]
OS_EventSearch_spec [definition, in InternalFunSpec]
OS_Sched_spec [definition, in InternalFunSpec]
OS_SchedPost [definition, in InternalFunSpec]
OS_SchedPre [definition, in InternalFunSpec]
OS_SchedPostGood [lemma, in InternalFunSpec]
OS_SchedPreGood [lemma, in InternalFunSpec]
OS_SchedPost' [definition, in InternalFunSpec]
OS_SchedPre' [definition, in InternalFunSpec]
OS_EventTaskWaitPost [definition, in InternalFunSpec]
OS_EventTaskWaitPostGood [lemma, in InternalFunSpec]
OS_EventTaskWaitPost' [definition, in InternalFunSpec]
OS_EventTaskWaitPre [definition, in InternalFunSpec]
OS_EventTaskWaitPreGood [lemma, in InternalFunSpec]
OS_EventTaskWaitPre' [definition, in InternalFunSpec]
OS_EventTaskRdyPost [definition, in InternalFunSpec]
OS_EventTaskRdyPostGood [lemma, in InternalFunSpec]
OS_EventTaskRdyPost' [definition, in InternalFunSpec]
OS_EventTaskRdyPost_fold' [definition, in InternalFunSpec]
OS_EventTaskRdyPre [definition, in InternalFunSpec]
OS_EventTaskRdyPreGood [lemma, in InternalFunSpec]
OS_EventTaskRdyPre' [definition, in InternalFunSpec]
OS_EventRemovePost [definition, in InternalFunSpec]
OS_EventPtrRemovePostGood [lemma, in InternalFunSpec]
OS_EventPtrRemovePost' [definition, in InternalFunSpec]
OS_EventRemovePre [definition, in InternalFunSpec]
OS_EventRemovePreGood [lemma, in InternalFunSpec]
OS_EventRemovePre' [definition, in InternalFunSpec]
OS_EventSearchPost [definition, in InternalFunSpec]
OS_EventSearchPostGood [lemma, in InternalFunSpec]
OS_EventSearchPost' [definition, in InternalFunSpec]
OS_EventSearchPre [definition, in InternalFunSpec]
OS_EventSearchPreGood [lemma, in InternalFunSpec]
OS_EventSearchPre' [definition, in InternalFunSpec]
OS_EventWaitListInitPost [definition, in InternalFunSpec]
OS_EventWaitListInitPostGood [lemma, in InternalFunSpec]
OS_EventWaitListInitPost' [definition, in InternalFunSpec]
OS_EventWaitListInitPre [definition, in InternalFunSpec]
OS_EventWaitListInitPreGood [lemma, in InternalFunSpec]
OS_EventWaitListInitPre' [definition, in InternalFunSpec]
os_spec' [definition, in PIF_aux]
os_spec [definition, in os_spec]
os_ucos_h [library]
os_core [library]
os_code_defs [library]
os_mutex [library]
os_spec [library]
os_code_notations [library]
os_mbox [library]
os_sem [library]
os_q [library]
os_cpu_a [library]
os_program [library]
os_time [library]
owner [definition, in language]
owner_prio_prop [definition, in PIF_aux]
O_PIF_CHAIN [definition, in PIF_aux]
O_PI_CHAIN [definition, in PIF_aux]
O_PIF [definition, in PIF_aux]
O_PI [definition, in PIF_aux]


P

p [definition, in os_code_defs]
pairT [constructor, in Coqlib]
pair_prop [lemma, in hoare_lemmas]
partM [definition, in auxdef]
partm_nochange [lemma, in tst_prop]
partm_minus_sub [lemma, in tst_prop]
partm_merge_disj [lemma, in tst_prop]
partm_new [lemma, in tst_prop]
part_store_part [lemma, in lemmasfortoptheo]
part_storebytes_part [lemma, in lemmasfortoptheo]
part_merge_m [lemma, in tst_prop]
part_disjm [lemma, in tst_prop]
part_sub [lemma, in tst_prop]
pattern [inductive, in seplog_tactics]
pattern_absdata [constructor, in seplog_tactics]
pattern_default [constructor, in seplog_tactics]
pattern_aarray [constructor, in seplog_tactics]
pattern_gvararray [constructor, in seplog_tactics]
pattern_lvararray [constructor, in seplog_tactics]
pattern_ptrarray [constructor, in seplog_tactics]
pattern_ptrstruct [constructor, in seplog_tactics]
pattern_gvarmapsto [constructor, in seplog_tactics]
pattern_lvarmapsto [constructor, in seplog_tactics]
pattern_ptrmapsto [constructor, in seplog_tactics]
pattern_aexists [constructor, in seplog_tactics]
pattern_aemp [constructor, in seplog_tactics]
pattern_atrue [constructor, in seplog_tactics]
pattern_adisj [constructor, in seplog_tactics]
pattern_aconj [constructor, in seplog_tactics]
pattern_pure [constructor, in seplog_tactics]
pattern_apure [constructor, in seplog_tactics]
pdata [axiom, in opsem]
pdata [definition, in os_code_defs]
pend_lift_getop_ct [lemma, in PIF_aux]
pend_lift_iswait [lemma, in PIF_aux]
pend_lift_getop_t [lemma, in PIF_aux]
pend_lift_nnp [lemma, in PIF_aux]
pend_no_lift_iswating [lemma, in PIF_aux]
pend_no_lift_nnp [lemma, in PIF_aux]
pend_no_lift_getop [lemma, in PIF_aux]
peq [definition, in Coqlib]
peq_false [lemma, in Coqlib]
peq_true [lemma, in Coqlib]
pevent [definition, in os_code_defs]
pevent1 [definition, in os_code_defs]
pevent2 [definition, in os_code_defs]
pfalse_rule [constructor, in inferules]
pfalse_rule_sound [lemma, in simplrulesound]
PI [definition, in pif_theory]
PIF [definition, in pif_theory]
PIF [definition, in PIF_def]
PIF_aux [definition, in PIF_aux]
pif_theory [library]
PIF_aux [library]
PIF_def [library]
pint_step [constructor, in opsem]
pip [definition, in os_code_defs]
Piteq [definition, in opsem]
PlaceHolder [definition, in os_mutex]
Ple [definition, in Coqlib]
Ple_succ [lemma, in Coqlib]
Ple_trans [lemma, in Coqlib]
Ple_refl [lemma, in Coqlib]
plt [definition, in Coqlib]
Plt [definition, in Coqlib]
Plt_wf [lemma, in Coqlib]
Plt_strict [lemma, in Coqlib]
Plt_Ple_trans [lemma, in Coqlib]
Plt_Ple [lemma, in Coqlib]
Plt_succ_inv [lemma, in Coqlib]
Plt_trans_succ [lemma, in Coqlib]
Plt_succ [lemma, in Coqlib]
Plt_trans [lemma, in Coqlib]
Plt_ne [lemma, in Coqlib]
plus_decl [definition, in os_ucos_h]
Pointer [constructor, in memdata]
positive_Peano_ind [lemma, in Coqlib]
positive_rec_succ [lemma, in Coqlib]
positive_rec_base [lemma, in Coqlib]
positive_rec [definition, in Coqlib]
POSITIVE_ITERATION.iter [variable, in Coqlib]
POSITIVE_ITERATION.f [variable, in Coqlib]
POSITIVE_ITERATION.v1 [variable, in Coqlib]
POSITIVE_ITERATION.A [variable, in Coqlib]
POSITIVE_ITERATION [section, in Coqlib]
postintlemma1 [lemma, in OSMutex_common]
postintlemma2 [lemma, in OSMutex_common]
postintlemma2' [lemma, in OSMutex_common]
postintlemma3 [lemma, in OSMutex_common]
postintlemma4 [lemma, in OSMutex_common]
post_exwt_succ_pre_mutex' [lemma, in OSMutex_common]
post_valinjlemma1 [lemma, in OSMutex_common]
post_intlemma2 [lemma, in OSMutex_common]
post_intlemma1 [lemma, in OSMutex_common]
post_exwt_succ_pre_mutex [lemma, in OSMutex_common]
post_intlemma4 [lemma, in OSMutex_common]
post_intlemma3 [lemma, in OSMutex_common]
post_exwt_succ_pre_mutex' [lemma, in OSMutexPostPure]
post_exwt_succ_pre_mutex [lemma, in OSMutexPostPure]
post_exwt_succ_pre_mutex'' [lemma, in OSMutexPostPure]
post_exwt_succ_pre [lemma, in OSQPostPure]
post_exwt_succ_pre_sem [lemma, in sempost_pure]
post_iswait' [lemma, in PIF_aux]
post_iswait [lemma, in PIF_aux]
post_nolift_exwt_ct_nowner [lemma, in PIF_aux]
post_nolift_exwt_get_op_ct [lemma, in PIF_aux]
post_lift_exwt_ct_nowner [lemma, in PIF_aux]
post_lift_exwt_get_op_ct [lemma, in PIF_aux]
post_ex_wait_ct_neq [lemma, in PIF_aux]
post_no_lift_ct_nowner [lemma, in PIF_aux]
post_nolift_get_op_ct [lemma, in PIF_aux]
post_lift_ct_nowner [lemma, in PIF_aux]
post_lift_get_op_ct [lemma, in PIF_aux]
post_nowt_return_getop_t [lemma, in PIF_aux]
post_nowt_return_getop_ct [lemma, in PIF_aux]
post_exwt_succ_pre_mbox' [lemma, in Mbox_common]
post_exwt_succ_pre_mbox [lemma, in Mbox_common]
post1' [lemma, in OSMutexPostPart30]
post3 [lemma, in OSMutexPostPart30]
post3' [lemma, in OSMutexPostPart30]
post5 [lemma, in OSMutexPostPart30]
post5' [lemma, in OSMutexPostPart30]
pos_to_nat_range_0_7 [lemma, in OSEventTaskRdyPure]
pos_to_nat_range_0_255 [lemma, in mathlib]
Ppred_Plt [lemma, in Coqlib]
pq [definition, in os_code_defs]
pqblk [definition, in os_code_defs]
pqptr [definition, in os_code_defs]
prdytbl [definition, in os_code_defs]
prec [projection, in assertion]
precise [definition, in assertion]
precise_starinv_isr [lemma, in asrtLib]
precise_Aie_Adisj [lemma, in asrtLib]
precise_Apure [lemma, in asrtLib]
precise_Astar [lemma, in asrtLib]
pred_dec_false [lemma, in Coqlib]
pred_dec_true [lemma, in Coqlib]
PREEMP [definition, in PIF_def]
Preemptive [definition, in pif_theory]
prim [inductive, in language]
primstep [definition, in inferules]
prio [definition, in os_code_defs]
prioinq_exists [lemma, in mathlib]
PrioLe [definition, in pif_theory]
PrioLift [definition, in pif_theory]
PrioLt [definition, in pif_theory]
priority [definition, in pif_theory]
priority [definition, in language]
Priority_Inversion_Free_Proof [lemma, in PIF_aux]
Priority_Inversion_Free_Prop [lemma, in PIF_aux]
priotbl_null_no_tcb [lemma, in OSMutex_common]
PrioWaitInQ [definition, in OSQInvDef]
prio_from_grp_tbl_PrioWaitInQ [lemma, in OSMutex_common]
prio_in_rtbl_hold [lemma, in OSMutexPostPure]
prio_in_rtbl_hold [lemma, in OSQPostPure]
prio_wt_inq_tid_neq [lemma, in OSQPostPure]
prio_wt_inq_convert [lemma, in OSQPostPure]
prio_notin_tbl_orself [lemma, in OSQPostPure]
prio_in_tbl_orself [lemma, in OSQPostPure]
prio_set_rdy_not_in_tbl_rev [lemma, in OSQPostPure]
prio_set_rdy_not_in_tbl [lemma, in OSQPostPure]
prio_set_rdy_in_tbl_rev [lemma, in OSQPostPure]
prio_set_rdy_in_tbl [lemma, in OSQPostPure]
prio_not_in_tbl [definition, in OSTCBInvDef]
prio_in_tbl [definition, in OSTCBInvDef]
prio_eq_tid_eq [lemma, in oscore_common]
prio_neq_tid_neq [lemma, in oscore_common]
prio_neq_cur_set [lemma, in OSMutexPendPure1]
prio_available [definition, in absop]
PRIO_EXIST_ERR [definition, in absop]
PRIO_ERR [definition, in absop]
prio_neq_cur [definition, in common]
Prio_Not_In_app [lemma, in OSTimeTickPure]
Prio_Not_In_ex [lemma, in OSTimeTickPure]
Prio_Not_In [definition, in OSTimeTickPure]
prio_bit_and_zero [lemma, in mathlib]
prio_update_self_not_in [lemma, in mathlib]
prio_wt_inq_keep [lemma, in mathlib]
prio_in_tbl_rgrp_neq_zero [lemma, in mathlib]
prio_neq_not_in_tbl_rev [lemma, in mathlib]
prio_neq_not_in_tbl [lemma, in mathlib]
prio_neq_in_tbl_rev [lemma, in mathlib]
prio_neq_in_tbl [lemma, in mathlib]
prio_neq_cur [definition, in mathlib]
prio_rtbl_dec [lemma, in mathlib]
prio_neq_grpeq_prop [lemma, in mathlib]
prio_int_disj [lemma, in mathlib]
prio_in_rtbl_has_tid [lemma, in mathlib]
prio_inq [lemma, in mathlib]
prio_prop [lemma, in mathlib]
prio_destruct [lemma, in mathlib]
prio_range_com [lemma, in mathlib]
prio_destruct4 [lemma, in mathlib]
prio_destruct3 [lemma, in mathlib]
prio_destruct2 [lemma, in mathlib]
prio_destruct1 [lemma, in mathlib]
prodT [inductive, in Coqlib]
progabort [constructor, in opsem]
ProgOK [definition, in toptheorem]
ProgSim [inductive, in simulation]
progsim_imply_eref [lemma, in etraceref]
progsim_imply_eref_aux [lemma, in etraceref]
progtaskstepLib [library]
progunit [definition, in language]
prog_sim [definition, in etraceref]
prog_sim [constructor, in simulation]
projD [definition, in opsem]
projS [definition, in opsem]
projs_steq_projs [lemma, in lemmasfortoptheo]
projs_eqg [lemma, in lemmasfortoptheo]
projs_nc_tst [lemma, in tst_prop]
projs_snew [lemma, in tst_prop]
projs_eq_isr [lemma, in tst_prop]
projs_eqm [lemma, in tst_prop]
projs_repl [lemma, in tst_prop]
projs_ge_eq [lemma, in tst_prop]
projS_t_Snewt_t' [lemma, in tst_prop]
proj_sumbool_is_true [lemma, in Coqlib]
proj_sumbool_true [lemma, in Coqlib]
proj_sumbool [definition, in Coqlib]
proj_steq_eqdata [lemma, in tst_prop]
proj_stneq_ex [lemma, in tst_prop]
proj_stneq [lemma, in tst_prop]
proj_pointer [definition, in memdata]
proj_inj_bytes [lemma, in memdata]
proj_bytes [definition, in memdata]
prop_elim_rule2 [lemma, in hoare_tactics]
prop_elim_rule1 [lemma, in hoare_tactics]
prop_intro_rule [lemma, in derivedrules]
prop_eq_impl [lemma, in PIF_aux]
ProtectWrapper [definition, in OSMutex_common]
pstk1 [definition, in os_code_defs]
pstk2 [definition, in os_code_defs]
pswitch_step [constructor, in opsem]
ptbl [definition, in os_code_defs]
ptcb [definition, in os_code_defs]
ptcb1 [definition, in os_code_defs]
ptcb2 [definition, in os_code_defs]
ptomval [definition, in assertion]
ptomvallist [definition, in assertion]
ptomvallist_get_none [lemma, in lmachLib]
ptomvallist_init_mem [lemma, in lmachLib]
ptomvallist_loadbytes [lemma, in tst_prop]
ptomvallist_eqlen_storebytes_exists [lemma, in asrtLib]
ptomvallist_mem_eq [lemma, in inv_prop]
ptomval_nnil_neq [lemma, in common]
ptr_in_ectrls_false_append [lemma, in OSEventRemovePure]
ptr_in_ectrls_nil_false [lemma, in OSEventRemovePure]
ptr_in_ectrls [definition, in OSEventRemovePure]
ptr_in_ectrls' [definition, in OSEventRemovePure]
ptr_isptr [lemma, in laby]
ptr_isptr [lemma, in lab]
ptr_offset_right [definition, in OSQInvDef]
ptr_minus [definition, in OSQInvDef]
ptr_neq_null [lemma, in sep_pure]
pt_stepev [constructor, in opsem]
pt_step [constructor, in opsem]
pumerge [definition, in opsem]
pumerge_get_ex [lemma, in lemmasfortoptheo]
pumerge_get [lemma, in tst_prop]
pureTree [constructor, in seplog_tactics]
pureTree [constructor, in tacticsforseplog]
pure_split_rule [constructor, in inferules]
pure_ex_intro_rule [lemma, in hoare_tactics]
pure_split_rule_sound [lemma, in simplrulesound]
pure_split_rule' [lemma, in derivedrules]
pure_intro_rule' [lemma, in derivedrules]
pv_false [lemma, in common]
p_eq [lemma, in lemmasfortoptheo]
p_lift [lemma, in tst_prop]
p1 [definition, in os_code_defs]
p2 [definition, in os_code_defs]
p3 [definition, in os_code_defs]


Q

qacc [definition, in absop]
qaccapi [definition, in absop]
qacc_succ [definition, in absop]
qacc_no_msg [definition, in absop]
qacc_no_q_err [definition, in absop]
qacc_null [definition, in absop]
qacc_absinfer_no_q [lemma, in OSQAcceptPure]
qacc_absinfer_null [lemma, in OSQAcceptPure]
qacc_absinfer_get_msg [lemma, in OSQAcceptPure]
qacc_absinfer_no_msg [lemma, in OSQAcceptPure]
qacc_dl_vl_match [lemma, in mathlib]
qblkfsllseg_head_isptr [lemma, in hoare_tactics]
qblkfsll_head_isptr [lemma, in hoare_tactics]
qblkf_sll_osabst_emp [lemma, in inv_prop]
qblkf_sll_precise [lemma, in inv_prop]
qblkf_sllseg_osabst_emp [lemma, in inv_prop]
qblkf_sll_isptr [lemma, in inv_prop]
qblkf_sll [definition, in OSQInvDef]
qblkf_sllseg [definition, in OSQInvDef]
qcre [definition, in absop]
qcreapi [definition, in absop]
qcre_succ [definition, in absop]
qcre_error [definition, in absop]
qdel [definition, in absop]
qdelapi [definition, in absop]
qdel_succ [definition, in absop]
qdel_ex_wt_err [definition, in absop]
qdel_q_type_err [definition, in absop]
qdel_no_q_err [definition, in absop]
qdel_null [definition, in absop]
qend_right [definition, in OSQInvDef]
qentries_eq_zero [lemma, in mathlib]
qeventptr [definition, in os_code_defs]
qfreeblk [definition, in os_code_defs]
qpend [definition, in absop]
qpendapi [definition, in absop]
qpend_absimp_stat_err [lemma, in OSQPendPure]
qpend_absinfer_idle [lemma, in OSQPendPure]
qpend_absinfer_block_get [lemma, in OSQPendPure]
qpend_absinfer_to [lemma, in OSQPendPure]
qpend_absinfer_block [lemma, in OSQPendPure]
qpend_absinfer_get [lemma, in OSQPendPure]
qpend_absinfer_no_q [lemma, in OSQPendPure]
qpend_absinfer_null [lemma, in OSQPendPure]
qpend_block_get [definition, in absop]
qpend_to [definition, in absop]
qpend_block [definition, in absop]
qpend_get_succ [definition, in absop]
qpend_stat_err [definition, in absop]
qpend_idle_err [definition, in absop]
qpend_no_q_err [definition, in absop]
qpend_null [definition, in absop]
qpost [definition, in absop]
qpostapi [definition, in absop]
qpost_absinfer_exwt_succ [lemma, in OSQPostPure]
qpost_absinfer_nowt_succ [lemma, in OSQPostPure]
qpost_absinfer_ovf [lemma, in OSQPostPure]
qpost_absinfer_no_q [lemma, in OSQPostPure]
qpost_absinfer_msg_null [lemma, in OSQPostPure]
qpost_absinfer_null [lemma, in OSQPostPure]
qpost_no_wait_prop' [lemma, in OSQPostPure]
qpost_ovf_prop' [lemma, in OSQPostPure]
qpost_ovf_prop [lemma, in OSQPostPure]
qpost_exwt_succ [definition, in absop]
qpost_nowt_succ [definition, in absop]
qpost_ovf_err [definition, in absop]
qpost_q_no_err [definition, in absop]
qpost_msg_null [definition, in absop]
qpost_null [definition, in absop]
qwaitset_notnil_ex [lemma, in mathlib]
Q_SIZE [definition, in absop]


R

range_ostcby [lemma, in OSETWaitPure]
rdy [constructor, in language]
RdyChange [definition, in auxdef]
RDYINV [definition, in assertion]
rdyinv_isremp [lemma, in tst_prop]
RdyTCBblk [definition, in OSTCBInvDef]
RdyTCBblk_rtbl_add [lemma, in OSQPostPure]
RdyTCBblk_change_next_ptr' [lemma, in OSTimeTickPure]
RdyTCBblk_change_next_ptr [lemma, in OSTimeTickPure]
rdy_change [constructor, in absop]
rdy_change_l [constructor, in InternalFunSpec]
rdy_ectr [definition, in InternalFunSpec]
rdy_notin_wl [definition, in PIF_aux]
reltaskpred [definition, in simulation]
reltaskst [definition, in assertion]
rel_pif_upif [lemma, in pif_theory]
rel_st_els [definition, in OSTimeTickPure]
removelast_prop [lemma, in mathlib]
remove_nth_vallist_op [definition, in BaseAsrtDef]
remove_nth_vallist [definition, in BaseAsrtDef]
remove_nth_val_op [definition, in BaseAsrtDef]
remove_nth_val [definition, in BaseAsrtDef]
remove_array_struct [definition, in type_val_match]
remove_tid [definition, in absop]
remove_tid_eq [lemma, in OSTimeTickPure]
remove_tid_in_false [lemma, in PIF_aux]
remove_is_wait_neq [lemma, in PIF_aux]
repl_tst_join [lemma, in tst_prop]
repl_change_tstm_trans [lemma, in tst_prop]
repr_one [lemma, in IntLib]
repr_zero [lemma, in IntLib]
retasrt [definition, in assertion]
rete_rule [constructor, in inferules]
rete_rule' [lemma, in derivedrules]
rete_rule_sound [lemma, in retsound]
retfalse [definition, in auxdef]
retpost [definition, in inferules]
retpost_eventrdy [lemma, in OSMutex_common]
retpost_osev [lemma, in common]
retsound [library]
retspec_intro_rule [constructor, in inferules]
retspec_intro_rule_sound [lemma, in simplrulesound]
return_rh_ctcb [lemma, in OSMutex_common]
return_rh_tcbl_ecbl_p [lemma, in OSMutex_common]
return_ecbl_p [lemma, in OSMutex_common]
return_r_ecb_et_p [lemma, in OSMutex_common]
return_tcbl_p' [lemma, in OSMutex_common]
return_tcbl_p [lemma, in OSMutex_common]
return_gethwait [lemma, in OSMutex_common]
return_rl_t_g_p' [lemma, in OSMutex_common]
return_rl_t_g_p [lemma, in OSMutex_common]
return_rl_rt_pt_p [lemma, in OSMutex_common]
return_r_pt_p [lemma, in OSMutex_common]
return_rh_ctcb [lemma, in OSMutexPostPure]
retv_step [lemma, in progtaskstepLib]
retv_dec [lemma, in lemmasfortoptheo]
retv_spec [lemma, in tst_prop]
ret_rule [constructor, in inferules]
ret_step [lemma, in progtaskstepLib]
ret_dec [lemma, in lemmasfortoptheo]
ret_st [lemma, in tst_prop]
ret_spec [lemma, in tst_prop]
ret_rule' [lemma, in derivedrules]
ret_rule_sound [lemma, in retsound]
revlcons [definition, in opsem]
revlcons_len_plus [lemma, in lmachLib]
revlcons_nil [lemma, in lmachLib]
rev_len_eq [lemma, in lmachLib]
rev_cons_n_nil [lemma, in tst_prop]
rev_tl_vl [lemma, in asrtLib]
rg1 [lemma, in OSMutex_common]
rg1 [lemma, in OSMutexPostPure]
rg1 [lemma, in sempost_pure]
rg1 [lemma, in Mbox_common]
rg2 [lemma, in OSMutex_common]
rg2 [lemma, in OSMutexPostPure]
rg2 [lemma, in sempost_pure]
rg2 [lemma, in Mbox_common]
RHL_ECB_ETbl_P_msg [lemma, in OSQGetMsgPure]
RHL_Wait_all_rtbl_add [lemma, in OSQPostPure]
RHL_WaitMS_P_rtbl_add [lemma, in OSQPostPure]
RHL_WaitMB_P_rtbl_add [lemma, in OSQPostPure]
RHL_WaitQ_P_rtbl_add [lemma, in OSQPostPure]
RHL_WaitS_P_rtbl_add [lemma, in OSQPostPure]
RHL_Wait_P_rtbl_add [lemma, in OSQPostPure]
RHL_RdyI_P_rtbl_add [lemma, in OSQPostPure]
RHL_TCB_Status_Wait_P [definition, in OSTCBInvDef]
RHL_WaitMS_P [definition, in OSTCBInvDef]
RHL_WaitMB_P [definition, in OSTCBInvDef]
RHL_WaitQ_P [definition, in OSTCBInvDef]
RHL_WaitS_P [definition, in OSTCBInvDef]
RHL_Wait_P [definition, in OSTCBInvDef]
RHL_RdyI_P [definition, in OSTCBInvDef]
RHL_Wait_prioneq_prop_hold [lemma, in OSTimeDlyPure]
RHL_Rdy_prioneq_prop_hold [lemma, in OSTimeDlyPure]
RHL_ECB_ETbl_P [definition, in OSQInvDef]
RHL_ECB_ETbl_MUTEX_P [definition, in OSQInvDef]
RHL_ECB_ETbl_MBOX_P [definition, in OSQInvDef]
RHL_ECB_ETbl_SEM_P [definition, in OSQInvDef]
RHL_ECB_ETbl_Q_P [definition, in OSQInvDef]
RH_TCBList_ECBList_P_changeprio [lemma, in OSMutex_common]
RH_TL_EL_MUTEX_OWNER_hold [lemma, in OSMutex_common]
RH_CurTCB_Prop [lemma, in OSQGetMsgPure]
RH_TCBList_ECBList_P_msg [lemma, in OSQGetMsgPure]
rh_tcblist_ecblist_p_post_exwt_mutex [lemma, in OSMutexPostPure]
rh_tcblist_ecblist_p_post_exwt_aux_mbox [lemma, in OSMutexPostPure]
rh_tcblist_ecblist_p_post_exwt_aux [lemma, in OSQPostPure]
rh_tcbls_mqls_p_setmsg_hold [lemma, in OSQPostPure]
rh_tcblist_ecblist_p_post_exwt [lemma, in OSQPostPure]
rh_curtcb_set_nct [lemma, in OSQPostPure]
RH_TCBList_ECBList_P_high_block_hold [lemma, in OSQPendPure]
RH_TCBList_ECBList_P_high_get_msg_hold [lemma, in OSQPendPure]
RH_CurTCB_high_block_hold [lemma, in OSQPendPure]
RH_CurTCB_high_get_msg_hold [lemma, in OSQPendPure]
RH_CurTCB [definition, in OSTCBInvDef]
RH_TCBList_ECBList_P_high_block_hold_mutex [lemma, in OSMutexPendPure1]
RH_TCBList_ECBList_P_high_block_hold_mutexsem [lemma, in OSMutexPendPure1]
RH_CurTCB_high_block_hold_mutex [lemma, in OSMutexPendPure1]
RH_CurTCB_hold1 [lemma, in OSTimeDlyPure]
RH_TCBList_ECBList_P_hold1 [lemma, in OSTimeDlyPure]
rh_tcbls_mqls_p_getmsg_hold [lemma, in OSQAcceptPure]
rh_tcblist_ecblist_p_post_exwt_sem [lemma, in sempost_pure]
rh_tcblist_ecblist_p_post_exwt_aux_sem [lemma, in sempost_pure]
RH_TCBList_ECBList_P_tickchange [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_Q_P_tickchange [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_MUTEX_P_tickchange [lemma, in OSTimeTickPure]
rh_tcblist_ecblist_mutex_owner_set' [lemma, in OSTimeTickPure]
rh_tcblist_ecblist_mutex_owner_set [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_MBOX_P_tickchange [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_SEM_P_tickchange [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_P_rel_st_els [lemma, in OSTimeTickPure]
RH_TCBList_ECBList_P [definition, in OSQInvDef]
RH_TCBList_ECBList_MUTEX_P [definition, in OSQInvDef]
RH_TCBList_ECBList_MUTEX_OWNER [definition, in OSQInvDef]
RH_TCBList_ECBList_MBOX_P [definition, in OSQInvDef]
RH_TCBList_ECBList_SEM_P [definition, in OSQInvDef]
RH_TCBList_ECBList_Q_P [definition, in OSQInvDef]
RH_ECB_P [definition, in OSQInvDef]
RH_TCBList_ECBList_P_high_block_hold_sem [lemma, in sempend_pure]
RH_CurTCB_high_block_hold_sem [lemma, in sempend_pure]
rh_tcblist_ecblist_p_post_exwt_aux_mbox [lemma, in Mbox_common]
rh_tcblist_ecblist_p_post_exwt_mbox [lemma, in Mbox_common]
RH_TCBList_ECBList_P_high_block_hold_mbox [lemma, in Mbox_common]
RH_CurTCB_high_block_hold_mbox [lemma, in Mbox_common]
RH_CurTCB_high_get_msg_hold [lemma, in Mbox_common]
RH_TCBList_ECBList_P_high_get_msg_hold_mbox [lemma, in Mbox_common]
RH_TCBList_ECBList_MUTEX_OWNER_subset_hold [lemma, in Mbox_common]
RLH_ECBData_p_high_mbox_acpt_hold [lemma, in OSMutex_common]
RLH_ECBData_P_or_available [lemma, in OSMutex_common]
RLH_ECB_ETbl_P_msg [lemma, in OSQGetMsgPure]
rlh_ecbdata_in_noend [lemma, in OSQPostPure]
rlh_ecbdata_in_end [lemma, in OSQPostPure]
rlh_ecb_nowait_prop [lemma, in OSQPostPure]
RLH_Wait_all_rtbl_add [lemma, in OSQPostPure]
RLH_WaitMS_P_rtbl_add [lemma, in OSQPostPure]
RLH_WaitMB_P_rtbl_add [lemma, in OSQPostPure]
RLH_WaitQ_P_rtbl_add [lemma, in OSQPostPure]
RLH_WaitS_P_rtbl_add [lemma, in OSQPostPure]
RLH_Wait_P_rtbl_add [lemma, in OSQPostPure]
RLH_RdyI_P_rtbl_add [lemma, in OSQPostPure]
RLH_ECBData_P_impl_high_ecb_msg_nil [lemma, in OSQPendPure]
RLH_TCB_Status_Wait_P [definition, in OSTCBInvDef]
RLH_WaitMS_P [definition, in OSTCBInvDef]
RLH_WaitMB_P [definition, in OSTCBInvDef]
RLH_WaitQ_P [definition, in OSTCBInvDef]
RLH_WaitS_P [definition, in OSTCBInvDef]
RLH_Wait_P [definition, in OSTCBInvDef]
RLH_RdyI_P [definition, in OSTCBInvDef]
RLH_Wait_prioneq_prop_hold [lemma, in OSTimeDlyPure]
RLH_Rdy_prioneq_prop_hold [lemma, in OSTimeDlyPure]
RLH_ECB_ETbl_P [definition, in OSQInvDef]
RLH_ECB_ETbl_MUTEX_P [definition, in OSQInvDef]
RLH_ECB_ETbl_MBOX_P [definition, in OSQInvDef]
RLH_ECB_ETbl_SEM_P [definition, in OSQInvDef]
RLH_ECB_ETbl_Q_P [definition, in OSQInvDef]
RLH_ECBData_P [definition, in OSQInvDef]
RLH_ECBData_p_high_mbox_acpt_hold [lemma, in Mbox_common]
RL_Tbl_init_prop [lemma, in OSQCreatePure]
RL_RTbl_PrioTbl_P_hold_for_del [lemma, in OSMutex_common]
RL_RTbl_PrioTbl_P_update_vhold [lemma, in OSMutex_common]
rl_rtbl_priotbl_p_hold' [lemma, in OSMutex_common]
RL_RTbl_PrioTbl_P_set [lemma, in OSMutex_common]
rl_etbl_ptbl_p [lemma, in OSEventTaskRdyPure]
rl_tbl_grp_p_set_hold' [lemma, in OSMutexPostPure]
rl_tbl_grp_p_set_hold [lemma, in OSMutexPostPure]
rl_tbl_grp_neq_zero [lemma, in OSQPostPure]
rl_rtbl_priotbl_p_hold [lemma, in OSQPostPure]
rl_tbl_grp_p_set_hold'' [lemma, in OSQPostPure]
rl_tbl_grp_p_set_hold' [lemma, in OSQPostPure]
rl_tbl_grp_p_set_hold [lemma, in OSQPostPure]
RL_Tbl_Grp_P [definition, in OSTCBInvDef]
RL_RTbl_PrioTbl_P [definition, in OSTCBInvDef]
RL_TCBblk_P [definition, in OSTCBInvDef]
RL_RTbl_PrioTbl_P_set_vhold [lemma, in OSMutexPendPure1]
RL_TCBListblk_P [definition, in common]
RL_PrioTbl_P [definition, in common]
RL_TCBblk_P_List [definition, in OSTimeTickPure]
rl_rtbl_priotbl_p_set_hold [lemma, in OSTimeTickPure]
rl_tcbblk_tcby_range [lemma, in OSTimeTickPure]
rm [definition, in LibTactics]
RstateOP [definition, in assertion]
rtbl_remove_RL_RTbl_PrioTbl_P_hold' [lemma, in OSMutex_common]
rtbl_remove_RL_RTbl_PrioTbl_P_hold [lemma, in OSQPendPure]
rtbl_remove_RL_RTbl_PrioTbl_P_hold'' [lemma, in OSMutexPendPure1]
rtbl_remove_RL_RTbl_PrioTbl_P_hold [lemma, in OSTimeDlyPure]
ruleLib [library]
RuleSem [definition, in simulation]
RuleSound [lemma, in soundness]
rulesound [library]
ruletypevalmatch8u [lemma, in OSMutex_common]
rule_type_val_match [definition, in inferules]
rule_type_val_match_list [definition, in type_val_match]
rule_type_val_match_comptr_elim [lemma, in type_val_match]
rule_type_val_match_ptr_elim [lemma, in type_val_match]
rule_type_val_match_int32u_elim [lemma, in type_val_match]
rule_type_val_match_int16u_elim [lemma, in type_val_match]
rule_type_val_match_int8u_elim [lemma, in type_val_match]
rule_type_val_match_nvundef [lemma, in symbolic_execution]
rval [definition, in assertion]
rvl_nil [lemma, in hoare_tactics]
rvl_elim [lemma, in hoare_tactics]
RYDINV_irrev_prop [lemma, in asrtLib]
R_Prio_Tbl_P_hold_for_del [lemma, in OSMutex_common]
R_ECB_upd_hold [lemma, in OSMutex_common]
R_PrioTbl_P_update_vhold [lemma, in OSMutex_common]
R_ECB_ETbl_P_high_ecb_mutex_acpt_hold [lemma, in OSMutex_common]
R_ECB_ETbl_P_msg [lemma, in OSQGetMsgPure]
R_PrioTbl_P_msg [lemma, in OSQGetMsgPure]
r_conseq_rule [constructor, in inferules]
r_priotbl_p_set_hold [lemma, in OSQPostPure]
R_TCB_Status_P_rtbl_add [lemma, in OSQPostPure]
r_tcb_status_p_nrdy [lemma, in OSQPendPure]
R_ECB_ETbl_P_high_tcb_block_hold [lemma, in OSQPendPure]
R_ECB_ETbl_P_high_tcb_get_msg_hold [lemma, in OSQPendPure]
R_PrioTbl_P [definition, in OSTCBInvDef]
R_Prio_No_Dup [definition, in OSTCBInvDef]
R_TCB_Status_P [definition, in OSTCBInvDef]
R_ECB_upd_hold [lemma, in semdel_pure]
R_ECB_ETbl_P_high_tcb_block_hold [lemma, in OSMutexPendPure1]
R_ECB_ETbl_P_high_tcb_block_hold_mutex [lemma, in OSMutexPendPure1]
R_TCB_Status_mutexpend_lift [lemma, in OSMutexPendPure1]
R_PrioTbl_Pend_lift [lemma, in OSMutexPendPure1]
r_lift [lemma, in tst_prop]
r_lift_rule [lemma, in tst_prop]
R_PrioTbl_P_hold1 [lemma, in OSTimeDlyPure]
R_ECB_upd_hold [lemma, in OSQDelPure]
r_ecb_etbl_p_tcbstats_eq_hold [lemma, in OSTimeTickPure]
r_ecb_etbl_p_wait_rdy_hold [lemma, in OSTimeTickPure]
r_prio_no_dup_two_neq [lemma, in OSTimeTickPure]
r_prio_no_dup_l_mid [lemma, in OSTimeTickPure]
R_Prio_No_Dup_L_proc [lemma, in OSTimeTickPure]
r_prio_no_dup_setst_hold [lemma, in OSTimeTickPure]
r_prio_no_dup_join_imp [lemma, in OSTimeTickPure]
R_Prio_No_Dup_Sub_hold [lemma, in OSTimeTickPure]
R_Prio_No_Dup_Eq [lemma, in OSTimeTickPure]
R_Prio_No_Dup_Convert_rev [lemma, in OSTimeTickPure]
R_Prio_No_Dup_Convert [lemma, in OSTimeTickPure]
R_Prio_No_Dup_L [definition, in OSTimeTickPure]
R_Prio_No_Dup_L' [definition, in OSTimeTickPure]
R_PrioTbl_P_impl_prio_neq_cur [lemma, in mathlib]
R_Prio_NoChange_Prio_hold [lemma, in mathlib]
R_ECB_ETbl_P [definition, in OSQInvDef]
R_ECB_ETbl_P_high_tcb_block_hold [lemma, in sempend_pure]
R_ECB_ETbl_P_high_tcb_block_hold [lemma, in Mbox_common]
r_tcb_status_p_nrdy [lemma, in Mbox_common]
R_ECB_ETbl_P_high_ecb_mbox_acpt_hold [lemma, in Mbox_common]
R_ECB_upd_hold [lemma, in Mbox_common]


S

saddempL [lemma, in seplog_tactics]
saddempL [lemma, in tacticsforseplog]
saddempR [lemma, in seplog_tactics]
saddempR [lemma, in tacticsforseplog]
saddempRE [lemma, in seplog_tactics]
saddempRE [lemma, in tacticsforseplog]
saddempRE' [lemma, in seplog_tactics]
saddempRI [lemma, in seplog_tactics]
saddempRI [lemma, in tacticsforseplog]
saddempRI' [lemma, in seplog_tactics]
salloc [constructor, in language]
sallocend_step [constructor, in opsem]
salloclv_step [constructor, in opsem]
sallocp_step [constructor, in opsem]
sassign [constructor, in language]
sassignend_step [constructor, in opsem]
sassignrv_step [constructor, in opsem]
sassign_step [constructor, in opsem]
sat [definition, in assertion]
sat_lenv_mono [lemma, in tst_prop]
sat_prop [lemma, in asrtLib]
sat_sep_conj_elim1 [lemma, in inv_prop]
sc [definition, in absop]
scall [constructor, in language]
scalle [constructor, in language]
scalle_step [constructor, in opsem]
scheck [definition, in derivedrules]
sched [constructor, in language]
sc_isched_step [lemma, in oscore_common]
self [definition, in os_code_defs]
SELF [definition, in absop]
semacc [definition, in absop]
semaccapi [definition, in absop]
semacc_RH_TCBList_ECBList_P_hold [lemma, in semacc_pure]
semacc_new_fundation [lemma, in semacc_pure]
semacc_compose_EcbList_P [lemma, in sem_common]
semacc_ltu_trans [lemma, in sem_common]
semacc_triangle_sem [lemma, in sem_common]
semacc_eventtype_neq_sem [lemma, in sem_common]
semacc_absimp_succ [lemma, in sem_absop_rule]
semacc_absimp_no_source [lemma, in sem_absop_rule]
semacc_absimp_no_sem [lemma, in sem_absop_rule]
semacc_absimp_null [lemma, in sem_absop_rule]
semacc_succ [definition, in absop]
semacc_no_source [definition, in absop]
semacc_no_sem_err [definition, in absop]
semacc_null [definition, in absop]
semacc_int_eq_false [lemma, in sem_lab]
semacc_int_eq_true [lemma, in sem_lab]
semacc_ltu_zero_false [lemma, in sem_lab]
semacc_pure [library]
semcre [definition, in absop]
semcreapi [definition, in absop]
semcre_ecblist_star_not_inh [lemma, in sem_common]
semcre_RH_TCBList_ECBList_P [lemma, in sem_common]
semcre_ECBList_P [lemma, in sem_common]
semcre_RL_Tbl_init_prop [definition, in sem_common]
semcre_absimp_succ [lemma, in sem_absop_rule]
semcre_absimp_no_free [lemma, in sem_absop_rule]
semcre_succ [definition, in absop]
semcre_no_free [definition, in absop]
semdel [definition, in absop]
semdelapi [definition, in absop]
semdel_absimp_succ [lemma, in sem_absop_rule]
semdel_absimp_task_waiting [lemma, in sem_absop_rule]
semdel_absimp_type_err [lemma, in sem_absop_rule]
semdel_absimp_no_sem [lemma, in sem_absop_rule]
semdel_absimp_null [lemma, in sem_absop_rule]
semdel_ecb_list_join_join [lemma, in semdel_pure]
semdel_ecbjoin_sig_join [lemma, in semdel_pure]
semdel_ecblist_ecbmod_get' [lemma, in semdel_pure]
semdel_ecblist_p_decompose [lemma, in semdel_pure]
semdel_ecb_del_prop_RHhold [lemma, in semdel_pure]
semdel_ecblist_ecbmod_get [lemma, in semdel_pure]
semdel_succ [definition, in absop]
semdel_ex_wt_err [definition, in absop]
semdel_sem_type_err [definition, in absop]
semdel_no_sem_err [definition, in absop]
semdel_null [definition, in absop]
semdel_pure [library]
SemMod [module, in language]
SemMod_merge_emp_l [lemma, in lemmasforseplog]
SemMod_disj_merge_eq [lemma, in lemmasforseplog]
sempend_ltu_ass2 [lemma, in sem_common]
sempend_ltu_ass1 [lemma, in sem_common]
sempend_part1 [lemma, in OSSemPendProof]
sempend_TCBListP_head_in_tcb_rdy [lemma, in sempend_pure]
sempend_pure [library]
sempost_part_0 [lemma, in OSSemPostProof]
sempost_part_6 [lemma, in OSSemPostProof]
sempost_part_5 [lemma, in OSSemPostProof]
sempost_part_4 [lemma, in OSSemPostProof]
sempost_part_3 [lemma, in OSSemPostProof]
sempost_part_2 [lemma, in OSSemPostProof]
sempost_part_1 [lemma, in OSSemPostProof]
sempost_struct_type_vallist_match_sem [lemma, in sempost_pure]
sempost_vallist_match_assert1 [lemma, in sempost_pure]
sempost_inc_RH_TCBList_ECBList_P_hold [lemma, in sempost_pure]
sempost_grp_wls_nil' [lemma, in sempost_pure]
sempost_grp_wls_nil [lemma, in sempost_pure]
sempost_inc_cnt_prop [lemma, in sempost_pure]
sempost_ltu_trans [lemma, in sempost_pure]
sempost_pure [library]
sem_eventtype_neq_sem [lemma, in sem_common]
sem_H_get_none [lemma, in sem_common]
sem_ecb_wt_ex_prop [lemma, in semdel_pure]
sem_pendapi [definition, in absop]
sem_pend [definition, in absop]
sem_pend_block_get_succ [definition, in absop]
sem_pend_timeout_err [definition, in absop]
sem_pend_block [definition, in absop]
sem_pend_msg_not_null_err [definition, in absop]
sem_pend_inst_get_succ [definition, in absop]
sem_pend_not_ready_err [definition, in absop]
sem_pend_from_idle_err [definition, in absop]
sem_pend_wrong_type_err [definition, in absop]
sem_pend_p_not_legal_err [definition, in absop]
sem_pend_null_err [definition, in absop]
sem_postapi [definition, in absop]
sem_post [definition, in absop]
sem_post_put_sem_in_succ [definition, in absop]
sem_post_ex_wt_succ [definition, in absop]
sem_post_ovf_err [definition, in absop]
sem_post_wrong_type_err [definition, in absop]
sem_post_p_not_legal_err [definition, in absop]
sem_post_null_err [definition, in absop]
SEM_DEL_EX_ERR [definition, in absop]
SEM_NULL_ERR [definition, in absop]
sem_post_get_tcb_stat [lemma, in sempost_pure]
sem_absop_rule [library]
sem_lab [library]
sem_common [library]
seplog_tactics [library]
seplog_lemmas [library]
seporI [lemma, in OSMutex_common]
seporI' [lemma, in OSMutex_common]
seporI2 [lemma, in OSMutex_common]
seporI2' [lemma, in OSMutex_common]
sep_aconj_r_aisfalse_to_astar [lemma, in hoare_lemmas]
sep_aconj_r_aistrue_to_astar [lemma, in hoare_lemmas]
sep_pure [lemma, in asrtLib]
sep_ptr_neq_OS_EVENT [lemma, in common]
sep_pure_get [lemma, in common]
sep_pure_split [lemma, in common]
sep_aconj_r_aisfalse_to_astar' [lemma, in sem_lab]
sep_aconj_r_aistrue_to_astar' [lemma, in sem_lab]
sep_pure [library]
seqcomsound [library]
seq_rule_sound [lemma, in seqcomsound]
seq_rule_sound_aux [lemma, in seqcomsound]
seq_rule [constructor, in inferules]
set_isisr_s [definition, in assertion]
set_is_s [definition, in assertion]
set_isr_s [definition, in assertion]
set_empmem_sig_eq [lemma, in lmachLib]
set_minus_comm [lemma, in tst_prop]
set_env_good_env_decllist [lemma, in loststepLib]
set_rdy [definition, in InternalFunSpec]
set_rdy_tbl [definition, in InternalFunSpec]
set_rdy_grp [definition, in InternalFunSpec]
set_rdy_grp_simpl [lemma, in OSTimeTickPure]
set_nth_nth_val' [lemma, in OSTimeTickPure]
set_nth_nth_val [lemma, in OSTimeTickPure]
set_tcb_next [definition, in OSTimeTickPure]
set_nth [definition, in OSTimeTickPure]
set_rdy_tbl_grp_hold [lemma, in OSTimeTickPure]
set_getop_eq [lemma, in PIF_aux]
set_neq_getop_eq [lemma, in PIF_aux]
sfexec [constructor, in language]
sfexec_step [constructor, in opsem]
sfree [constructor, in language]
sfreeend_step [constructor, in opsem]
sfree_step [constructor, in opsem]
shl [definition, in val]
shl3_add_le_255' [lemma, in OSEventTaskRdyPure]
shl3_add_le_255 [lemma, in OSEventTaskRdyPure]
shl3_add_range [lemma, in mathlib]
shr [definition, in val]
shrl_eq [lemma, in mathlib]
shru_3_lt_8 [lemma, in sep_pure]
side_condition [definition, in toptheorem]
side_condition' [definition, in lemmasfortoptheo]
sif [constructor, in language]
sifthen [constructor, in language]
sifthen_step [constructor, in opsem]
sif_step [constructor, in opsem]
sig_indom_eq [lemma, in OSMutex_common]
sig_indom_eq' [lemma, in OSMutex_common]
simplrulesound [library]
simpl_valinj [lemma, in OSMutex_common]
simpl_inv_excrit''' [lemma, in OSIntExitPure]
simpl_inv_excrit'' [lemma, in OSIntExitPure]
simpl_inv_excrit' [lemma, in OSIntExitPure]
simpl_inv_excrit [lemma, in hoare_tactics]
simpl_inv_excrit' [lemma, in hoare_tactics]
simpl_inv_encrit [lemma, in hoare_tactics]
simpl_inv_encrit' [lemma, in hoare_tactics]
simulation [library]
sim_retspec_intro [lemma, in simplrulesound]
size [definition, in os_code_defs]
skip_expr_eval_msim_hold [lemma, in ruleLib]
skip_axiom [variable, in LibTactics]
slift [lemma, in seplog_tactics]
slift [lemma, in tacticsforseplog]
sliftE [lemma, in seplog_tactics]
sliftE [lemma, in tacticsforseplog]
sliftE' [lemma, in seplog_tactics]
sliftI [lemma, in seplog_tactics]
sliftI [lemma, in tacticsforseplog]
sliftI' [lemma, in seplog_tactics]
sll [definition, in BaseAsrtDef]
sll [definition, in OSQInvDef]
sllseg [definition, in BaseAsrtDef]
sllseg_head_isptr [lemma, in hoare_tactics]
sllseg_osabst_emp [lemma, in inv_prop]
sll_head_isptr [lemma, in hoare_tactics]
sll_isptr [lemma, in inv_prop]
sll_osabst_emp [lemma, in inv_prop]
slower [lemma, in seplog_tactics]
slower [lemma, in tacticsforseplog]
slowerE [lemma, in seplog_tactics]
slowerE [lemma, in tacticsforseplog]
slowerE' [lemma, in seplog_tactics]
slowerI [lemma, in seplog_tactics]
slowerI [lemma, in tacticsforseplog]
slowerI' [lemma, in seplog_tactics]
SmCTaskSim [lemma, in lemmasfortoptheo]
SmCTaskSim' [lemma, in lemmasfortoptheo]
smem [definition, in language]
sm_nat_exist [lemma, in asrtLib]
Snewt [definition, in opsem]
snewt_neqt [lemma, in tst_prop]
Snewt_t_projS_t' [lemma, in tst_prop]
snpcall_step [constructor, in opsem]
sn_le_n_le_minus1 [lemma, in mathlib]
some [constructor, in seplog_tactics]
some [constructor, in tacticsforseplog]
SomeT [constructor, in Coqlib]
something_in_not_nil [lemma, in OSMutex_common]
something_in_not_nil [lemma, in OSMutexPostPure]
something_in_not_nil [lemma, in sempost_pure]
something_in_not_nil [lemma, in Mbox_common]
SomeT1 [constructor, in Coqlib]
SOME_P_NOT_LEGAL_ERR [definition, in os_code_defs]
Soundness [lemma, in toprule]
soundness [library]
spcall_step [constructor, in opsem]
Spec [definition, in ucos_correctaux]
specstep_locality [lemma, in ruleLib]
specstep_merge_emp [lemma, in absop_rules]
spec_stepS [constructor, in opsem]
spec_stepO [constructor, in opsem]
spec_stepstar [inductive, in opsem]
spec_assume_step [constructor, in opsem]
spec_choice_step2 [constructor, in opsem]
spec_choice_step1 [constructor, in opsem]
spec_seq_step2 [constructor, in opsem]
spec_seq_step1 [constructor, in opsem]
spec_prim_step [constructor, in opsem]
spec_step [inductive, in opsem]
spec_step_tidsame [lemma, in progtaskstepLib]
spec_assume [constructor, in language]
spec_choice [constructor, in language]
spec_seq [constructor, in language]
spec_done [constructor, in language]
spec_prim [constructor, in language]
spec_code [inductive, in language]
spec_step_disjo [lemma, in asrtLib]
spec_step_eqdomo [lemma, in asrtLib]
spec_ext [lemma, in PIF_aux]
sprim [constructor, in language]
sprint [constructor, in language]
sprint_step [constructor, in opsem]
srearr [lemma, in seplog_tactics]
srearr [lemma, in tacticsforseplog]
srearrE [lemma, in seplog_tactics]
srearrE [lemma, in tacticsforseplog]
srearrE' [lemma, in seplog_tactics]
srearrI [lemma, in seplog_tactics]
srearrI [lemma, in tacticsforseplog]
srearrI' [lemma, in seplog_tactics]
sret [constructor, in language]
srete [constructor, in language]
srete_step [constructor, in opsem]
sretv_step [constructor, in opsem]
sret_step [constructor, in opsem]
sseq [constructor, in language]
sseq_step [constructor, in opsem]
ssimplE [lemma, in seplog_tactics]
ssimplE [lemma, in tacticsforseplog]
ssimplE_simpl [lemma, in seplog_tactics]
ssimplE' [lemma, in seplog_tactics]
ssimplI [lemma, in seplog_tactics]
ssimplI [lemma, in tacticsforseplog]
ssimplI_simpl [lemma, in seplog_tactics]
ssimplI' [lemma, in seplog_tactics]
sskip [constructor, in language]
sskip_step [constructor, in opsem]
sss [lemma, in OSIntExitPure]
sss' [lemma, in OSIntExitPure]
sstep [inductive, in opsem]
sstepev [inductive, in opsem]
sstep_idmove_deter [lemma, in cstepLib]
sstep_pumerge' [lemma, in progtaskstepLib]
sstep_pumerge [lemma, in progtaskstepLib]
sstep_AddKsToTail [lemma, in progtaskstepLib]
sstep_cont_locality [lemma, in tst_prop]
sstep1_locality [lemma, in progtaskstepLib]
StarAssocE [lemma, in lemmasforseplog]
StarAssocI [lemma, in lemmasforseplog]
StarComm [lemma, in lemmasforseplog]
StarEmpEL [lemma, in lemmasforseplog]
StarEmpER [lemma, in lemmasforseplog]
StarEmpIL [lemma, in lemmasforseplog]
StarEmpIR [lemma, in lemmasforseplog]
StarExEL [lemma, in lemmasforseplog]
StarExER [lemma, in lemmasforseplog]
StarExIL [lemma, in lemmasforseplog]
StarExIR [lemma, in lemmasforseplog]
starinvnoisr_prop1_rev [lemma, in tst_prop]
starinv_noisr [definition, in assertion]
starinv_isr [definition, in assertion]
starinv_prop1_rev' [lemma, in OSIntExitPure]
starinv_isr_set_highest_tid [lemma, in hoare_tactics]
starinv_isr_osabst_emp [lemma, in hoare_tactics]
starinv_isr_prop4' [lemma, in tst_prop]
starinv_isr_ncare_ab [lemma, in tst_prop]
starinv_isr_ncare_aux_ab_iret [lemma, in tst_prop]
starinv_isr_prop_intro2' [lemma, in tst_prop]
starinv_isr_ncare_aux_ab [lemma, in tst_prop]
starinv_prop [lemma, in asrtLib]
starinv_isr_prop_elim [lemma, in asrtLib]
starinv_isr_prop_rev [lemma, in asrtLib]
starinv_isr_prop5 [lemma, in asrtLib]
starinv_isr_prop4 [lemma, in asrtLib]
starinv_isr_elim1 [lemma, in asrtLib]
starinv_isr_prop_intro3 [lemma, in asrtLib]
starinv_isr_prop_intro2 [lemma, in asrtLib]
starinv_isr_prop_intro1 [lemma, in asrtLib]
starinv_prop2_rev [lemma, in asrtLib]
starinv_prop2 [lemma, in asrtLib]
starinv_prop1_rev [lemma, in asrtLib]
starinv_prop1 [lemma, in asrtLib]
starinv_prop1_rev [lemma, in derivedrules]
starinv_prop1' [lemma, in derivedrules]
StarMono [lemma, in lemmasforseplog]
StarPureE [lemma, in lemmasforseplog]
StarPureI [lemma, in lemmasforseplog]
start [definition, in os_code_defs]
starTree [constructor, in seplog_tactics]
starTree [constructor, in tacticsforseplog]
StarTrueI [lemma, in lemmasforseplog]
star_star_comm [lemma, in aux_for_hoare_lemmas]
star_star_eq_rep [lemma, in aux_for_hoare_lemmas]
star_star_comm [lemma, in symbolic_execution]
star_star_eq_rep [lemma, in symbolic_execution]
Star2PureE [lemma, in lemmasforseplog]
Star2PureI [lemma, in lemmasforseplog]
Star2PureLE [lemma, in lemmasforseplog]
Star2PureLI [lemma, in lemmasforseplog]
Star2PureRE [lemma, in lemmasforseplog]
Star2PureRI [lemma, in lemmasforseplog]
Star2TrueE [lemma, in lemmasforseplog]
Star2TrueI [lemma, in lemmasforseplog]
star3_comm' [lemma, in aux_for_hoare_lemmas]
star3_comm [lemma, in aux_for_hoare_lemmas]
star3_comm' [lemma, in symbolic_execution]
star3_comm [lemma, in symbolic_execution]
State [axiom, in pif_theory]
statmbox_and_not_statmbox_eq_rdy [lemma, in Mbox_common]
StatProp [definition, in pif_theory]
statq_and_not_statq_eq_rdy [lemma, in OSQPostPure]
statsem_and_not_statsem_eq_rdy [lemma, in sem_common]
stepev_still_inos [lemma, in progtaskstepLib]
step_fexec_ninos [lemma, in progtaskstepLib]
step_to_inos_dec [lemma, in progtaskstepLib]
Steq [definition, in opsem]
Steq_projS_tid_neq_is_eq [lemma, in tst_prop]
sti [constructor, in language]
sti_step [constructor, in opsem]
sti1_rule [constructor, in inferules]
sti1_rule_sound [lemma, in clistisound]
sti1_rule' [lemma, in derivedrules]
sti2_rule [constructor, in inferules]
sti2_rule_sound [lemma, in clistisound]
sti2_rule' [lemma, in derivedrules]
stmtcont [inductive, in language]
stmtcont_eq_length [lemma, in contLib]
stmts [inductive, in language]
stmts_dec [lemma, in lemmasfortoptheo]
stmt_stepev [constructor, in opsem]
stmt_step [constructor, in opsem]
store [definition, in memory]
storebytes [definition, in memory]
storebytes_mono' [lemma, in memory]
storebytes_get_same [lemma, in memory]
storebytes_ptomvallist_eqlen_infer [lemma, in lmachLib]
storebytes_indom [lemma, in lmachLib]
storebytes_ptomvallist_frame [lemma, in lmachLib]
storebytes_memjoin [lemma, in lmachLib]
storebytes_mono [lemma, in lmachLib]
storebytes_set [lemma, in lemmasfortoptheo]
storebytes_minus [lemma, in tst_prop]
store_same_mono [lemma, in memory]
store_mono' [lemma, in memory]
store_mapstoval_frame1 [lemma, in lmachLib]
store_mapstoval_frame [lemma, in lmachLib]
store_mono [lemma, in lmachLib]
store_join_map_join [lemma, in chkissound]
store_join_store [lemma, in lemmasfortoptheo]
store_sub_disj_disj [lemma, in lemmasfortoptheo]
store_disj_merge [lemma, in lemmasfortoptheo]
store_sub_minus_eq [lemma, in lemmasfortoptheo]
store_exists_fcall [lemma, in asrtLib]
store_asrt_hold' [lemma, in asrtLib]
store_asrt_hold [lemma, in asrtLib]
store_exist_join [lemma, in asrtLib]
store_exist_join' [lemma, in asrtLib]
store_mapstoval_mono_rev2 [lemma, in asrtLib]
store_mono_join_eq [lemma, in loststepLib]
structmapstovallist [definition, in assertion]
structtype_imply_fieldoffset [lemma, in lmachLib]
struct_type_vallist_match_os_event [lemma, in OSEventRemovePure]
struct_type_vallist_match [definition, in BaseAsrtDef]
struct_type_vallist_match' [definition, in BaseAsrtDef]
struct_type_vallist_match_os_event [lemma, in laby]
struct_type_vallist_match_os_event_mbox [lemma, in laby]
struct_type_vallist_match_os_tcb [lemma, in laby]
struct_type_vallist_match_elim_13 [lemma, in type_val_match]
struct_type_vallist_match_elim_12 [lemma, in type_val_match]
struct_type_vallist_match_elim_11 [lemma, in type_val_match]
struct_type_vallist_match_elim_10 [lemma, in type_val_match]
struct_type_vallist_match_elim_9 [lemma, in type_val_match]
struct_type_vallist_match_elim_8 [lemma, in type_val_match]
struct_type_vallist_match_elim_7 [lemma, in type_val_match]
struct_type_vallist_match_elim_6 [lemma, in type_val_match]
struct_type_vallist_match_elim_5 [lemma, in type_val_match]
struct_type_vallist_match_elim_4 [lemma, in type_val_match]
struct_type_vallist_match_elim_3 [lemma, in type_val_match]
struct_type_vallist_match_elim_2 [lemma, in type_val_match]
struct_type_vallist_match_elim_1 [lemma, in type_val_match]
struct_array_rm_type_val_match [lemma, in type_val_match]
struct_type_vallist_match_elim_0 [lemma, in type_val_match]
struct_type_vallist_match_os_event [lemma, in lab]
struct_type_vallist_match_os_event_mbox [lemma, in lab]
struct_type_vallist_match_os_tcb [lemma, in lab]
struct_type_vallist_match_os_tcb [lemma, in inv_prop]
struct_type_vallist_match_os_q_freeblk [lemma, in inv_prop]
struct_type_vallist_match_os_q [lemma, in inv_prop]
struct_type_vallist_match_os_event [lemma, in inv_prop]
struct_atom_val_eq [definition, in inv_prop]
struct_atom_val_eq' [definition, in inv_prop]
struct_member_rv_general [lemma, in symbolic_execution]
struct_offset_rv [lemma, in symbolic_execution]
struct_member_array_rv [lemma, in symbolic_execution]
struct_member_rv_g_general [lemma, in symbolic_execution]
struct_member_array_rv_g [lemma, in symbolic_execution]
struct_member_rv_g [lemma, in symbolic_execution]
struct_member_rv_g''' [lemma, in symbolic_execution]
struct_member_rv_g'' [lemma, in symbolic_execution]
struct_member_rv_g' [lemma, in symbolic_execution]
struct_member_rv [lemma, in symbolic_execution]
struct_member_rv'' [lemma, in symbolic_execution]
struct_member_rv' [lemma, in symbolic_execution]
struct_asrt_eq [lemma, in symbolic_execution]
struct_rm_update_eq [lemma, in symbolic_execution]
sub [definition, in val]
subabsop [definition, in assertion]
subdomenv_conse [lemma, in asrtLib]
substabst [definition, in assertion]
substaskst [definition, in assertion]
substaskstm [definition, in assertion]
substmem [definition, in assertion]
substmo [definition, in assertion]
subs_tst_wo_mem_eq [lemma, in tst_prop]
subs_eq_isr [lemma, in tst_prop]
sub_disj_disj [lemma, in lemmasfortoptheo]
sub_len_neq [lemma, in tst_prop]
sub_join_trans' [lemma, in tst_prop]
sub_join_trans [lemma, in tst_prop]
sub_eqe [lemma, in tst_prop]
sub_minus_merge [lemma, in tst_prop]
sub_minus_disj [lemma, in tst_prop]
sub_disj [lemma, in tst_prop]
sub_minus_merge_eq [lemma, in tst_prop]
sub_minus [lemma, in tst_prop]
sub_dom_exists [lemma, in asrtLib]
sub_dom_env [definition, in asrtLib]
sub_emp [lemma, in OSTimeTickPure]
sub_joinsig_get [lemma, in OSTimeTickPure]
sub_joinsig_set_sud [lemma, in OSTimeTickPure]
sub_zero_eq_rev [lemma, in mathlib]
sub_joinsig_get [lemma, in PIF_aux]
sub_zero_eq [lemma, in symbolic_execution]
sub_mul_eq_add_mul [lemma, in symbolic_execution]
sum_left_map [definition, in Coqlib]
svfevalnil_step [constructor, in opsem]
svfeval_step [constructor, in opsem]
sviff_step [constructor, in opsem]
svift_step [constructor, in opsem]
svseq_step [constructor, in opsem]
svwhilef_step [constructor, in opsem]
svwhilet_step [constructor, in opsem]
swap_comparison [definition, in Integers]
swhile [constructor, in language]
swhile_step [constructor, in opsem]
SWINV [definition, in assertion]
swinv_prop2 [lemma, in ruleLib]
swinv_prop1 [lemma, in ruleLib]
swinv_inv_O''' [lemma, in ruleLib]
swinv_inv_O [lemma, in tst_prop]
swinv_ncare_ab [lemma, in tst_prop]
swinv_isremp [lemma, in tst_prop]
swinv_isr_emp [lemma, in tst_prop]
SWINV_irrev_prop [lemma, in asrtLib]
switch [constructor, in language]
switchsound [library]
switch_rule [constructor, in inferules]
switch_rule_sound [lemma, in switchsound]
switch_rule_sound' [lemma, in switchsound]
switch_rule' [lemma, in derivedrules]
swi_rdy_inv''' [lemma, in lemmasfortoptheo]
swi_rdy_eq_swi [lemma, in tst_prop]
swi_rdy_inv' [lemma, in tst_prop]
SWPRE [definition, in assertion]
swpre_join_prop' [lemma, in ruleLib]
swpre_store [lemma, in lemmasfortoptheo]
swpre_locality [lemma, in tst_prop]
swpre_prop' [lemma, in tst_prop]
swpre_ncare_ab [lemma, in tst_prop]
swpre_prop [lemma, in tst_prop]
swpre_join_prop [lemma, in asrtLib]
SWPRE_irrev_prop [lemma, in asrtLib]
sw_has_code [lemma, in tst_prop]
sw_same_t [lemma, in tst_prop]
symbolic_execution [library]
SysmemJoinM [definition, in assertion]
szstruct [definition, in memdata]


T

tacticsforseplog [library]
Tarray [constructor, in memdata]
tarray_tvoid [lemma, in common]
task [definition, in os_code_defs]
taskabort [constructor, in opsem]
TaskEx [axiom, in pif_theory]
taskid [axiom, in pif_theory]
TaskLStMod [module, in language]
TaskOK [definition, in toptheorem]
tasks [definition, in language]
TaskSim [inductive, in simulation]
TaskSimAsrt [definition, in simulation]
TasksMod [module, in language]
taskst [definition, in language]
taskstatus [inductive, in language]
taskstk [definition, in os_code_defs]
taskst_join_merge [lemma, in joinmemLib]
tasks_waiting [definition, in os_code_defs]
tasks_set_set [lemma, in progtaskstepLib]
tasks_set_a_set_a [lemma, in progtaskstepLib]
tasks_set_eq_set2 [lemma, in tst_prop]
tasks_get_set [lemma, in tst_prop]
tasks_set_get_neq [lemma, in tst_prop]
TASK_STK_SIZE [definition, in os_code_defs]
task_stat_prop [definition, in PIF_aux]
task_sim [constructor, in simulation]
tblemma1 [lemma, in OSMutex_common]
tblemma2 [lemma, in OSMutex_common]
tblemma3 [lemma, in OSMutex_common]
tblemma4 [lemma, in OSMutex_common]
TcbBJ [definition, in simulation]
tcbblk_prio_range [lemma, in common]
tcbdllseg [definition, in OSTCBInvDef]
tcbdllseg_get_last_tcb_ptr [lemma, in OSEventTaskRdyPure]
tcbdllseg_split' [lemma, in OSEventTaskRdyPure]
tcbdllseg_isvptr [lemma, in OSEventTaskRdyPure]
tcbdllseg_last_nextptr [lemma, in hoare_tactics]
tcbdllseg_l_not_nil [lemma, in OSMutexPendPure1]
tcbdllseg_cons [lemma, in OSMutexPendPure1]
tcbdllseg_split [lemma, in common]
tcbdllseg_compose [lemma, in common]
tcbdllseg_osabst_emp [lemma, in inv_prop]
tcbdllseg_precise [lemma, in inv_prop]
tcbdllseg_compose [lemma, in inv_prop]
tcbdllseg_compose_tail [lemma, in OSTimeTickPure]
tcbdllseg_compose' [lemma, in OSTimeTickPure]
TcbJoin [definition, in OSTCBInvDef]
tcbjoinsig_set_sub_sub [lemma, in oscore_common]
tcbjoinsig_set_sub_sub [lemma, in OSTimeTickPure]
tcbjoinsig_set_sub_sub [lemma, in PIF_aux]
tcbjoin_mod [lemma, in OSMutex_common]
tcbjoin_set_ex [lemma, in mathlib_join]
tcbjoin_set_ex_main [lemma, in mathlib_join]
tcbjoin_join_ex2 [lemma, in mathlib_join]
tcbjoin_join_ex2_main [lemma, in mathlib_join]
tcbjoin_join_get_neq [lemma, in mathlib_join]
tcbjoin_join_get_neq_my [lemma, in mathlib_join]
tcbjoin_get_getneq [lemma, in mathlib_join]
tcbjoin_get_getneq_my [lemma, in mathlib_join]
tcbjoin_get_a [lemma, in mathlib_join]
tcbjoin_get_a_my [lemma, in mathlib_join]
tcbjoin_get_get [lemma, in mathlib_join]
tcbjoin_get_get_my [lemma, in mathlib_join]
tcbjoin_get [lemma, in mathlib_join]
tcbjoin_get_my [lemma, in mathlib_join]
tcbjoin_set [lemma, in mathlib_join]
tcbjoin_set_my [lemma, in mathlib_join]
tcbjoin_neq [lemma, in OSTimeTickPure]
tcbjoin_set [lemma, in OSTimeTickPure]
tcbjoin_get_n [lemma, in OSTimeTickPure]
tcbjoin_get_none [lemma, in OSTimeTickPure]
tcbjoin_join_ex_join [lemma, in OSTimeTickPure]
tcbjoin_joinsig_eq [lemma, in OSTimeTickPure]
tcbjoin_tid_neq [lemma, in mathlib]
tcbjoin_join_ex [lemma, in mathlib]
tcbjoin_get_get2 [lemma, in mathlib]
TCBListP_head_in_tcb [lemma, in sempend_pure]
TCBListP_head_in_tcb [lemma, in Mbox_common]
TCBList_imp_TCBNode [lemma, in OSMutex_common]
TCBList_get_head [lemma, in OSMutex_common]
TCBList_P_split_by_tcbls_verbose [lemma, in OSMutex_common]
TCBList_P_post_msg_gen [lemma, in OSMutexPostPure]
TCBList_P_post_msg [lemma, in OSQPostPure]
TCBList_P_Combine [lemma, in OSQPostPure]
TCBList_P_Split [lemma, in OSQPostPure]
TCBList_P_rtbl_add [lemma, in OSQPostPure]
TCBList_P_rtbl_add_lemma_main [lemma, in OSQPostPure]
TCBList_P_rtbl_add_lemma_2 [lemma, in OSQPostPure]
TCBList_P_rtbl_add_lemma_2a [lemma, in OSQPostPure]
TCBList_P_rtbl_add_lemma_1 [lemma, in OSQPostPure]
TCBList_P_rtbl_add_lemma_1a [lemma, in OSQPostPure]
TCBList_P_rtbl_add_simpl_version [lemma, in OSQPostPure]
TCBList_P_split_by_tcbls [lemma, in hoare_tactics]
TCBList_P_combine_copy [lemma, in hoare_tactics]
TCBList_P_impl_high_tcbcur_rdy' [lemma, in OSQPendPure]
TCBList_P_impl_high_tcbcur_rdy [lemma, in OSQPendPure]
tcblist_p_node_rl [lemma, in OSQPendPure]
TCBList_P_tcb_block_hold' [lemma, in OSQPendPure]
TCBList_P_tcb_block_hold'' [lemma, in OSQPendPure]
TCBList_P_tcb_block_hold [lemma, in OSQPendPure]
TCBList_P_tcb_get_msg_hold [lemma, in OSQPendPure]
TCBList_P_impl_high_tcbcur_Some' [lemma, in OSQPendPure]
TCBList_P_impl_high_tcbcur_Some [lemma, in OSQPendPure]
TCBList_P [definition, in OSTCBInvDef]
TCBList_P_tcb_block_hold_mutex [lemma, in OSMutexPendPure1]
TCBList_P_tcb_dly_hold' [lemma, in OSTimeDlyPure]
TCBList_P_tcb_dly_hold [lemma, in OSTimeDlyPure]
TCBList_P_post_sem [lemma, in sempost_pure]
TCBList_P_imp_RL [lemma, in OSTimeTickPure]
tcblist_p_imp_tcbnode_p [lemma, in OSTimeTickPure]
tcblist_p_tid_neq' [lemma, in OSTimeTickPure]
TCBList_P_not_in_remove_last [lemma, in OSTimeTickPure]
TCBList_P_imp_Prio_Not_In [lemma, in OSTimeTickPure]
TCBList_P_nth_prio [lemma, in OSTimeTickPure]
TCBList_P_in_list_get_some_mutex [lemma, in OSTimeTickPure]
TCBList_P_in_list_get_some_sem [lemma, in OSTimeTickPure]
TCBList_P_in_list_get_some_mbox [lemma, in OSTimeTickPure]
TCBList_P_in_list_get_some_q [lemma, in OSTimeTickPure]
tcblist_p_recombine [lemma, in OSTimeTickPure]
TCBList_P_combine [lemma, in OSTimeTickPure]
TCBList_P_split [lemma, in OSTimeTickPure]
TCBList_P_RL_TCBblk_P [lemma, in OSTimeTickPure]
tcblist_p_sub_eq [lemma, in mathlib]
tcblist_p_indom_eq [lemma, in mathlib]
TCBList_merge_prop [lemma, in mathlib]
TCBList_get_TCBNode_P [lemma, in mathlib]
TCBList_P_decompose [lemma, in mathlib]
TCBList_P_tcbmod_get [lemma, in mathlib]
TCBList_P_tcb_block_hold [lemma, in sempend_pure]
tcblist_p_node_rl_sem [lemma, in sempend_pure]
TCBList_P_post_msg_mbox [lemma, in Mbox_common]
TCBList_P_post_mbox [lemma, in Mbox_common]
TCBList_P_tcb_block_hold' [lemma, in Mbox_common]
TCBList_P_tcb_block_hold'' [lemma, in Mbox_common]
TCBList_P_tcb_block_hold [lemma, in Mbox_common]
TCBList_P_tcb_get_msg_hold [lemma, in Mbox_common]
TCBList_P_impl_high_tcbcur_rdy [lemma, in Mbox_common]
TCBList_P_impl_high_tcbcur_Some [lemma, in Mbox_common]
tcblist_p_node_rl_mbox [lemma, in Mbox_common]
tcbls_l_mutexpend [lemma, in OSMutex_common]
tcbls_rtbl_timetci_update [definition, in InternalFunSpec]
tcbls_rtbl_timetci_update_rl_rtbl_priotbl_p [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_rl_rtbl_priotbl_p' [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_len_eq [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_len_eq' [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_rgrp_vint [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_split [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_link [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_eq_next [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold'' [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold' [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_decompose [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_compose [lemma, in OSTimeTickPure]
tcbls_rtbl_timetci_update_get_ectr_eq [lemma, in OSTimeTickPure]
TcbMod [module, in language]
TcbMod_merge_emp_l [lemma, in lemmasforseplog]
TcbMod_disj_merge_eq [lemma, in lemmasforseplog]
tcbmod_join_ex [lemma, in progtaskstepLib]
tcbmod_join_sig_nex [lemma, in progtaskstepLib]
TcbMod_set_R_PrioTbl_P_hold [lemma, in OSQPendPure]
tcbmod_joinsig_get [lemma, in laby]
tcbmod_joinsig_get [lemma, in lab]
tcbmod_sub_joinsig_sub [lemma, in OSTimeTickPure]
tcbmod_set_neq_change [lemma, in OSTimeTickPure]
tcbmod_get_or [lemma, in mathlib]
TcbMod_join_impl_prio_neq_cur_r [lemma, in mathlib]
TcbMod_join_impl_prio_neq_cur_l [lemma, in mathlib]
tcbmod_neq_set_get [lemma, in mathlib]
TcbMod_set_R_PrioTbl_P_hold [lemma, in Mbox_common]
TCBNode_P_msg [lemma, in OSQGetMsgPure]
TCBNode_P_prio [lemma, in OSQPostPure]
TCBNode_P_rtbl_add [lemma, in OSQPostPure]
TCBNode_P [definition, in OSTCBInvDef]
TCBNode_P_change_next_ptr [lemma, in OSTimeTickPure]
tcbnode_rl_prop [lemma, in OSTimeTickPure]
tcbnode_rl_prop' [lemma, in OSTimeTickPure]
tcbset_indom_eq [lemma, in OSMutex_common]
tcbstats [inductive, in language]
tcb_join_join_merge [lemma, in OSMutex_common]
tcb_join_join_joinsig' [lemma, in OSEventTaskRdyPure]
tcb_join_join_joinsig [lemma, in OSEventTaskRdyPure]
tcb_get_ex_tcbjoin [lemma, in OSEventTaskRdyPure]
tcb_join_disj_get [lemma, in OSEventTaskRdyPure]
tcb_inrtbl_not_vhold [lemma, in OSMutexPostPure]
tcb_inrtbl_not_vhold [lemma, in sempost_pure]
tcb_neq_joinsig_tcbjoin_joinsig_minus [lemma, in OSTimeTickPure]
tcb_join_joinsig_ex_joinsig [lemma, in OSTimeTickPure]
tcb_minus_emp_eq [lemma, in OSTimeTickPure]
tcb_minus_mergesig_minus_minus_eq [lemma, in OSTimeTickPure]
tcb_joinsig_join_get_minus_eq [lemma, in OSTimeTickPure]
tcb_minus_self_emp [lemma, in OSTimeTickPure]
tcb_joinsig_get_sub_ex [lemma, in OSTimeTickPure]
tcb_domeq_joinsig_ex [lemma, in OSTimeTickPure]
tcb_eptr_get_ectr [lemma, in OSTimeTickPure]
tcb_eptr_get_ectr' [lemma, in OSTimeTickPure]
tcb_get_join [lemma, in mathlib]
tcb_get_set_neq_none [lemma, in PIF_aux]
tcb_inrtbl_not_vhold [lemma, in Mbox_common]
Tcom_ptr [constructor, in memdata]
temp [lemma, in OSIntExitPure]
temp' [lemma, in OSIntExitPure]
th_no_create_lift_ev [lemma, in progtaskstepLib]
th_free_lift [lemma, in progtaskstepLib]
th_no_create_lift [lemma, in progtaskstepLib]
th_ttop_lift [lemma, in progtaskstepLib]
tickchange [inductive, in absop]
tickchange_l [inductive, in InternalFunSpec]
tickchange_tcblist_p_hold_mid [lemma, in OSTimeTickPure]
tickchange_ecblist_p [lemma, in OSTimeTickPure]
tickchange_other_tcblist_p_hold [lemma, in OSTimeTickPure]
tickchange_other_tcbnode_p_hold [lemma, in OSTimeTickPure]
tickchange_other_tcbnode_p_hold' [lemma, in OSTimeTickPure]
tickchange_tcbnode_p_hold [lemma, in OSTimeTickPure]
tickchange_nodup [lemma, in OSTimeTickPure]
tickchange_exists [lemma, in OSTimeTickPure]
tickchange_shift [lemma, in OSTimeTickPure]
tickchange_eq_ostcbnext [lemma, in OSTimeTickPure]
tickchange_goodst [lemma, in PIF_aux]
tickchange_not_waiting [lemma, in PIF_aux]
tickchange_nonest_ct [lemma, in PIF_aux]
tickchange_eq_prio [lemma, in PIF_aux]
tickchange_exct [lemma, in PIF_aux]
tickchange_nonestpend [lemma, in PIF_aux]
tickchange_iswait [lemma, in PIF_aux]
tickchange_nonone [lemma, in PIF_aux]
tickchange_no_owner [lemma, in PIF_aux]
tickchange_highestrdy_rdy [lemma, in PIF_aux]
tickchange_getop_eq [lemma, in PIF_aux]
tickchange_els [lemma, in PIF_aux]
ticks [definition, in os_code_defs]
tickstep [definition, in absop]
tickstep_eqdomtls [lemma, in oscore_common]
tickstep_l [inductive, in InternalFunSpec]
tickstep_ecblist_p [lemma, in OSTimeTickPure]
tickstep_ecblist_p' [lemma, in OSTimeTickPure]
tickstep_decompose [lemma, in OSTimeTickPure]
tickstep_r_priotbl_p [lemma, in OSTimeTickPure]
tickstep_r_priotbl_p' [lemma, in OSTimeTickPure]
tickstep_rh_tcblist_ecblist_p [lemma, in OSTimeTickPure]
tickstep_rh_tcblist_ecblist_p' [lemma, in OSTimeTickPure]
tickstep_rh_curtcb [lemma, in OSTimeTickPure]
tickstep_rh_curtcb' [lemma, in OSTimeTickPure]
tickstep_exists [lemma, in OSTimeTickPure]
tickstep_exists' [lemma, in OSTimeTickPure]
tickstep_exists'' [lemma, in OSTimeTickPure]
tickstep_l_get_last_tcb_ptr_eq [lemma, in OSTimeTickPure]
tickstep_l_get_last_tcb_ptr_eq' [lemma, in OSTimeTickPure]
tickstep_goodst [lemma, in PIF_aux]
tickstep' [inductive, in absop]
tickstep'_other_get_eq [lemma, in OSTimeTickPure]
tick_rdy_ectr [definition, in InternalFunSpec]
tick_rdy_ectr' [definition, in InternalFunSpec]
tick_rdy_ectr_split [lemma, in OSTimeTickPure]
tick_rdy_ectr'_decompose [lemma, in OSTimeTickPure]
tick_fixpoint_convert_rev [lemma, in OSTimeTickPure]
tick_fixpoint_convert [lemma, in OSTimeTickPure]
tick_rdy_ectr_ignore [lemma, in OSTimeTickPure]
tick_rdy_ectr_imp' [lemma, in OSTimeTickPure]
tick_rdy_ectr_imp [lemma, in OSTimeTickPure]
tick_rdy_ectr_imp_x' [lemma, in OSTimeTickPure]
tick_rdy_ectr_imp_x [lemma, in OSTimeTickPure]
tick_rdy_ectr_get_ectr_eq [lemma, in OSTimeTickPure]
tid [definition, in language]
tidneq_inwt_in [lemma, in OSQPostPure]
tidsame [definition, in opsem]
tidsame_trans [lemma, in laby]
tidsame_set [lemma, in absop_rules]
tidsame_trans [lemma, in lab]
tidspec [module, in language]
tidspec.A [definition, in language]
tidspec.B [definition, in language]
tidspec.beq [definition, in language]
tidspec.beq_false_neq [lemma, in language]
tidspec.beq_true_eq [lemma, in language]
tidspec.blt [definition, in language]
tidspec.blt_beq_dec [lemma, in language]
tidspec.blt_asym [lemma, in language]
tidspec.blt_irrefl [lemma, in language]
tidspec.blt_trans [lemma, in language]
tidspec.eq_beq_true [lemma, in language]
tidspec.neq_beq_false [lemma, in language]
tid_in_rmwt_in [lemma, in OSQPostPure]
tid_eq_dec [lemma, in auxdef]
tid_blt_false [lemma, in OSTimeTickPure]
tid_beq_true [lemma, in OSTimeTickPure]
tid_a [definition, in PIF_aux]
timedly_idle [definition, in absop]
timedly_nop [definition, in absop]
timedly_succ [definition, in absop]
timedly_zero [definition, in absop]
timeget [definition, in absop]
TimeIntProof [library]
timeout [definition, in os_code_defs]
timetick [definition, in absop]
timetickisr_proof [lemma, in TimeIntProof]
timetick_spec [definition, in absop]
timetick_tcblist_p [lemma, in OSTimeTickPure]
timetick_tcblist_prop_hold [lemma, in OSTimeTickPure]
timetick_idle_in_rtbl [lemma, in OSTimeTickPure]
timetick_update_prop [lemma, in OSTimeTickPure]
timetick_weakpif [lemma, in PIF_aux]
TIME_OUT [definition, in absop]
Tint16 [constructor, in memdata]
Tint32 [constructor, in memdata]
Tint8 [constructor, in memdata]
tlmatch [definition, in opsem]
tlmatch_len_eq [lemma, in lmachLib]
tlmatch_dec' [lemma, in lemmasfortoptheo]
tlmatch_lengtheq [lemma, in tst_prop]
tlmatch_trans [lemma, in tst_prop]
tlmatch_trans'' [lemma, in tst_prop]
tlmatch_trans' [lemma, in tst_prop]
tlmatch_dec [lemma, in tst_prop]
Tlnewt [definition, in opsem]
tls_get_set_indom [lemma, in absop_rules]
tls_get_set [lemma, in tst_prop]
tl_vl_match [definition, in opsem]
tl_dl_vl_eq [lemma, in tst_prop]
tl_rev_eq [lemma, in tst_prop]
tl_vl_match_rev [lemma, in asrtLib]
tl_vl_dl'' [lemma, in asrtLib]
tl_vl_dl' [lemma, in asrtLib]
tl_vl_match_false_append [lemma, in asrtLib]
tl_vl_match_true_append [lemma, in asrtLib]
tl_vl_rev_match [lemma, in asrtLib]
tl_vl_match_leneq' [lemma, in asrtLib]
tl_vl_match_leneq [lemma, in asrtLib]
tl_vl_dl [lemma, in asrtLib]
tl_update [constructor, in InternalFunSpec]
tmdlycode [definition, in absop]
tmdly_sub_1 [definition, in InternalFunSpec]
tmgetapi [definition, in absop]
tmgetcode [definition, in absop]
TMinit [definition, in auxdef]
TMMap [definition, in auxdef]
tmp [lemma, in OSMutexPostPart2_2]
tmp2 [lemma, in OSMutexPostPart2_2]
TMSpecMod [module, in auxdef]
tm_mapsto_put' [lemma, in tst_prop]
tm_mapsto_put [lemma, in tst_prop]
Tnull [constructor, in memdata]
topis_nil [lemma, in common]
topis_0_imp [lemma, in common]
TopRule [inductive, in toprule]
toprule [library]
toptheorem [lemma, in lemmasfortoptheo]
toptheorem [library]
toptheorem' [lemma, in lemmasfortoptheo]
toptheorem'' [lemma, in lemmasfortoptheo]
top_rule [constructor, in toprule]
toyint [definition, in absop]
ToyIntProof [library]
ToyIntPure [library]
toyint_sti_inv_elim [lemma, in ToyIntPure]
toyint_spec [definition, in absop]
toyisr_proof [lemma, in ToyIntProof]
Tptr [constructor, in memdata]
transitive_lex_ord [lemma, in Coqlib]
TrueI [lemma, in lemmasforseplog]
trueTree [constructor, in seplog_tactics]
trueTree [constructor, in tacticsforseplog]
true_if_else_true [lemma, in mathlib]
tsimtopsim [lemma, in lemmasfortoptheo]
tstepev_osstepabt [lemma, in progtaskstepLib]
tstep_to_osstep [lemma, in progtaskstepLib]
tstep_alloc_nabt [lemma, in progtaskstepLib]
Tstruct [constructor, in memdata]
TStWoMemEq [definition, in auxdef]
TStWoMemEq_emple_tst_same [lemma, in progtaskstepLib]
tst_subs_disj_join [lemma, in tst_prop]
tst_wo_mem_eq_isremp_trans [lemma, in tst_prop]
tst_wo_mem_eq_trans [lemma, in tst_prop]
tst_wo_mem_eq_sym [lemma, in tst_prop]
tst_wo_mem_eq_subs_trans [lemma, in tst_prop]
tst_wo_mem_eq_subs_eq [lemma, in tst_prop]
tst_prop [library]
Tvoid [constructor, in memdata]
two_p_strict_2 [lemma, in Coqlib]
two_p_strict [lemma, in Coqlib]
two_p_monotone_strict [lemma, in Coqlib]
two_p_monotone [lemma, in Coqlib]
two_power_nat_two_p [lemma, in Coqlib]
two_power_nat_pos [lemma, in Coqlib]
two_power_nat_O [lemma, in Coqlib]
type [inductive, in memdata]
typecheck [definition, in assertion]
typechklist [definition, in assertion]
typelen [definition, in memdata]
typelist [definition, in language]
typematch [definition, in opsem]
typematch_mono [lemma, in lmachLib]
type_val_match [definition, in opsem]
type_val_match_comptr_elim [lemma, in type_val_match]
type_val_match_ptr_elim [lemma, in type_val_match]
type_val_match_int32u_elim [lemma, in type_val_match]
type_val_match_int16u_elim [lemma, in type_val_match]
type_val_match_int8u_elim [lemma, in type_val_match]
type_val_mach_encode_val_decode_val [lemma, in tst_prop]
type_encode_nnil [lemma, in common]
type_eq_true_eq [lemma, in aux_for_hoare_lemmas]
type_ind2 [definition, in aux_for_hoare_lemmas]
type_eq [definition, in aux_for_hoare_lemmas]
type_val_match [library]


U

ucert [library]
ucos_init [definition, in ucos_correctaux]
ucos_correct [lemma, in ucos_correct]
ucos_toprule_sat [lemma, in ucos_correct]
ucos_correctaux [library]
ucos_correct [library]
Unbounded_Priority_Inversion_Free_Proof [lemma, in ucos_correct]
Undef [constructor, in memdata]
unMapvallistint8u [lemma, in OSMutex_common]
unmap_inrtbl' [lemma, in OSEventTaskRdyPure]
unmap_inrtbl [lemma, in mathlib]
unmap_inrtbl' [lemma, in mathlib]
unroll_positive_rec [lemma, in Coqlib]
unsignedsimpllemma [lemma, in OSMutex_common]
unsigned_int_and_not_range [lemma, in OSEventTaskRdyPure]
unsigned_one [lemma, in IntLib]
unsigned_zero [lemma, in IntLib]
unsigned_inj [lemma, in IntLib]
unsigned_mone_val [lemma, in IntLib]
unsigned_to_z_eq [lemma, in mathlib]
unsigned_zero [lemma, in aux_for_hoare_lemmas]
unsigned_minus_le_max [lemma, in symbolic_execution]
unTree [definition, in seplog_tactics]
unTree [definition, in tacticsforseplog]
unTree_prop2 [lemma, in seplog_tactics]
unTree_prop1 [lemma, in seplog_tactics]
unTree_prop2 [lemma, in tacticsforseplog]
unTree_prop1 [lemma, in tacticsforseplog]
uop [inductive, in val]
uop_type [definition, in val]
uop_eval [definition, in val]
uop_rv [lemma, in symbolic_execution]
update_nth_val_op [definition, in BaseAsrtDef]
update_nth_val [definition, in BaseAsrtDef]
update_rtbl_tcblist_hold [lemma, in OSTimeDlyPure]
update_nth_ectrls [definition, in InternalFunSpec]
update_ectr [definition, in InternalFunSpec]
update_nth [definition, in InternalFunSpec]
update_nth_aux [lemma, in mathlib]
update_nth_val_length_eq [lemma, in mathlib]
update_nth_val_len_eq [lemma, in hoare_assign]
update_nth [lemma, in aux_for_hoare_lemmas]
update_nth [lemma, in symbolic_execution]
upd_last_prop [lemma, in OSMutex_common]
upd_last_ectrls_last [lemma, in OSEventRemovePure]
upd_last_prop [lemma, in semdel_pure]
upd_last_ectrls [definition, in InternalFunSpec]
upd_last_prop [lemma, in OSQDelPure]
upd_last_prop' [lemma, in mathlib]
upd_vallist_eq_length [lemma, in mathlib]
upd_last_prop [lemma, in Mbox_common]
UPIF [definition, in pif_theory]
up_val_op_ex [lemma, in aux_for_hoare_lemmas]


V

val [inductive, in memdata]
val [library]
valinjlemma1 [lemma, in OSMutex_common]
valinj_lemma2 [lemma, in OSMutex_common]
valinj_lemma1 [lemma, in OSMutex_common]
vallist [definition, in language]
vallistseg_n_m_split [lemma, in mathlib]
vallist_seg_upd_irr [lemma, in mathlib]
vallist_seg_upd_SM [lemma, in mathlib]
vallist_seg_length [lemma, in mathlib]
vallist_seg_length_prop [lemma, in mathlib]
vallist_pre_size_eq [lemma, in mathlib]
vallist_seg_upd_prop [lemma, in mathlib]
vallist_seg_prop_eq [lemma, in mathlib]
vallist_seg_ltunm_prop [lemma, in mathlib]
vallist_seg_n_m_split' [lemma, in mathlib]
vallist_seg_prop [lemma, in mathlib]
vallist_seg_Sn [lemma, in mathlib]
vallist_seg_eqnil [lemma, in mathlib]
vallist_destru [lemma, in mathlib]
vallist_seg [definition, in OSQInvDef]
vallist_pre [definition, in OSQInvDef]
vallist_post [definition, in OSQInvDef]
valspec [module, in memory]
valspec.B [definition, in memory]
val_inj_boolor_false [lemma, in OSQCreatePure]
val_inj2 [lemma, in OSMutex_common]
val_eq_lemma001 [lemma, in OSMutex_common]
val_eq_some_not_zero [lemma, in OSMutex_common]
val_inj_eq' [lemma, in OSMutex_common]
val_injsimpl [lemma, in OSMutex_common]
val_inj_or [lemma, in OSMutex_common]
val_inj_eq [lemma, in OSMutex_common]
val_inj_notint_vnull_false [lemma, in OSEventRemovePure]
val_inj_notint_zero_eq [lemma, in OSEventRemovePure]
val_beq_sym [lemma, in OSEventRemovePure]
val_beq_true [lemma, in OSEventRemovePure]
val_beq_true_eq [lemma, in OSEventRemovePure]
val_beq [definition, in OSEventRemovePure]
val_eq_true_eq [lemma, in OSEventRemovePure]
val_elem_neq_one [lemma, in OSTimeTickPure]
val_eq_zero_neq [lemma, in mathlib]
val_inj_eq_elim [lemma, in mathlib]
val_inj_eq_p [lemma, in mathlib]
val_inj_i1_i2_lt [lemma, in mathlib]
val_inj_eq_q [lemma, in mathlib]
val_eq_vundef' [lemma, in mathlib]
val_eq_vundef [lemma, in mathlib]
val_inj_122 [lemma, in mathlib]
val_inj_12' [lemma, in mathlib]
val_inj_12 [lemma, in mathlib]
val_inj_1 [lemma, in mathlib]
val_inj_impl_neq [lemma, in sem_lab]
val_inj_not_false [lemma, in sem_lab]
val_inj_not_true [lemma, in sem_lab]
val_inj_false [lemma, in sem_lab]
val_inj_true [lemma, in sem_lab]
val_eq [definition, in val]
val_inj_not_Vundef_2 [lemma, in sep_pure]
val_inj_impl_Vptr [lemma, in sep_pure]
val_inj_impl_Vnull [lemma, in sep_pure]
val_inj_impl_eq [lemma, in sep_pure]
val_inj_not_Vundef_1 [lemma, in sep_pure]
val_inj_lemma [lemma, in Mbox_common]
val_inj_eq [lemma, in Mbox_common]
val_inj [definition, in symbolic_execution]
var [definition, in memory]
var_notin_dom [definition, in symbolic_execution]
var_rv [lemma, in symbolic_execution]
verified_os' [lemma, in toptheorem]
vhold_not_get' [lemma, in OSMutex_common]
vhold_not_get [lemma, in OSMutex_common]
Vint32 [constructor, in memdata]
vl_app_v_h_t [lemma, in asrtLib]
vl_elem_neq [definition, in common]
vl_elem_neq_dec [lemma, in OSTimeTickPure]
Vnull [constructor, in memdata]
Vnull_is_ptr [lemma, in laby]
Vnull_is_ptr [lemma, in lab]
Vptr [constructor, in memdata]
vptr_inj_neq_Vundef [lemma, in sep_pure]
vtoZ [definition, in opsem]
Vundef [constructor, in memdata]
V_OSTCBMutexOwn [definition, in OSTCBInvDef]
V_OSTCBBitY [definition, in OSTCBInvDef]
V_OSTCBBitX [definition, in OSTCBInvDef]
V_OSTCBY [definition, in OSTCBInvDef]
V_OSTCBX [definition, in OSTCBInvDef]
V_OSTCBPrio [definition, in OSTCBInvDef]
V_OSTCBStat [definition, in OSTCBInvDef]
V_OSTCBDly [definition, in OSTCBInvDef]
V_OSTCBMsg [definition, in OSTCBInvDef]
V_OSTCBEventPtr [definition, in OSTCBInvDef]
V_OSTCBPrev [definition, in OSTCBInvDef]
V_OSTCBNext [definition, in OSTCBInvDef]
V_OSTCBEventPtr_change_next_ptr' [lemma, in OSTimeTickPure]
V_OSTCBStat_change_next_ptr' [lemma, in OSTimeTickPure]
V_OSTCBDly_change_next_ptr' [lemma, in OSTimeTickPure]
V_OSTCBPrio_change_next_ptr' [lemma, in OSTimeTickPure]
V_OSTCBDly_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBEventPtr_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBStat_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBBitY_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBBitX_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBY_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBX_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBPrio_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBMsg_change_next_ptr [lemma, in OSTimeTickPure]
V_OSTCBNext_set_tcb_next [lemma, in OSTimeTickPure]
V_qeventptr [definition, in OSQInvDef]
V_next [definition, in OSQInvDef]
V_nextblk [definition, in OSQInvDef]
V_qfreeblk [definition, in OSQInvDef]
V_OSQEntries [definition, in OSQInvDef]
V_OSQSize [definition, in OSQInvDef]
V_OSQOut [definition, in OSQInvDef]
V_OSQIn [definition, in OSQInvDef]
V_OSQEnd [definition, in OSQInvDef]
V_OSQStart [definition, in OSQInvDef]
V_OSQPtr [definition, in OSQInvDef]
V_OSEventListPtr [definition, in OSQInvDef]
V_OSEventPtr [definition, in OSQInvDef]
V_OSEventCnt [definition, in OSQInvDef]
V_OSEventGrp [definition, in OSQInvDef]
V_OSEventType [definition, in OSQInvDef]


W

wait [constructor, in language]
WaitChain [inductive, in pif_theory]
waite_rdy_change [constructor, in absop]
waite_change [constructor, in absop]
waite_rdy_change_l [constructor, in InternalFunSpec]
waitO [constructor, in pif_theory]
WaitRel [axiom, in pif_theory]
waitS [constructor, in pif_theory]
waitset [definition, in language]
WaitTCBblk [definition, in OSTCBInvDef]
WaitTCBblk_rtbl_add_rev [lemma, in OSQPostPure]
WaitTCBblk_rtbl_add [lemma, in OSQPostPure]
wait_S [constructor, in PIF_def]
wait_O [constructor, in PIF_def]
WAIT_CHAIN [inductive, in PIF_def]
WAIT_OWNER [definition, in PIF_def]
wait_rdy_change [constructor, in absop]
wait_change [constructor, in absop]
wait_rdy_change_l [constructor, in InternalFunSpec]
wait_change_l [constructor, in InternalFunSpec]
wait_prop [definition, in PIF_aux]
WEAK_PIF [definition, in PIF_aux]
WellClient [definition, in etraceref]
WellformedOSQ [definition, in OSQInvDef]
wellformedosq_ens_add_1 [lemma, in OSQPostPure]
wellformedosq_size_add_1 [lemma, in OSQPostPure]
wellq_in_props [lemma, in OSQPostPure]
wellq_props [lemma, in OSQAcceptPure]
WFAPI [definition, in toptheorem]
WFFuncsSim [definition, in simulation]
WFFuncsSim' [definition, in inferules]
WFFunEnv [definition, in inferules]
WFFunEnv_imply_Methsim' [lemma, in soundness]
WFFunEnv_imply_WFFuncsSim [lemma, in soundness]
WFIFun [definition, in toptheorem]
WFInt [definition, in toptheorem]
wf_lex_ord [lemma, in Coqlib]
whilesound [library]
while_rule'' [lemma, in OSEventRemovePure]
while_rule [constructor, in inferules]
while_rule' [lemma, in hoare_lemmas]
while_rule_sound [lemma, in whilesound]
while_sim_aux [lemma, in whilesound]
WLF_OSQ_prop [lemma, in OSQCreatePure]
WORDSIZE [module, in Integers]
Wordsize_64.wordsize_not_zero [lemma, in Integers]
Wordsize_64.wordsize [definition, in Integers]
Wordsize_64 [module, in Integers]
Wordsize_8.wordsize_not_zero [lemma, in Integers]
Wordsize_8.wordsize [definition, in Integers]
Wordsize_8 [module, in Integers]
Wordsize_16.wordsize_not_zero [lemma, in Integers]
Wordsize_16.wordsize [definition, in Integers]
Wordsize_16 [module, in Integers]
Wordsize_32.wordsize_not_zero [lemma, in Integers]
Wordsize_32.wordsize [definition, in Integers]
Wordsize_32 [module, in Integers]
WORDSIZE.wordsize [variable, in Integers]
WORDSIZE.wordsize_not_zero [axiom, in Integers]
wtset_notnil_msgls_nil [lemma, in OSQPostPure]


X

x [definition, in os_code_defs]
xmapis1shlx [lemma, in OSMutex_common]
xx [lemma, in OSIntExitPure]
xx [lemma, in ToyIntPure]
xx [lemma, in OSQPendPure]
xx [lemma, in oscore_common]
xx [lemma, in derivedrules]
xx [lemma, in mathlib]
xxx [lemma, in OSIntExitPure]
xxx [lemma, in ToyIntPure]
xxx [lemma, in oscore_common]
xxx [lemma, in tst_prop]
xxx [lemma, in derivedrules]
xxxx [lemma, in ToyIntPure]
xxxx [lemma, in oscore_common]
XXXX [lemma, in lemmasfortoptheo]
xxxxx [lemma, in oscore_common]
xxx' [lemma, in OSIntExitPure]
xx' [lemma, in ToyIntPure]
xx' [lemma, in OSQPendPure]


Y

y [definition, in os_code_defs]


Z

zadd_rm_tail [lemma, in IntLib]
zadd_rm_head [lemma, in IntLib]
Zdivides_trans [lemma, in Coqlib]
Zdivide_interval [lemma, in Coqlib]
Zdivide_dec [definition, in Coqlib]
Zdiv_interval_2 [lemma, in Coqlib]
Zdiv_interval_1 [lemma, in Coqlib]
Zdiv_Zdiv [lemma, in Coqlib]
Zdiv_unique [lemma, in Coqlib]
Zdiv_small [lemma, in Coqlib]
zdiv_range_le_le [lemma, in IntLib]
zdiv_range_le_lt [lemma, in IntLib]
zdiv_equiv [lemma, in IntLib]
zeq [definition, in Coqlib]
zeq_false [lemma, in Coqlib]
zeq_true [lemma, in Coqlib]
zh_asdf [lemma, in OSMutex_common]
zh_asdf1 [lemma, in OSMutex_common]
Zland_le_r [lemma, in OSMutex_common]
Zland_le_l [lemma, in OSMutex_common]
zle [definition, in Coqlib]
zle_false [lemma, in Coqlib]
zle_true [lemma, in Coqlib]
Zle_imply_natle [lemma, in asrtLib]
Zle_natle [lemma, in mathlib]
zlt [definition, in Coqlib]
zlt_false [lemma, in Coqlib]
zlt_true [lemma, in Coqlib]
Zmax_bound_r [lemma, in Coqlib]
Zmax_bound_l [lemma, in Coqlib]
Zmax_spec [lemma, in Coqlib]
Zmin_spec [lemma, in Coqlib]
Zmod_recombine [lemma, in Coqlib]
Zmod_unique [lemma, in Coqlib]
Zmod_small [lemma, in Coqlib]
Zmult_le_compat_l_neg [lemma, in Coqlib]
zof_nat_eq_zero_zero [lemma, in mathlib]
z_le_n_lt [lemma, in OSEventTaskRdyPure]
z_le_n_lt' [lemma, in OSEventTaskRdyPure]
Z_shiftl_16_range [lemma, in IntLib]
Z_lxor_range [lemma, in IntLib]
Z_lor_range [lemma, in IntLib]
Z_lor_range_hi [lemma, in IntLib]
Z_lor_range_lo [lemma, in IntLib]
Z_land_range [lemma, in IntLib]
Z_land_range_hi [lemma, in IntLib]
Z_land_range_lo_r [lemma, in IntLib]
Z_land_range_lo [lemma, in IntLib]
z_to_nat_shr3 [lemma, in OSTimeTickPure]
z_split [lemma, in mathlib]
z_le_255_imp_n [lemma, in mathlib]
z_le_7_imp_n [lemma, in mathlib]
Z_le_nat [lemma, in mathlib]
Z_prop [lemma, in mathlib]
Z2Nat_0 [lemma, in mathlib]


_

_mathsolver_ext.OSMapVallist_safe_deVint32 [lemma, in mathsolver]
_mathsolver_ext.OSUnMapVallist_safe_deVint32 [lemma, in mathsolver]
_mathsolver_ext.deref_Vint32_unsafe [definition, in mathsolver]
_mathsolver_ext [module, in mathsolver]
_mathsolver.sample2 [lemma, in mathsolver]
_mathsolver.sample1 [lemma, in mathsolver]
_mathsolver.sample0 [lemma, in mathsolver]
_mathsolver.sample'' [lemma, in mathsolver]
_mathsolver.repr_unsigned [lemma, in mathsolver]
_mathsolver.unsigned_ge2stdrange [lemma, in mathsolver]
_mathsolver.unsigned_gt2stdrange [lemma, in mathsolver]
_mathsolver.unsigned_le2stdrange [lemma, in mathsolver]
_mathsolver.unsigned_lt2stdrange [lemma, in mathsolver]
_mathsolver.nat_ge2stdrange [lemma, in mathsolver]
_mathsolver.nat_gt2stdrange [lemma, in mathsolver]
_mathsolver.nat_le2stdrange [lemma, in mathsolver]
_mathsolver.nat_lt2stdrange [lemma, in mathsolver]
_mathsolver.nat_range [module, in mathsolver]
_mathsolver.Z_range [module, in mathsolver]
_mathsolver.nat_has_dist.dist_a [lemma, in mathsolver]
_mathsolver.nat_has_dist.dist_a' [lemma, in mathsolver]
_mathsolver.nat_has_dist.dist [definition, in mathsolver]
_mathsolver.nat_has_dist [module, in mathsolver]
_mathsolver.nat_has_next.next_is_smallest [lemma, in mathsolver]
_mathsolver.nat_has_next.next [definition, in mathsolver]
_mathsolver.nat_has_next [module, in mathsolver]
_mathsolver.nat_has_le.le_trans [definition, in mathsolver]
_mathsolver.nat_has_le.le_antisymm [definition, in mathsolver]
_mathsolver.nat_has_le.le_refl [definition, in mathsolver]
_mathsolver.nat_has_le.le [definition, in mathsolver]
_mathsolver.nat_has_le.A [definition, in mathsolver]
_mathsolver.nat_has_le [module, in mathsolver]
_mathsolver.Z_has_dist.dist_a [lemma, in mathsolver]
_mathsolver.Z_has_dist.dist_a' [lemma, in mathsolver]
_mathsolver.Z_has_dist.dist [definition, in mathsolver]
_mathsolver.Z_has_dist [module, in mathsolver]
_mathsolver.Z_has_next.next_is_smallest [lemma, in mathsolver]
_mathsolver.Z_has_next.next [definition, in mathsolver]
_mathsolver.Z_has_next [module, in mathsolver]
_mathsolver.Z_has_le.le_trans [definition, in mathsolver]
_mathsolver.Z_has_le.le_antisymm [definition, in mathsolver]
_mathsolver.Z_has_le.le_refl [definition, in mathsolver]
_mathsolver.Z_has_le.le [definition, in mathsolver]
_mathsolver.Z_has_le.A [definition, in mathsolver]
_mathsolver.Z_has_le [module, in mathsolver]
_mathsolver.Range.range_fin_elem2 [lemma, in mathsolver]
_mathsolver.Range.range_fin_elem2'' [lemma, in mathsolver]
_mathsolver.Range.range_fin_elem2' [lemma, in mathsolver]
_mathsolver.Range.range_split_last [lemma, in mathsolver]
_mathsolver.Range.iter_n_lt_lt [lemma, in mathsolver]
_mathsolver.Range.range_split_last' [lemma, in mathsolver]
_mathsolver.Range.range_split_last'' [lemma, in mathsolver]
_mathsolver.Range.range_l_r_fin_elem [lemma, in mathsolver]
_mathsolver.Range.range_fin_elem [lemma, in mathsolver]
_mathsolver.Range.gen_prop' [definition, in mathsolver]
_mathsolver.Range.gen_prop [definition, in mathsolver]
_mathsolver.Range.range_eq [lemma, in mathsolver]
_mathsolver.Range.range_split_first [lemma, in mathsolver]
_mathsolver.Range.range_split_first'' [lemma, in mathsolver]
_mathsolver.Range.range_split_first' [lemma, in mathsolver]
_mathsolver.Range.range_l_r [lemma, in mathsolver]
_mathsolver.Range.x_le_iter_next [lemma, in mathsolver]
_mathsolver.Range.x_le_next [lemma, in mathsolver]
_mathsolver.Range.range [definition, in mathsolver]
_mathsolver.Range [module, in mathsolver]
_mathsolver.has_dist.dist_a [axiom, in mathsolver]
_mathsolver.has_dist.dist [axiom, in mathsolver]
_mathsolver.has_dist [module, in mathsolver]
_mathsolver.has_next.next_is_smallest [axiom, in mathsolver]
_mathsolver.has_next.next [axiom, in mathsolver]
_mathsolver.has_next [module, in mathsolver]
_mathsolver.has_le.le_trans [axiom, in mathsolver]
_mathsolver.has_le.le_antisymm [axiom, in mathsolver]
_mathsolver.has_le.le_refl [axiom, in mathsolver]
_mathsolver.has_le.le [axiom, in mathsolver]
_mathsolver.has_le.A [axiom, in mathsolver]
_mathsolver.has_le [module, in mathsolver]
_mathsolver._iter [definition, in mathsolver]
_mathsolver [module, in mathsolver]


other

_ · _ ·( _ )· ·{ _ ; _ }· (code_scope) [notation, in os_code_notations]
∘ _ (code_scope) [notation, in os_code_notations]
Skip (code_scope) [notation, in os_code_notations]
CTrue (code_scope) [notation, in os_code_notations]
CFalse (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ; _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ _ @ _ ⌟ (code_scope) [notation, in os_code_notations]
⌞ ⌟ (code_scope) [notation, in os_code_notations]
STRUCT _ ⋆ (code_scope) [notation, in os_code_notations]
STRUCT _ ­{ _ }­ (code_scope) [notation, in os_code_notations]
_ ∗ (code_scope) [notation, in os_code_notations]
Ptr (code_scope) [notation, in os_code_notations]
Int32u (code_scope) [notation, in os_code_notations]
Int32 (code_scope) [notation, in os_code_notations]
Int16u (code_scope) [notation, in os_code_notations]
Int8u (code_scope) [notation, in os_code_notations]
Void (code_scope) [notation, in os_code_notations]
_ <- CHECKIS (code_scope) [notation, in os_code_notations]
STI (code_scope) [notation, in os_code_notations]
CLI (code_scope) [notation, in os_code_notations]
ENTER_CRITICAL (code_scope) [notation, in os_code_notations]
EXIT_CRITICAL (code_scope) [notation, in os_code_notations]
EOI ( _ ) (code_scope) [notation, in os_code_notations]
SWITCH (code_scope) [notation, in os_code_notations]
IRET (code_scope) [notation, in os_code_notations]
printf _ (code_scope) [notation, in os_code_notations]
_ ;ₛ _ (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ , _ , _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ , _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ , _ , _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ , _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (· _ ·) (code_scope) [notation, in os_code_notations]
_ =ᶠ _ (·) (code_scope) [notation, in os_code_notations]
_ (­ _ , _ , _ , _ , _ , _ ­) (code_scope) [notation, in os_code_notations]
_ (­ _ , _ , _ , _ , _ ­) (code_scope) [notation, in os_code_notations]
_ (­ _ , _ , _ , _ ­) (code_scope) [notation, in os_code_notations]
_ (­ _ , _ , _ ­) (code_scope) [notation, in os_code_notations]
_ (- _ , _ -) (code_scope) [notation, in os_code_notations]
_ (­ _ ­) (code_scope) [notation, in os_code_notations]
_ (­) (code_scope) [notation, in os_code_notations]
RETURN _ (code_scope) [notation, in os_code_notations]
RETURN (code_scope) [notation, in os_code_notations]
WHILE ( _ ) { _ } (code_scope) [notation, in os_code_notations]
If ( _ ) { _ } (code_scope) [notation, in os_code_notations]
IF ( _ ) { _ } ELSE { _ } (code_scope) [notation, in os_code_notations]
_ &= _ (code_scope) [notation, in os_code_notations]
_ =ₑ _ (code_scope) [notation, in os_code_notations]
_ ≥ _ (code_scope) [notation, in os_code_notations]
_ >ₑ _ (code_scope) [notation, in os_code_notations]
_ <ₑ _ (code_scope) [notation, in os_code_notations]
_ !=ₑ _ (code_scope) [notation, in os_code_notations]
_ ==ₑ _ (code_scope) [notation, in os_code_notations]
_ |ₑ _ (code_scope) [notation, in os_code_notations]
_ &ₑ _ (code_scope) [notation, in os_code_notations]
_ ||ₑ _ (code_scope) [notation, in os_code_notations]
_ &&ₑ _ (code_scope) [notation, in os_code_notations]
_ ≫ _ (code_scope) [notation, in os_code_notations]
_ ≪ _ (code_scope) [notation, in os_code_notations]
_ ÷ _ (code_scope) [notation, in os_code_notations]
_ × _ (code_scope) [notation, in os_code_notations]
−− _ (code_scope) [notation, in os_code_notations]
++ _ (code_scope) [notation, in os_code_notations]
_ +ₑ _ (code_scope) [notation, in os_code_notations]
_ − _ (code_scope) [notation, in os_code_notations]
∼ _ (code_scope) [notation, in os_code_notations]
_ → _ (code_scope) [notation, in os_code_notations]
_ [ _ ] (code_scope) [notation, in os_code_notations]
〈 _ 〉 _ (code_scope) [notation, in os_code_notations]
&ₐ _ (code_scope) [notation, in os_code_notations]
∗ _ (code_scope) [notation, in os_code_notations]
_ ′ (code_scope) [notation, in os_code_notations]
′ _ (code_scope) [notation, in os_code_notations]
NULL (code_scope) [notation, in os_code_notations]
_ ↝ { _ } (code_scope) [notation, in os_cpu_a]
_ & _ (int_scope) [notation, in BaseAsrtDef]
_ >>ᵢ _ (int_scope) [notation, in BaseAsrtDef]
_ << _ (int_scope) [notation, in BaseAsrtDef]
_ -ᵢ _ (int_scope) [notation, in BaseAsrtDef]
_ +ᵢ _ (int_scope) [notation, in BaseAsrtDef]
V$ _ (int_scope) [notation, in BaseAsrtDef]
$ _ (int_scope) [notation, in BaseAsrtDef]
>> _ _ _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ _ (ltac_scope) [notation, in LibTactics]
>> _ _ (ltac_scope) [notation, in LibTactics]
>> _ (ltac_scope) [notation, in LibTactics]
>> (ltac_scope) [notation, in LibTactics]
___ (ltac_scope) [notation, in LibTactics]
__ (ltac_scope) [notation, in LibTactics]
exists _ _ _ _ _ _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ _ , _ (type_scope) [notation, in LibTactics]
exists _ _ , _ (type_scope) [notation, in LibTactics]
exists _ , _ (type_scope) [notation, in LibTactics]
( _ , _ , .. , _ ) (t_type_scope) [notation, in Coqlib]
_ <==> _ [notation, in assertion]
_ ==> _ [notation, in assertion]
_ |= _ [notation, in assertion]
_ # _ |-> _ [notation, in assertion]
_ \\// _ [notation, in assertion]
_ //\\ _ [notation, in assertion]
_ ** _ [notation, in assertion]
_ ## _ [notation, in opsem]
_ ?? _ [notation, in language]
_ ;; _ [notation, in language]
_ (| _ |) [notation, in language]
_ =' _ [notation, in LibTactics]
ASSUME _ [notation, in language]
END _ [notation, in language]
EX _ .. _ , _ [notation, in assertion]
EX _ : _ , _ [notation, in assertion]
EX _ , _ [notation, in assertion]
GV _ @ _ |-> _ [notation, in assertion]
G& _ @ _ == _ [notation, in assertion]
LV _ @ _ |-> _ [notation, in assertion]
Lv _ @ _ == _ [notation, in assertion]
L& _ @ _ == _ [notation, in assertion]
nosimpl _ [notation, in LibTactics]
OS [ _ , _ , _ , _ ] [notation, in assertion]
POST [ _ , _ , _ , _ ] [notation, in assertion]
PRE [ _ , _ , _ ] [notation, in assertion]
PV _ @ _ |-> _ [notation, in assertion]
Register _ _ [notation, in LibTactics]
Rvl _ @ _ == _ [notation, in assertion]
Rv _ @ _ == _ [notation, in assertion]
SKIP [notation, in language]
Something [notation, in LibTactics]
<| _ |> [notation, in assertion]
<|| _ ||> [notation, in assertion]
[ _ ] [notation, in language]
[ _ , _ , _ , _ , _ , _ ] |= {{ _ }} _ {{ _ }} [notation, in simulation]
[| _ |] [notation, in assertion]
{[ _ , _ , _ , _ , _ , _ ]} ||- ( _ , _ ) <_msim ( _ , _ ) [notation, in simulation]
{[ _ , _ , _ , _ , _ , _ ]} ||- ( _ , _ ) <_msim ( _ , _ ) [notation, in simulation]
{{[ _ , _ , _ , _ , _ , _ ]}} ||- ( _ , _ ) <_msim ( _ , _ ) [notation, in auxdef]
{| _ , _ , _ , _ , _ |} |- {{ _ }} _ {{ _ }} [notation, in inferules]
⊢ _ ⇒ _ [notation, in inferules]


Notation Index

other

_ · _ ·( _ )· ·{ _ ; _ }· (code_scope) [in os_code_notations]
∘ _ (code_scope) [in os_code_notations]
Skip (code_scope) [in os_code_notations]
CTrue (code_scope) [in os_code_notations]
CFalse (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ; _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ _ @ _ ⌟ (code_scope) [in os_code_notations]
⌞ ⌟ (code_scope) [in os_code_notations]
STRUCT _ ⋆ (code_scope) [in os_code_notations]
STRUCT _ ­{ _ }­ (code_scope) [in os_code_notations]
_ ∗ (code_scope) [in os_code_notations]
Ptr (code_scope) [in os_code_notations]
Int32u (code_scope) [in os_code_notations]
Int32 (code_scope) [in os_code_notations]
Int16u (code_scope) [in os_code_notations]
Int8u (code_scope) [in os_code_notations]
Void (code_scope) [in os_code_notations]
_ <- CHECKIS (code_scope) [in os_code_notations]
STI (code_scope) [in os_code_notations]
CLI (code_scope) [in os_code_notations]
ENTER_CRITICAL (code_scope) [in os_code_notations]
EXIT_CRITICAL (code_scope) [in os_code_notations]
EOI ( _ ) (code_scope) [in os_code_notations]
SWITCH (code_scope) [in os_code_notations]
IRET (code_scope) [in os_code_notations]
printf _ (code_scope) [in os_code_notations]
_ ;ₛ _ (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ , _ , _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ , _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ , _ , _ , _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ , _ , _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ , _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (· _ ·) (code_scope) [in os_code_notations]
_ =ᶠ _ (·) (code_scope) [in os_code_notations]
_ (­ _ , _ , _ , _ , _ , _ ­) (code_scope) [in os_code_notations]
_ (­ _ , _ , _ , _ , _ ­) (code_scope) [in os_code_notations]
_ (­ _ , _ , _ , _ ­) (code_scope) [in os_code_notations]
_ (­ _ , _ , _ ­) (code_scope) [in os_code_notations]
_ (- _ , _ -) (code_scope) [in os_code_notations]
_ (­ _ ­) (code_scope) [in os_code_notations]
_ (­) (code_scope) [in os_code_notations]
RETURN _ (code_scope) [in os_code_notations]
RETURN (code_scope) [in os_code_notations]
WHILE ( _ ) { _ } (code_scope) [in os_code_notations]
If ( _ ) { _ } (code_scope) [in os_code_notations]
IF ( _ ) { _ } ELSE { _ } (code_scope) [in os_code_notations]
_ &= _ (code_scope) [in os_code_notations]
_ =ₑ _ (code_scope) [in os_code_notations]
_ ≥ _ (code_scope) [in os_code_notations]
_ >ₑ _ (code_scope) [in os_code_notations]
_ <ₑ _ (code_scope) [in os_code_notations]
_ !=ₑ _ (code_scope) [in os_code_notations]
_ ==ₑ _ (code_scope) [in os_code_notations]
_ |ₑ _ (code_scope) [in os_code_notations]
_ &ₑ _ (code_scope) [in os_code_notations]
_ ||ₑ _ (code_scope) [in os_code_notations]
_ &&ₑ _ (code_scope) [in os_code_notations]
_ ≫ _ (code_scope) [in os_code_notations]
_ ≪ _ (code_scope) [in os_code_notations]
_ ÷ _ (code_scope) [in os_code_notations]
_ × _ (code_scope) [in os_code_notations]
−− _ (code_scope) [in os_code_notations]
++ _ (code_scope) [in os_code_notations]
_ +ₑ _ (code_scope) [in os_code_notations]
_ − _ (code_scope) [in os_code_notations]
∼ _ (code_scope) [in os_code_notations]
_ → _ (code_scope) [in os_code_notations]
_ [ _ ] (code_scope) [in os_code_notations]
〈 _ 〉 _ (code_scope) [in os_code_notations]
&ₐ _ (code_scope) [in os_code_notations]
∗ _ (code_scope) [in os_code_notations]
_ ′ (code_scope) [in os_code_notations]
′ _ (code_scope) [in os_code_notations]
NULL (code_scope) [in os_code_notations]
_ ↝ { _ } (code_scope) [in os_cpu_a]
_ & _ (int_scope) [in BaseAsrtDef]
_ >>ᵢ _ (int_scope) [in BaseAsrtDef]
_ << _ (int_scope) [in BaseAsrtDef]
_ -ᵢ _ (int_scope) [in BaseAsrtDef]
_ +ᵢ _ (int_scope) [in BaseAsrtDef]
V$ _ (int_scope) [in BaseAsrtDef]
$ _ (int_scope) [in BaseAsrtDef]
>> _ _ _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ _ (ltac_scope) [in LibTactics]
>> _ _ _ (ltac_scope) [in LibTactics]
>> _ _ (ltac_scope) [in LibTactics]
>> _ (ltac_scope) [in LibTactics]
>> (ltac_scope) [in LibTactics]
___ (ltac_scope) [in LibTactics]
__ (ltac_scope) [in LibTactics]
exists _ _ _ _ _ _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ _ , _ (type_scope) [in LibTactics]
exists _ _ , _ (type_scope) [in LibTactics]
exists _ , _ (type_scope) [in LibTactics]
( _ , _ , .. , _ ) (t_type_scope) [in Coqlib]
_ <==> _ [in assertion]
_ ==> _ [in assertion]
_ |= _ [in assertion]
_ # _ |-> _ [in assertion]
_ \\// _ [in assertion]
_ //\\ _ [in assertion]
_ ** _ [in assertion]
_ ## _ [in opsem]
_ ?? _ [in language]
_ ;; _ [in language]
_ (| _ |) [in language]
_ =' _ [in LibTactics]
ASSUME _ [in language]
END _ [in language]
EX _ .. _ , _ [in assertion]
EX _ : _ , _ [in assertion]
EX _ , _ [in assertion]
GV _ @ _ |-> _ [in assertion]
G& _ @ _ == _ [in assertion]
LV _ @ _ |-> _ [in assertion]
Lv _ @ _ == _ [in assertion]
L& _ @ _ == _ [in assertion]
nosimpl _ [in LibTactics]
OS [ _ , _ , _ , _ ] [in assertion]
POST [ _ , _ , _ , _ ] [in assertion]
PRE [ _ , _ , _ ] [in assertion]
PV _ @ _ |-> _ [in assertion]
Register _ _ [in LibTactics]
Rvl _ @ _ == _ [in assertion]
Rv _ @ _ == _ [in assertion]
SKIP [in language]
Something [in LibTactics]
<| _ |> [in assertion]
<|| _ ||> [in assertion]
[ _ ] [in language]
[ _ , _ , _ , _ , _ , _ ] |= {{ _ }} _ {{ _ }} [in simulation]
[| _ |] [in assertion]
{[ _ , _ , _ , _ , _ , _ ]} ||- ( _ , _ ) <_msim ( _ , _ ) [in simulation]
{[ _ , _ , _ , _ , _ , _ ]} ||- ( _ , _ ) <_msim ( _ , _ ) [in simulation]
{{[ _ , _ , _ , _ , _ , _ ]}} ||- ( _ , _ ) <_msim ( _ , _ ) [in auxdef]
{| _ , _ , _ , _ , _ |} |- {{ _ }} _ {{ _ }} [in inferules]
⊢ _ ⇒ _ [in inferules]


Module Index

A

absdataidspec [in language]
absdatastru [in language]
absecb [in language]
absmsgq [in language]
abssem [in language]
abstcb [in language]
addrspec [in memory]
addrtypespec [in memory]


B

blocktypespec [in memory]
Byte [in Integers]


C

CltEnvMod [in language]
CodeSpec [in language]


E

EcbMod [in language]
EnvMod [in memory]
EnvSpec [in language]


H

ht [in mathlib]


I

identspec [in memory]
Int [in Integers]
Int16 [in Integers]
Int64 [in Integers]


K

kz [in mathlib]


L

LibTacticsCompatibility [in LibTactics]
LocalStSpec [in language]


M

Make [in Integers]
MapFun [in Map]
MapFun [in MapLib]
MapSpec [in Map]
MAP_RANGE [in MapLib]
MAP_DOMAIN [in MapLib]
MemMod [in memory]
mmapspec [in auxdef]
MsgqMod [in language]


N

new_rtbl [in OSQPostPure]


O

OSAbstMod [in language]


S

SemMod [in language]


T

TaskLStMod [in language]
TasksMod [in language]
TcbMod [in language]
tidspec [in language]
TMSpecMod [in auxdef]


V

valspec [in memory]


W

WORDSIZE [in Integers]
Wordsize_64 [in Integers]
Wordsize_8 [in Integers]
Wordsize_16 [in Integers]
Wordsize_32 [in Integers]


_

_mathsolver_ext [in mathsolver]
_mathsolver.nat_range [in mathsolver]
_mathsolver.Z_range [in mathsolver]
_mathsolver.nat_has_dist [in mathsolver]
_mathsolver.nat_has_next [in mathsolver]
_mathsolver.nat_has_le [in mathsolver]
_mathsolver.Z_has_dist [in mathsolver]
_mathsolver.Z_has_next [in mathsolver]
_mathsolver.Z_has_le [in mathsolver]
_mathsolver.Range [in mathsolver]
_mathsolver.has_dist [in mathsolver]
_mathsolver.has_next [in mathsolver]
_mathsolver.has_le [in mathsolver]
_mathsolver [in mathsolver]


Variable Index

D

DECIDABLE_PREDICATE.A [in Coqlib]
DECIDABLE_PREDICATE.dec [in Coqlib]
DECIDABLE_PREDICATE.P [in Coqlib]
DECIDABLE_EQUALITY.B [in Coqlib]
DECIDABLE_EQUALITY.dec_eq [in Coqlib]
DECIDABLE_EQUALITY.A [in Coqlib]


E

equatesLemma.A0 [in LibTactics]
equatesLemma.A1 [in LibTactics]
equatesLemma.A2 [in LibTactics]
equatesLemma.A3 [in LibTactics]
equatesLemma.A4 [in LibTactics]
equatesLemma.A5 [in LibTactics]
equatesLemma.A6 [in LibTactics]


F

FORALL2.A [in Coqlib]
FORALL2.B [in Coqlib]
FORALL2.P [in Coqlib]


L

LEX_ORDER.ordB [in Coqlib]
LEX_ORDER.ordA [in Coqlib]
LEX_ORDER.B [in Coqlib]
LEX_ORDER.A [in Coqlib]
LIST_FOLD.f [in Coqlib]
LIST_FOLD.B [in Coqlib]
LIST_FOLD.A [in Coqlib]


M

Make.EQ_MODULO.modul_pos [in Integers]
Make.EQ_MODULO.modul [in Integers]
MapFun.Test.a [in MapLib]
MapFun.Test.a' [in MapLib]
MapFun.Test.b [in MapLib]


P

POSITIVE_ITERATION.iter [in Coqlib]
POSITIVE_ITERATION.f [in Coqlib]
POSITIVE_ITERATION.v1 [in Coqlib]
POSITIVE_ITERATION.A [in Coqlib]


S

skip_axiom [in LibTactics]


W

WORDSIZE.wordsize [in Integers]


Library Index

A

absop
absop_rules
asrtLib
assertion
assignsound
auxdef
aux_for_hoare_lemmas


B

BaseAsrtDef
baseTac


C

cancel_absdata
can_change_aop_proof
chkissound
clistisound
common
conseqsound
contLib
Coqlib
crtsound
cstepLib


D

derivedrules


E

eoisound
etraceref
extac


F

fcallsound
framesound
funsim


G

gen_lemmas


H

hoare_tactics
hoare_lemmas
hoare_conseq
hoare_assign


I

ifsound
include
includeLib
inferules
init_spec
IntBool
Integers
InternalFunSpec
IntExitProof
IntLib
inv_prop


J

joinmemLib


L

lab
laby
language
lemmasforseplog
lemmasfortoptheo
LibTactics
lmachLib
loststepLib


M

Map
MapLib
mathlib
mathlib_join
mathsolver
MboxAcceptProof
MboxCreateProof
MboxCreatePure
MboxDelProof
MboxPendPart2
MboxPendProof
MboxPostProof
Mbox_common
memdata
memory
methsimlift


O

opsem
oscore_common
OSESearchPure
OSETWaitPure
OSEventRemoveProof
OSEventRemovePure
OSEventSearchProof
OSEventTaskRdy
OSEventTaskRdyPure
OSEventTaskWait
OSEventWaitListInitProof
OSIntExitPure
OSMutexAcceptProof
OSMutexCreateProof
OSMutexDelProof
OSMutexPendPart1
OSMutexPendPart2
OSMutexPendPart3
OSMutexPendPart4
OSMutexPendPart5
OSMutexPendProof
OSMutexPendPure1
OSMutexPostPart2
OSMutexPostPart2_1
OSMutexPostPart2_2
OSMutexPostPart2_0
OSMutexPostPart3
OSMutexPostPart3_3_3a
OSMutexPostPart3_3_5
OSMutexPostPart3_3_3
OSMutexPostPart3_3_5a
OSMutexPostPart3_3_1
OSMutexPostPart3_3
OSMutexPostPart3_3_1a
OSMutexPostPart3_3_0
OSMutexPostPart30
OSMutexPostProof
OSMutexPostPure
OSMutex_common
OSQAcceptProof
OSQAcceptPure
OSQCreateProof
OSQCreatePure
OSQDelProof
OSQDelPure
OSQGetMsgProof
OSQGetMsgPure
OSQInvDef
OSQPendProof
OSQPendPure
OSQPostProof
OSQPostPure
OSSchedProof
OSSemAcceptProof
OSSemCreateProof
OSSemDeleteProof
OSSemPendProof
OSSemPostProof
OSTCBInvDef
OSTimeDlyProof
OSTimeDlyPure
OSTimeGetProof
OSTimeTickProof
OSTimeTickPure
os_ucos_h
os_core
os_code_defs
os_mutex
os_spec
os_code_notations
os_mbox
os_sem
os_q
os_cpu_a
os_program
os_time


P

pif_theory
PIF_aux
PIF_def
progtaskstepLib


R

retsound
ruleLib
rulesound


S

semacc_pure
semdel_pure
sempend_pure
sempost_pure
sem_absop_rule
sem_lab
sem_common
seplog_tactics
seplog_lemmas
sep_pure
seqcomsound
simplrulesound
simulation
soundness
switchsound
symbolic_execution


T

tacticsforseplog
TimeIntProof
toprule
toptheorem
ToyIntProof
ToyIntPure
tst_prop
type_val_match


U

ucert
ucos_correctaux
ucos_correct


V

val


W

whilesound


Lemma Index

A

Aabsdata_precise [in inv_prop]
Aarray_vl_len_eq' [in common]
Aarray_vl_len_eq [in common]
Aarray_osabst_emp [in inv_prop]
Aarray_precise [in inv_prop]
Aarray'_osabst_emp [in inv_prop]
Aarray'_precise [in inv_prop]
absconseq_rule_sound_aux [in conseqsound]
abscsq_rule_sound [in conseqsound]
abscsq_rule'' [in derivedrules]
abscsq_rule' [in derivedrules]
absdataidspec.beq_false_neq [in language]
absdataidspec.beq_true_eq [in language]
absdataidspec.blt_beq_dec [in language]
absdataidspec.blt_asym [in language]
absdataidspec.blt_irrefl [in language]
absdataidspec.blt_trans [in language]
absdataidspec.eq_beq_true [in language]
absdataidspec.neq_beq_false [in language]
absdata_elim'' [in seplog_lemmas]
absdata_elim' [in seplog_lemmas]
absdata_elim [in seplog_lemmas]
absimp_qcre_succ_return [in OSQCreatePure]
absimp_qcre_err_return [in OSQCreatePure]
absimp_imp [in conseqsound]
absimp_toy [in oscore_common]
absimp_timetick [in oscore_common]
absimp_sem_post_ex_wt_succ_return [in sem_absop_rule]
absimp_sem_post_put_sem_return [in sem_absop_rule]
absimp_sem_post_ovf_err_return [in sem_absop_rule]
absimp_sem_post_wrong_type_return [in sem_absop_rule]
absimp_sem_post_p_not_legal_return [in sem_absop_rule]
absimp_sem_post_null_return [in sem_absop_rule]
absimp_ex_intro [in common]
absimp_pre_post_compose [in common]
absimp_conseq_post [in common]
absimp_conseq_pre [in common]
absimp_pre_compose [in common]
absimp_mbox_create_succ_return [in MboxCreatePure]
absimp_mbox_create_err_return [in MboxCreatePure]
absimp'_imp_absimp [in cancel_absdata]
absinfersound [in conseqsound]
absinfer_mutexpost_return_nowt_succ [in OSMutex_common]
absinfer_mutexpost_nowt_no_return_prio_succ [in OSMutex_common]
absinfer_mutexpost_exwt_no_return_prio_succ [in OSMutex_common]
absinfer_mutexpost_noreturn_exwt_succ [in OSMutex_common]
absinfer_mutexpost_return_exwt_succ [in OSMutex_common]
absinfer_mutex_pend_pip_is_not_hold [in OSMutex_common]
absinfer_mutex_pend_cur_prio_eql_mprio [in OSMutex_common]
absinfer_mutex_pend_ptcb_is_not_rdy [in OSMutex_common]
absinfer_mutex_pend_ptcb_is_idle [in OSMutex_common]
absinfer_mutex_pend_ptcb_is_cur [in OSMutex_common]
absinfer_mutex_post_original_not_holder_err_return [in OSMutex_common]
absinfer_mutex_post_wl_highest_prio_err_return [in OSMutex_common]
absinfer_mutex_post_prio_err_return [in OSMutex_common]
absinfer_mutex_post_no_owner_return [in OSMutex_common]
absinfer_mutex_post_wrong_type_return [in OSMutex_common]
absinfer_mutex_post_p_not_legal_return [in OSMutex_common]
absinfer_mutex_post_null_return [in OSMutex_common]
absinfer_mutex_pend_msg_not_null_return [in OSMutex_common]
absinfer_mutex_pend_not_ready_return [in OSMutex_common]
absinfer_mutex_pend_from_idle_return [in OSMutex_common]
absinfer_mutex_pend_wrong_type_return [in OSMutex_common]
absinfer_mbox_pend_p_not_legal_return [in OSMutex_common]
absinfer_mutex_pend_null_return [in OSMutex_common]
absinfer_mutex_pend_available_return [in OSMutex_common]
absinfer_mutex_pend_cur_prio_higher [in OSMutex_common]
absinfer_tri_choice1 [in laby]
absinfer_tri_choice2 [in laby]
absinfer_sem_pend_to_succ [in sem_absop_rule]
absinfer_sem_pend_to_timeout [in sem_absop_rule]
absinfer_sem_pend_block [in sem_absop_rule]
absinfer_sem_pend_msg_not_null_return [in sem_absop_rule]
absinfer_sem_pend_inst_get_return [in sem_absop_rule]
absinfer_sem_pend_not_ready_return [in sem_absop_rule]
absinfer_sem_pend_from_idle_return [in sem_absop_rule]
absinfer_sem_pend_wrong_type_return [in sem_absop_rule]
absinfer_sem_pend_p_not_legal_return [in sem_absop_rule]
absinfer_sem_pend_null_return [in sem_absop_rule]
absinfer_mutex_pend_lift_is_rdy_block [in OSMutexPendPure1]
absinfer_tri_choice1 [in lab]
absinfer_tri_choice2 [in lab]
absinfer_conseq_pre [in OSQAcceptPure]
absinfer_qdel_err4_return [in OSQDelPure]
absinfer_qdel_err3_return [in OSQDelPure]
absinfer_qdel_succ_return [in OSQDelPure]
absinfer_qdel_err2_return [in OSQDelPure]
absinfer_qdel_err1_return [in OSQDelPure]
absinfer_mbox_post_full_return [in Mbox_common]
absinfer_mbox_post_wrong_type_return [in Mbox_common]
absinfer_mbox_post_p_not_legal_return [in Mbox_common]
absinfer_mbox_post_msg_null_return [in Mbox_common]
absinfer_mbox_post_null_return [in Mbox_common]
absinfer_mbox_post_put_mail_return [in Mbox_common]
absinfer_mbox_post_exwt_succ [in Mbox_common]
absinfer_mbox_pend_to_return [in Mbox_common]
absinfer_mbox_pend_block_get_return [in Mbox_common]
absinfer_mbox_pend_block [in Mbox_common]
absinfer_mbox_pend_inst_get_return [in Mbox_common]
absinfer_mbox_pend_not_ready_return [in Mbox_common]
absinfer_mbox_pend_from_idle_return [in Mbox_common]
absinfer_mbox_pend_wrong_type_return [in Mbox_common]
absinfer_mbox_pend_p_not_legal_return [in Mbox_common]
absinfer_mbox_pend_null_return [in Mbox_common]
absinfer_mbox_del_succ_return [in Mbox_common]
absinfer_mbox_del_task_wt_return [in Mbox_common]
absinfer_mbox_del_wrong_type_return [in Mbox_common]
absinfer_mbox_del_p_not_legal_return [in Mbox_common]
absinfer_mbox_del_null_return [in Mbox_common]
absinfer_mbox_acc_succ_return [in Mbox_common]
absinfer_mbox_acc_err_return [in Mbox_common]
absmbox_ptr_wt_nil [in Mbox_common]
absmod_disj_eqdom_merge [in asrtLib]
absop_emp_asrt [in asrtLib]
absop_aux2 [in asrtLib]
absop_aux [in asrtLib]
AbsOsEmpAsrt_prop [in asrtLib]
abst_get_merge [in ruleLib]
abst_disj_get [in progtaskstepLib]
abst_set_get_neq [in progtaskstepLib]
abst_join_join_merge_ex [in progtaskstepLib]
abst_set_get_neq [in lemmasfortoptheo]
abst_get_set [in lemmasfortoptheo]
abst_get_set_eqdom [in absop_rules]
abst_join_disj_join [in tst_prop]
abst_join_merge_merge_eq [in tst_prop]
abst_join_join_disj_mergeeq [in tst_prop]
abst_join_disj_disj [in tst_prop]
abst_disj_join_disjmerge' [in tst_prop]
abst_disj_join_mergeeq [in tst_prop]
abst_disj_join_disjmerge [in tst_prop]
abst_join_disj_disj_join [in tst_prop]
abst_join_join_merge_eq' [in tst_prop]
abst_merge_move [in tst_prop]
abst_disj_trans [in tst_prop]
abst_merge_ass [in tst_prop]
abst_merge_com [in tst_prop]
abst_disj_mergel [in tst_prop]
abst_disj_sym [in tst_prop]
abst_merge_disj [in tst_prop]
abst_disj_merge_trans' [in tst_prop]
abst_disj_merge_set_eqq [in common]
abst_set_get_neq'' [in cancel_absdata]
abst_disj_merge_set_eq' [in cancel_absdata]
abst_disj_merge_set_eq [in cancel_absdata]
abst_get_set_disj [in cancel_absdata]
abst_disj_merge_eq_eq [in PIF_aux]
Abs_join_eq [in asrtLib]
abs_disj_get_merge [in mathlib]
aconj_aisfalse_rule [in hoare_lemmas]
aconj_aisture_rule [in hoare_lemmas]
aconj_2aemp_intro [in seplog_lemmas]
aconj_2aemp_elim [in seplog_lemmas]
aconj_r_apure_intro [in seplog_lemmas]
aconj_r_astar_l_apure_intro [in seplog_lemmas]
aconj_l_apure_intro [in seplog_lemmas]
aconj_l_astar_l_apure_intro [in seplog_lemmas]
aconj_r_apure_elim [in seplog_lemmas]
aconj_r_astar_l_apure_elim [in seplog_lemmas]
aconj_l_apure_elim [in seplog_lemmas]
aconj_l_astar_l_apure_elim [in seplog_lemmas]
aconj_intro [in seplog_lemmas]
aconj_elim [in seplog_lemmas]
aconj_l_aexists_elim [in seplog_lemmas]
aconj_r_aexists_elim [in seplog_lemmas]
aconj_l_aexists_intro [in seplog_lemmas]
aconj_r_aexists_intro [in seplog_lemmas]
aconj_mono [in seplog_lemmas]
aconj_swap_r [in sem_lab]
aconj_swap_l [in sem_lab]
aconj_swap [in sem_lab]
acpt_intlemma6 [in OSMutex_common]
acpt_intlemma12 [in OSMutex_common]
acpt_intlemma14 [in OSMutex_common]
acpt_intlemma15 [in OSMutex_common]
acpt_intlemma5 [in OSMutex_common]
acpt_intlemma4 [in OSMutex_common]
acpt_intlemma10 [in OSMutex_common]
acpt_intlemma9 [in OSMutex_common]
acpt_intlemma7 [in OSMutex_common]
acpt_intlemma3 [in OSMutex_common]
acpt_intlemma2 [in OSMutex_common]
acpt_intlemma1 [in OSMutex_common]
acpt_int_lemma0 [in OSMutex_common]
acpt_int_lemma00 [in OSMutex_common]
acpt_intlemma8 [in OSMutex_common]
acs_elim [in seplog_lemmas]
acs_intro [in seplog_lemmas]
addcont_same_remove [in contLib]
AddKsToTail_kstop [in progtaskstepLib]
addrof_rv_to_lv [in hoare_assign]
addrof_gvar_rv [in symbolic_execution]
addrof_array_elem_rv [in symbolic_execution]
addrof_lvar_rv [in symbolic_execution]
addrof_deref_rv [in symbolic_execution]
addrspec.beq_false_neq [in memory]
addrspec.beq_true_eq [in memory]
addrspec.blt_beq_dec [in memory]
addrspec.blt_asym [in memory]
addrspec.blt_irrefl [in memory]
addrspec.blt_trans [in memory]
addrspec.eq_beq_true [in memory]
addrspec.neq_beq_false [in memory]
addr_eq_dec [in memory]
addstmts_same_remove [in contLib]
addstmts_eq_addcont [in contLib]
addstmts_not_eqkstop [in asrtLib]
addstmt_kret_exist [in contLib]
addtail_length_eq [in tst_prop]
add_stmt_not_kstop [in contLib]
add_a_isr_is_prop [in common]
adisj_astar_elim_r [in ruleLib]
adisj_astar_elim_l [in ruleLib]
adisj_intro [in seplog_lemmas]
adisj_elim [in seplog_lemmas]
adisj_l_aexists_elim [in seplog_lemmas]
adisj_r_aexists_elim [in seplog_lemmas]
adisj_l_aexists_intro [in seplog_lemmas]
adisj_r_aexists_intro [in seplog_lemmas]
adisj_mono [in seplog_lemmas]
adomlenv_elim [in seplog_lemmas]
adomlenv_intro [in seplog_lemmas]
AECBList_precise [in inv_prop]
AECBList_fold [in sem_lab]
aemp_isr_elim [in hoare_tactics]
AEventData_osabst_emp [in inv_prop]
AEventData_precise [in inv_prop]
AEventNode_vnull_false [in OSEventRemovePure]
aeventnode_evsllseg_get_neq' [in common]
aeventnode_evsllseg_get_neq [in common]
AEventNode_dup_false [in common]
AEventNode_osabst_emp [in inv_prop]
AEventNode_osevent_eq [in inv_prop]
AEventNode_precise [in inv_prop]
AEventNode_fold [in sem_lab]
aexists_prop [in seplog_lemmas]
aexists_intro [in seplog_lemmas]
aexists_elim [in seplog_lemmas]
Agvarenv_cancel [in hoare_lemmas]
agvarenv_elim [in seplog_lemmas]
agvarenv_intro [in seplog_lemmas]
AGVars_precise [in inv_prop]
AHprio_starinv_isr_atoy_inv_false [in hoare_tactics]
aie_elim [in seplog_lemmas]
aie_intro [in seplog_lemmas]
aisfalse_prop_ptr [in hoare_lemmas]
aisr_elim [in seplog_lemmas]
aisr_intro [in seplog_lemmas]
aistrue_oand [in OSEventRemovePure]
ais_elim [in seplog_lemmas]
ais_intro [in seplog_lemmas]
align_divides [in Coqlib]
align_le [in Coqlib]
allocb_store_mem_ex [in memory]
allocb_storebytes_mem_ex [in memory]
allocb_get_none [in memory]
allocb_get_some [in memory]
allocb_storebytes_some [in lmachLib]
allocb_nindom [in lmachLib]
allocb_storebytes_memjoin [in lmachLib]
allocb_emp_get_none [in lmachLib]
allocb_minus [in tst_prop]
allocsteop_imply_isalloc [in loststepLib]
allocstepn_exist [in loststepLib]
allocstep_exist [in loststepLib]
alloc_stepn_msim_hold [in ruleLib]
alloc_step_msim_hold [in ruleLib]
alloc_stepn_msim_hold [in funsim]
alloc_step_msim_hold [in funsim]
alloc_false [in memory]
alloc_store_exist_mem_env [in lmachLib]
alloc_exist_mem_env [in lmachLib]
alloc_exist_ptomvallist [in lmachLib]
alloc_empmem_mapstoval [in lmachLib]
alloc_locality [in progtaskstepLib]
alloc_trans [in progtaskstepLib]
alloc_v_step_asrt' [in tst_prop]
alloc_step_asrt [in tst_prop]
alloc_le_sat [in tst_prop]
alloc_store_sat [in tst_prop]
alloc_sat [in tst_prop]
alloc_minus_le [in tst_prop]
alloc_minus_mem [in tst_prop]
alloc_lemma [in asrtLib]
alloc_lemma_aux [in asrtLib]
alloc_notabortm [in asrtLib]
alloc_inv_prev [in asrtLib]
alloc_locality [in loststepLib]
alloc_locality_pre2 [in loststepLib]
alloc_locality_pre1 [in loststepLib]
alloc_not_abort [in loststepLib]
alloc_irev_prog [in loststepLib]
alloc_exist [in loststepLib]
alloc_star_exist [in loststepLib]
alloc_star_exist' [in loststepLib]
alloc_stepn_code_eq [in loststepLib]
alloc_code_eq' [in loststepLib]
alloc_code_eq [in loststepLib]
all_elem_hold_for_upd [in mathlib]
Alvarenv_cancel [in hoare_lemmas]
alvarenv_elim [in seplog_lemmas]
alvarenv_intro [in seplog_lemmas]
AMsgData_precise [in inv_prop]
and_sym_rr [in Coqlib]
and_sym [in Coqlib]
and_one_one [in IntLib]
and_zero_one [in IntLib]
and_one_zero [in IntLib]
and_zero_zero [in IntLib]
and7_lt8 [in OSMutexPendPure1]
anotinlenv_elim [in seplog_lemmas]
anotinlenv_intro [in seplog_lemmas]
aop_intro [in derivedrules]
Aop_Aop'_eq' [in derivedrules]
Aop_Aop'_eq [in derivedrules]
aop'_elim [in seplog_lemmas]
aop'_intro [in seplog_lemmas]
AOSEventFreeList_precise [in inv_prop]
AOSEventTbl_precise [in inv_prop]
AOSEventTbl_fold [in sem_lab]
AOSEvent_osabst_emp [in inv_prop]
AOSEvent_osevent_eq [in inv_prop]
AOSEvent_precise [in inv_prop]
AOSEvent_fold [in sem_lab]
AOSIntNesting_precise [in inv_prop]
AOSMapTbl_precise [in inv_prop]
AOSQBlk_osabst_emp [in inv_prop]
AOSQBlk_precise [in inv_prop]
AOSQCtr_osabst_emp [in inv_prop]
AOSQCtr_precise [in inv_prop]
AOSQCtr_osq_eq [in inv_prop]
AOSQFreeBlk_precise [in inv_prop]
AOSQFreeList_precise [in inv_prop]
AOSRdyTblGrp_fold [in OSMutex_common]
AOSRdyTblGrp_precise [in inv_prop]
AOSTCBFreeList_precise [in inv_prop]
AOSTCBList_set_curtid [in hoare_tactics]
AOSTCBList_precise [in inv_prop]
AOSTCBList_vptr [in inv_prop]
AOSTCBPrioTbl_high_tcblist_get_msg [in OSQPendPure]
AOSTCBPrioTbl_precise [in inv_prop]
AOSTCBPrioTbl_high_tcblist_get_msg [in Mbox_common]
AOSTime_precise [in inv_prop]
AOSUnMapTbl_precise [in inv_prop]
ApiMethSim [in lemmasfortoptheo]
api_internal_fun_nsame [in ucos_correctaux]
api_tlmatch [in tst_prop]
app_length_eq_eq [in OSEventRemovePure]
app_length_tail [in OSEventRemovePure]
app_tail_exists_head [in OSEventRemovePure]
app_cons_length_lt [in tst_prop]
Aptrmapsto_cancel [in hoare_lemmas]
apure_elim [in seplog_lemmas]
apure_intro [in seplog_lemmas]
arrayelem_asrt_impl_g [in aux_for_hoare_lemmas]
arrayelem_asrt_impl [in aux_for_hoare_lemmas]
arrayelem_asrt_impl_g [in symbolic_execution]
arrayelem_asrt_impl [in symbolic_execution]
array_length_intro [in hoare_tactics]
array_type_vallist_match_rule_type_val_match [in OSTimeTickPure]
array_type_match_get_value [in mathlib]
array_type_vallist_match_hold [in mathlib]
array_int8u_nth_lt_len [in mathlib]
array_type_vallist_match_int8u_update_hold' [in mathlib]
array_type_vallist_match_int8u_update_hold_255 [in mathlib]
array_type_vallist_match_int8u_update_hold [in mathlib]
array_type_vallist_match_is_all_elem_p [in mathlib]
array_asrt_imp_length [in aux_for_hoare_lemmas]
array_rm_update_eq [in aux_for_hoare_lemmas]
array_member_rv_g [in symbolic_execution]
array_member_rv_g'' [in symbolic_execution]
array_member_rv_g' [in symbolic_execution]
array_member_rv [in symbolic_execution]
array_member_rv'' [in symbolic_execution]
array_member_rv' [in symbolic_execution]
array_type_vallist_match_imp_rule_type_val_match [in symbolic_execution]
array_asrt_eq [in symbolic_execution]
array_rm_update_eq' [in symbolic_execution]
array_rm_update_eq [in symbolic_execution]
array'_length_intro [in hoare_tactics]
asrtTree_to_list_prop2 [in seplog_tactics]
asrtTree_to_list_prop1 [in seplog_tactics]
asrtTree2list_prop2 [in tacticsforseplog]
asrtTree2list_prop1 [in tacticsforseplog]
asrt_add_cell_to_tail_sateq_star [in tst_prop]
asrt_add_cell_to_tail_pqr [in tst_prop]
asrt_rep_5' [in hoare_assign]
asrt_rep_5 [in hoare_assign]
asrt_rep_4' [in hoare_assign]
asrt_rep_4 [in hoare_assign]
asrt_eq_trans [in aux_for_hoare_lemmas]
asrt_eq_trans [in symbolic_execution]
assign_loststep_exists' [in asrtLib]
assign_loststep_exists [in asrtLib]
assign_rule' [in derivedrules]
assign_rule_sound [in assignsound]
assign_rule_struct_array_g_aop [in hoare_assign]
assign_rule_struct_array_g [in hoare_assign]
assign_rule_struct_array_aop [in hoare_assign]
assign_rule_struct_array_aop' [in hoare_assign]
assign_rule_struct_array [in hoare_assign]
assign_rule_deref_struct_g_aop [in hoare_assign]
assign_rule_deref_struct_g [in hoare_assign]
assign_rule_deref_struct_aop [in hoare_assign]
assign_rule_deref_struct [in hoare_assign]
assign_rule_array_g_aop [in hoare_assign]
assign_rule_array_g_aop' [in hoare_assign]
assign_rule_array_g [in hoare_assign]
assign_rule_deref_array_elem_aop [in hoare_assign]
assign_rule_deref_array_elem_aop''' [in hoare_assign]
assign_rule_deref_array_elem_aop'' [in hoare_assign]
assign_rule_deref_array_elem_aop' [in hoare_assign]
assign_rule_array_aop [in hoare_assign]
assign_rule_ptr_array_aop [in hoare_assign]
assign_rule_ptr_array [in hoare_assign]
assign_rule_array_aop' [in hoare_assign]
assign_rule_array [in hoare_assign]
assign_rule_struct_g_aop [in hoare_assign]
assign_rule_struct_g [in hoare_assign]
assign_rule_struct_aop [in hoare_assign]
assign_rule_struct [in hoare_assign]
assign_rule_struct_array_g' [in hoare_assign]
assign_rule_struct_array' [in hoare_assign]
assign_rule_array_g' [in hoare_assign]
assign_rule_ptr_array' [in hoare_assign]
assign_rule_array' [in hoare_assign]
assign_rule_struct_g' [in hoare_assign]
assign_rule_deref_struct_g' [in hoare_assign]
assign_rule_deref_struct' [in hoare_assign]
assign_rule_struct'' [in hoare_assign]
assign_rule_struct' [in hoare_assign]
assign_rule_deref_ptr [in hoare_assign]
assign_rule''' [in hoare_assign]
assign_rule'' [in hoare_assign]
assign_rule_gvar [in hoare_assign]
assign_rule_lvar [in hoare_assign]
assign_rule_general [in hoare_assign]
assign_rule_general' [in hoare_assign]
assign_type_match_true [in aux_for_hoare_lemmas]
astar_l_aconj_elim_zh [in ruleLib]
astar_l_aop'_elim [in seplog_lemmas]
astar_l_aop'_intro [in seplog_lemmas]
astar_l_agvarenv_elim [in seplog_lemmas]
astar_l_agvarenv_intro [in seplog_lemmas]
astar_l_alvarenv_elim [in seplog_lemmas]
astar_l_alvarenv_intro [in seplog_lemmas]
astar_l_anotinlenv_elim [in seplog_lemmas]
astar_l_anotinlenv_intro [in seplog_lemmas]
astar_l_adomlenv_elim [in seplog_lemmas]
astar_l_adomlenv_intro [in seplog_lemmas]
astar_l_atopis_elim [in seplog_lemmas]
astar_l_atopis_intro [in seplog_lemmas]
astar_l_acs_elim [in seplog_lemmas]
astar_l_acs_intro [in seplog_lemmas]
astar_l_aisr_elim [in seplog_lemmas]
astar_l_aisr_intro [in seplog_lemmas]
astar_l_ais_elim [in seplog_lemmas]
astar_l_ais_intro [in seplog_lemmas]
astar_l_aie_elim [in seplog_lemmas]
astar_l_aie_intro [in seplog_lemmas]
astar_prop [in seplog_lemmas]
astar_l_aconj_elim [in seplog_lemmas]
astar_r_aconj_elim [in seplog_lemmas]
astar_l_aexists_elim [in seplog_lemmas]
astar_r_aexists_elim [in seplog_lemmas]
astar_l_aexists_intro [in seplog_lemmas]
astar_r_aexists_intro [in seplog_lemmas]
astar_l_apure_intro [in seplog_lemmas]
astar_l_apure_elim [in seplog_lemmas]
astar_l_afalse_intro [in seplog_lemmas]
astar_l_afalse_elim [in seplog_lemmas]
astar_2atrue_elim [in seplog_lemmas]
astar_2atrue_intro [in seplog_lemmas]
astar_assoc_elim [in seplog_lemmas]
astar_assoc_intro [in seplog_lemmas]
astar_r_aemp_elim [in seplog_lemmas]
astar_l_aemp_elim [in seplog_lemmas]
astar_r_aemp_intro [in seplog_lemmas]
astar_l_aemp_intro [in seplog_lemmas]
astar_mono [in seplog_lemmas]
astar_comm [in seplog_lemmas]
Astruct_PV_neq1 [in OSMutex_common]
Astruct_OSTCB_PV_ptr_neq [in OSQPostPure]
Astruct_osevent_dup_false' [in common]
Astruct_osevent_dup_false [in common]
astruct_neq_ptr [in common]
Astruct_osabst_emp [in inv_prop]
Astruct_precise [in inv_prop]
Astruct'_osabst_emp [in inv_prop]
Astruct'_vl_eq [in inv_prop]
Astruct'_precise [in inv_prop]
atopis_eq [in OSIntExitPure]
atopis_elim [in seplog_lemmas]
atopis_intro [in seplog_lemmas]
atopis_pure [in common]
atoy_inv_osabst_emp [in hoare_tactics]
atoy_abst_elim [in hoare_tactics]
atoy_inv_add [in hoare_tactics]
atoy_inv_elim [in hoare_tactics]
atoy_inv'_precise [in inv_prop]
atrue_intro [in seplog_lemmas]
aux_trivial [in OSMutexPendPure1]
aux_le [in tst_prop]
aux_for_tl_vl_match_rev [in asrtLib]
a_isr_is_prop_split [in common]
A_isr_is_prop_precise [in inv_prop]
a_isr_is [in inv_prop]
a_isr_is_prop_split [in OSTimeTickPure]
a_mult_b_ge_b [in mathlib]


B

backward_1 [in oscore_common]
backward_rule4 [in derivedrules]
backward_rule3 [in derivedrules]
backward_rule2 [in derivedrules]
backward_rule1 [in derivedrules]
beq_addr_false_neq_iff [in memory]
beq_addr_true_eq_iff [in memory]
beq_Z_Z_eqb_eq [in memory]
beq_pos_Pos_eqb_eq [in memory]
beq_Z_Zeqb_ident [in lmachLib]
beq_taskid [in auxdef]
beq_nat_false2 [in asrtLib]
beq_nat_false [in asrtLib]
beq_nat_false3 [in asrtLib]
beq_int_dec [in IntBool]
beq_int_false_neq [in IntBool]
beq_int_true_eq [in IntBool]
beq_tid_true_eq [in OSTimeTickPure]
beq_tid_true [in OSTimeTickPure]
beq_addrval_eq [in OSTimeTickPure]
beq_addrval_false_neq [in OSTimeTickPure]
beq_pos_true [in OSTimeTickPure]
beq_tid_true [in PIF_aux]
beq_tid_true_eq [in PIF_aux]
blt_Z_Z_ltb_eq [in memory]
blt_pos_Pos_ltb_eq [in memory]
blt_irrefl_Prop [in IntBool]
blt_irrefl [in IntBool]
blt_pos_irrefl [in IntBool]
Bmax_unsigned [in OSMutex_common]
Bmodulus [in OSMutex_common]
bool_and_true_gt [in mathlib]
bool_and_true_1 [in mathlib]
bool_type_val_match [in sep_pure]
bop_rv [in symbolic_execution]
bpr'_to_bpr [in lemmasfortoptheo]
bp_bpa [in tst_prop]
buidq_intro_e [in asrtLib]
buildp_add [in tst_prop]
buildp_add_nil [in tst_prop]
buildp_add_v [in tst_prop]
buildq_ncare_ab [in tst_prop]
buildq_empO [in tst_prop]
build_api_asrt [in tst_prop]
build_pre_ret_exist [in asrtLib]
buldp_some_imp_gooddecl [in simulation]
byte_max_unsigned_val [in type_val_match]


C

callcont_int_local [in progtaskstepLib]
callcont_int_nonone [in progtaskstepLib]
callcont_int [in progtaskstepLib]
callcont_not_none_ex [in progtaskstepLib]
callcont_nonone_addcont [in progtaskstepLib]
callcont_intcont_kcall_none [in contLib]
callcont_some_eq [in contLib]
callcont_not_none' [in contLib]
callcont_not_none [in contLib]
callcont_kcall_neqnone [in contLib]
callcont_some [in contLib]
callcont_none_intcont_some_imply_callcont_addcont_none [in contLib]
callcont_nont_addkseq_kstop [in contLib]
callcont_addcont_none [in contLib]
callcont_kseq_kstop [in contLib]
callcont_ks_kstop [in contLib]
callcont_addkcall_imply_callcont_addkcall [in contLib]
callcont_addkcall_imply_addcont_exist [in contLib]
callcont_addkcall_imply_callcont_addkcall_exist [in contLib]
callcont_stmts_exist [in contLib]
callcont_none [in contLib]
callcont_none_addstmts_rev [in contLib]
callcont_none_addstmts [in contLib]
callcont_some_addcont [in contLib]
callcont_some_addstmts_rev [in contLib]
callcont_some_addstmts [in contLib]
callcont_ndymint [in lemmasfortoptheo]
callcont_kseq_kstop_nonone [in loststepLib]
callcont_addkcall_nonone_imply_callcont_addkcall [in loststepLib]
callcont_nonone_addstmts [in loststepLib]
callcont_nonone_addcont [in loststepLib]
callcont_goodks [in PIF_aux]
calle_rule_lvar [in hoare_tactics]
calle_rule_lvar_sound [in fcallsound]
calle_rule_sound [in fcallsound]
calle_rule_lvar' [in derivedrules]
calle_rule' [in derivedrules]
callsome_intnone [in progtaskstepLib]
call_int_none_call [in contLib]
call_int_cont_none [in contLib]
call_rule_sound [in fcallsound]
call_ignore_exprlist_sim [in fcallsound]
call_rule' [in derivedrules]
cancellation_rule [in seplog_lemmas]
cancel_absdata [in seplog_tactics]
cancel_gvararray [in seplog_tactics]
cancel_lvararray [in seplog_tactics]
cancel_ptrarray [in seplog_tactics]
cancel_ptrstruct [in seplog_tactics]
cancel_ptrmapsto [in seplog_tactics]
cancel_gvarmapsto [in seplog_tactics]
cancel_lvarmapsto [in seplog_tactics]
cancel_absdata_p' [in cancel_absdata]
cancel_absdata_p [in cancel_absdata]
can_change_aop_OSQInv [in can_change_aop_proof]
can_change_aop_qblkf [in can_change_aop_proof]
can_change_aop_qblkfseg [in can_change_aop_proof]
can_change_aop_ecbfsll [in can_change_aop_proof]
can_change_aop_ecbfsllseg [in can_change_aop_proof]
can_change_aop_tcbdllseg [in can_change_aop_proof]
can_change_aop_dllseg [in can_change_aop_proof]
can_change_aop_sll [in can_change_aop_proof]
can_change_aop_msgqllseg [in can_change_aop_proof]
can_change_aop_msgqnode [in can_change_aop_proof]
can_change_aop_aevtdata [in can_change_aop_proof]
can_change_aop_msgq [in can_change_aop_proof]
can_change_aop_node [in can_change_aop_proof]
can_change_aop_sllseg [in can_change_aop_proof]
can_change_aop_struct [in can_change_aop_proof]
can_change_aop_struct' [in can_change_aop_proof]
can_change_aop_gvararray [in can_change_aop_proof]
can_change_aop_lvararray [in can_change_aop_proof]
can_change_aop_ptrarray [in can_change_aop_proof]
can_change_aop_ptrarray' [in can_change_aop_proof]
can_change_aop_gvarmapsto [in can_change_aop_proof]
can_change_aop_lvarmapsto [in can_change_aop_proof]
can_change_aop_gvarenv [in can_change_aop_proof]
can_change_aop_lvarenv [in can_change_aop_proof]
can_change_aop_ptrmapsto [in can_change_aop_proof]
cast_eval_tptr_none [in opsem]
cast_rv_tint8_tint16 [in symbolic_execution]
cast_rv_tint32_tint8 [in symbolic_execution]
cast_rv_tnull [in symbolic_execution]
cast_rv_struct_tptr [in symbolic_execution]
cast_rv_tptr [in symbolic_execution]
change_aop_rule [in assertion]
change_tstm_trans' [in tst_prop]
change_tstm_trans [in tst_prop]
change_aop_rule [in seplog_lemmas]
checkis_rule_sound [in chkissound]
checkis_rule' [in derivedrules]
cli1_rule_sound [in clistisound]
cli1_rule' [in derivedrules]
cli2_rule_sound [in clistisound]
cli2_rule' [in derivedrules]
cltstepev_eq [in progtaskstepLib]
cltstep_eqabt [in progtaskstepLib]
cltstep_eqo [in progtaskstepLib]
cltstep1_eq [in progtaskstepLib]
clt_stepev_good_clt [in progtaskstepLib]
clt_step_good_clt [in progtaskstepLib]
code_eq_dec [in lemmasfortoptheo]
code_exe_prop2 [in PIF_aux]
code_exe_prop1 [in PIF_aux]
ConjExEL [in lemmasforseplog]
ConjExER [in lemmasforseplog]
ConjExIL [in lemmasforseplog]
ConjExIR [in lemmasforseplog]
ConjMono [in lemmasforseplog]
ConjPropE [in lemmasforseplog]
ConjPropI [in lemmasforseplog]
ConjPureEL [in lemmasforseplog]
ConjPureER [in lemmasforseplog]
ConjPureIL [in lemmasforseplog]
ConjPureIR [in lemmasforseplog]
ConjStarIL [in lemmasforseplog]
ConjStarIR [in lemmasforseplog]
ConjStarPureEL [in lemmasforseplog]
ConjStarPureER [in lemmasforseplog]
ConjStarPureIL [in lemmasforseplog]
ConjStarPureIR [in lemmasforseplog]
Conj2AempE [in lemmasforseplog]
Conj2AempI [in lemmasforseplog]
conseq_rule_r_sound [in conseqsound]
conseq_rule_r_sound_aux [in conseqsound]
conseq_rule_sound [in conseqsound]
conseq_rule_sound_aux [in conseqsound]
const_rv [in symbolic_execution]
cons_ext [in OSEventRemovePure]
cont_frame_mono [in loststepLib]
create_val_inj_lemma0 [in OSMutex_common]
cstep_idmove_frame [in cstepLib]
cstep_frame [in cstepLib]
cstep_safe_mono [in cstepLib]
cstep_idmove_deter [in cstepLib]
cstep_no_api_local [in progtaskstepLib]
cstep_p_local [in progtaskstepLib]
cstep_pumerge' [in progtaskstepLib]
cstep_pumerge [in progtaskstepLib]
cstep_AddKsToTail [in progtaskstepLib]
cstep_no_api_elim [in lemmasfortoptheo]
cstep_cont_locality [in tst_prop]
cstep_nhapi_hold [in PIF_aux]
cstep_good_clt_hold [in PIF_aux]
cstep1_locality [in progtaskstepLib]


D

dec_eq_sym [in Coqlib]
dec_eq_false [in Coqlib]
dec_eq_true [in Coqlib]
del_ecbmod_join_lemma0 [in OSMutex_common]
del_intlemma2 [in OSMutex_common]
del_intlemma1 [in OSMutex_common]
deref_ptr_of_array_member_rv [in symbolic_execution]
deref_ptr_of_array_member_rv''' [in symbolic_execution]
deref_ptr_of_array_member_rv'' [in symbolic_execution]
deref_ptr_of_array_member_rv' [in symbolic_execution]
deref_rv [in symbolic_execution]
DisjExEL [in lemmasforseplog]
DisjExER [in lemmasforseplog]
DisjExIL [in lemmasforseplog]
DisjExIR [in lemmasforseplog]
DisjMono [in lemmasforseplog]
DisjPropE [in lemmasforseplog]
DisjPropI [in lemmasforseplog]
disj_star_elim_disj [in hoare_tactics]
disj_indom_set_disj [in lemmasfortoptheo]
disj_get_eq [in lemmasfortoptheo]
disj_store_disj [in lemmasfortoptheo]
disj_storebytes_disj [in lemmasfortoptheo]
disj_rule_sound [in simplrulesound]
disj_inv_0_sinum_oemp [in tst_prop]
disj_join_join [in tst_prop]
disj_sub_minus_merge [in tst_prop]
disj_rule' [in derivedrules]
disj_join_disj [in common]
disj_conj_distrib_pre [in common]
disj_eqdom [in OSTimeTickPure]
disj_star_elim'' [in mathlib]
disj_star_elim' [in mathlib]
disj_star_elim [in mathlib]
div_in_intrange [in mathlib]
dladd_revlcons_eq [in tst_prop]
dllseg_head_isptr [in hoare_tactics]
dllseg_head_isptr' [in oscore_common]
dllseg_head_null_elim [in oscore_common]
dllseg_compose [in OSMutexPendPure1]
dllseg_ostcb_precise [in inv_prop]
dllseg_osabst_emp [in inv_prop]
dl_vl_match_6 [in init_spec]
dl_vl_match_5 [in init_spec]
dl_vl_match_4 [in init_spec]
dl_vl_match_3 [in init_spec]
dl_vl_match_2 [in init_spec]
dl_vl_match_1 [in init_spec]
dl_vl_match_0 [in init_spec]
dl_vl_match_dv_same_length [in init_spec]
dl_add_move [in tst_prop]
dl_add_nil_eq [in tst_prop]
dl_add_revlcons_length_le [in tst_prop]
dl_add_dnil_eq [in tst_prop]
dl_eq_true_eq [in aux_for_hoare_lemmas]
dom_lenv_imp_notin_lenv [in symbolic_execution]
double_update_exchangable4rlrt_pt_p [in OSMutex_common]
double_update_exchange [in OSMutex_common]
dup_lemma [in LibTactics]


E

ecbfsllseg_head_isptr [in hoare_tactics]
ecbfsll_head_isptr [in hoare_tactics]
ecbf_sllseg_isptr [in common]
ecbf_sll_osabst_emp [in inv_prop]
ecbf_sll_precise [in inv_prop]
ecbf_sllseg_osabst_emp [in inv_prop]
ecbjoin_sig_join [in mathlib]
ecbjoin_sig_join' [in Mbox_common]
ecblistp_hold [in OSMutex_common]
ecblistp_length_eq [in mathlib]
ecblistp_length_eq_1 [in mathlib]
ecblist_star_not_inh [in OSQCreatePure]
ECBList_OSQCRT_prop [in OSQCreatePure]
ecblist_ecbmod_get_mutex' [in OSMutex_common]
ecblist_p_decompose [in OSMutex_common]
ecblist_ecbmod_get_mutex [in OSMutex_common]
ecblist_ecbmod_get_aux_mutex [in OSMutex_common]
ECBList_Mutex_Create_prop [in OSMutex_common]
ecblist_p_mutexpend_changeprio [in OSMutex_common]
ECBList_P_msg [in OSQGetMsgPure]
ecblist_p_post_exwt_hold_mutex [in OSMutexPostPure]
ECBList_P_Set_Rdy_hold_mutex [in OSMutexPostPure]
ecblist_p_post_exwt_hold' [in OSQPostPure]
ecblist_p_post_exwt_hold [in OSQPostPure]
ECBList_P_Set_Rdy_hold [in OSQPostPure]
ECBList_P_high_tcb_block_hold [in OSQPendPure]
ECBList_P_high_tcb_get_msg_hold [in OSQPendPure]
ECBList_P_append [in OSESearchPure]
ECBList_P_nil [in OSESearchPure]
ecblist_p_mutexpend [in OSMutexPendPure1]
ECBList_P_high_tcb_block_hold_mutex [in OSMutexPendPure1]
ECBList_P_hold1 [in OSTimeDlyPure]
ecblist_p_eqh [in common]
ecblist_p_decompose [in common]
ecblist_p_post_exwt_hold_sem [in sempost_pure]
ECBList_P_Set_Rdy_hold_sem [in sempost_pure]
ecblist_ecbmod_get' [in OSQDelPure]
ecblist_p_decompose [in OSQDelPure]
ecblist_ecbmod_get [in OSQDelPure]
ecblist_ecbmod_get_aux [in OSQDelPure]
ecblist_pin [in OSQDelPure]
ecblist_p_tick_rdy_ectr_mutexsem [in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_mbox [in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_sem [in OSTimeTickPure]
ecblist_p_tick_rdy_ectr_q [in OSTimeTickPure]
ecblist_p_stat_time_minus1_eq [in OSTimeTickPure]
ecblist_p_wait_set_rdy [in OSTimeTickPure]
ECBList_P_Set_Rdy_MUTEX_hold [in OSTimeTickPure]
ECBList_P_Set_Rdy_MBOX_hold [in OSTimeTickPure]
ECBList_P_Set_Rdy_SEM_hold [in OSTimeTickPure]
ecblist_p_compose' [in OSTimeTickPure]
ECBList_P_get_eidls_not_in [in OSTimeTickPure]
ECBList_P_vptr [in OSTimeTickPure]
ECBList_P_els_get_split [in OSTimeTickPure]
ECBList_P_get_last_ecb_ptr_split_joinsig [in OSTimeTickPure]
ECBList_P_get_last_ecb_ptr [in OSTimeTickPure]
ECBList_P_get_ectr_some [in OSTimeTickPure]
ecblist_p_compose [in mathlib]
ECBList_last_val [in mathlib]
ECBList_MBox_Create_prop [in MboxCreatePure]
ECBList_P_high_tcb_block_hold_sem [in sempend_pure]
ecblist_p_post_exwt_hold_mbox [in Mbox_common]
ECBList_P_Set_Rdy_hold_mbox [in Mbox_common]
ECBList_P_high_tcb_block_hold_mbox [in Mbox_common]
ECBList_P_high_tcb_get_msg_hold [in Mbox_common]
ecblist_ecbmod_get_mbox' [in Mbox_common]
ecblist_p_decompose'' [in Mbox_common]
ecblist_ecbmod_get_mbox [in Mbox_common]
ecblist_ecbmod_get_aux_mbox [in Mbox_common]
ecblist_p_decompose' [in Mbox_common]
ecblist_p_decompose [in Mbox_common]
ecbls_ptr_distinct_get_last_eq [in OSEventRemovePure]
ecbmod_indom_eq_join_eq [in OSMutex_common]
ecbmod_get_or [in OSMutex_common]
ecbmod_absmsgq [in OSQPostPure]
ecbmod_join_sigg [in mathlib_join]
ecbmod_join_sigg_my [in mathlib_join]
ecbmod_joinsig_get [in laby]
ecbmod_joinsig_get [in lab]
ecbmod_get_joinsig_join_eq [in OSTimeTickPure]
ecbmod_set_eq [in OSTimeTickPure]
ecbmod_set_neq_change [in OSTimeTickPure]
ecbmod_joinsig_get_none [in mathlib]
ecbmod_get_join_get [in mathlib]
ecbmod_joinsig_sig [in mathlib]
ecbmod_joinsig_get [in mathlib]
ecbmod_join_get [in mathlib]
ecbmod_get_sig_set [in mathlib]
ecb_del_prop_RHhold [in OSMutex_common]
ecb_list_join_join [in OSMutex_common]
ecb_wt_ex_prop_mutex [in OSMutex_common]
ecb_sig_join_sig'_set [in OSMutex_common]
ecb_join_sig_eq [in OSMutex_common]
ecb_etbl_set_hold [in OSQPendPure]
ecb_etbl_prop [in OSTimeDlyPure]
ecb_sub_eq [in common]
ecb_joinsig_ex_split [in common]
ecb_list_join_join [in OSQDelPure]
ecb_del_prop_RHhold [in OSQDelPure]
ecb_wt_ex_prop [in OSQDelPure]
ecb_set_join_join [in mathlib]
ecb_get_set_join_join [in mathlib]
ecb_joinsig_get_eq' [in PIF_aux]
ecb_join_get_eq' [in PIF_aux]
ecb_joinsig_get_eq [in PIF_aux]
ecb_etbl_set_hold [in Mbox_common]
ecb_sig_join_sig'_set [in Mbox_common]
ecb_del_prop_RHhold [in Mbox_common]
ecb_list_join_join [in Mbox_common]
ecb_wt_ex_prop_mbox [in Mbox_common]
ecb_joinsig_ex_split [in Mbox_common]
eight_destruct [in mathlib]
ejoin_get_none_l [in sempend_pure]
ejoin_get_none_r [in sempend_pure]
ejoin_get_none_l [in Mbox_common]
ejoin_get_none_r [in Mbox_common]
elim_a_isr_is_prop' [in OSIntExitPure]
elim_a_isr_is_prop [in common]
empisr_isr_is_prop_P [in hoare_tactics]
empisr_isr_is_prop [in hoare_tactics]
emple_subs_inv [in tst_prop]
EmpPureE [in lemmasforseplog]
EmpPureI [in lemmasforseplog]
emp_absos_asrt_prop [in asrtLib]
Emp_AbsOs_Asrt_prop [in asrtLib]
encode_val_length [in memdata]
encode_int_length [in memdata]
encrit_rule_pre [in derivedrules]
encrit1_rule'_ISnil_ISRemp [in hoare_tactics]
encrit1_rule'_ISnil [in hoare_tactics]
encrit1_rule' [in derivedrules]
encrit1_rule_sound [in crtsound]
encrit2_rule' [in derivedrules]
encrit2_rule_sound [in crtsound]
envmod_get'_remove_mid [in asrtLib]
EnvMod_lb_neq [in asrtLib]
envsub_get [in asrtLib]
env_join_get [in joinmemLib]
env_join_sig_r [in lmachLib]
env_can_get [in progtaskstepLib]
env_domain_eq_imply_alloc_exist [in loststepLib]
env_domain_set_eq [in loststepLib]
en_int_inv [in tst_prop]
eoi_ieoff_rule_sound [in eoisound]
eoi_ieon_rule_sound [in eoisound]
eoi_ieoff_rule' [in derivedrules]
eoi_ieon_rule' [in derivedrules]
eqabst_disj_emp [in asrtLib]
eqdomenv_conse [in asrtLib]
eqdomenv_conse_pre [in asrtLib]
eqdomenv_conse_pre' [in asrtLib]
eqdomenv_nil_enil [in asrtLib]
eqdomos_p [in ucos_correctaux]
eqdomO_merge [in ruleLib]
eqdomO_disj_disj [in ruleLib]
eqdomO_trans [in ruleLib]
eqdomo_disj_merge [in progtaskstepLib]
eqdomo_disj [in progtaskstepLib]
eqdomO_set2 [in progtaskstepLib]
eqdomO_eqdomTO [in progtaskstepLib]
eqdomO_refl [in progtaskstepLib]
eqdomO_disj_disj_merge [in asrtLib]
eqdomO_disj_eqdomO [in asrtLib]
eqdomO_none [in asrtLib]
eqdomO_same [in cancel_absdata]
eqdomsot_get_exproj' [in lemmasfortoptheo]
eqdomsot_get_exproj [in lemmasfortoptheo]
eqdomTO_setT [in progtaskstepLib]
eqdomto_indom_get [in lemmasfortoptheo]
eqdom_internal_lh [in ucos_correctaux]
eqdom_same [in absop_rules]
eqenv_join2_eqenv [in ruleLib]
eqenv_goodg_sat [in ruleLib]
eqenv_comm [in joinmemLib]
eqenv_trans [in joinmemLib]
eqmem_disj_emp [in asrtLib]
eqMs [in tst_prop]
eqtid_same [in absop_rules]
equates_6 [in LibTactics]
equates_5 [in LibTactics]
equates_4 [in LibTactics]
equates_3 [in LibTactics]
equates_2 [in LibTactics]
equates_1 [in LibTactics]
equates_0 [in LibTactics]
eq_zero_zero [in IntLib]
eq_one_zero [in IntLib]
eq_tp [in tst_prop]
eq_beq_int_true [in IntBool]
eq_beq_addrval [in OSTimeTickPure]
eq_13 [in mathlib]
eq_12 [in mathlib]
eq_11 [in mathlib]
eq_10 [in mathlib]
eq_9 [in mathlib]
eq_8 [in mathlib]
eq_7 [in mathlib]
eq_6 [in mathlib]
eq_5 [in mathlib]
eq_4 [in mathlib]
eq_3 [in mathlib]
eq_2 [in mathlib]
eq_1 [in mathlib]
eq_impl_trans [in aux_for_hoare_lemmas]
eq_impl_trans [in symbolic_execution]
eq2inteq [in OSMutex_common]
estepstar_imply_star [in cstepLib]
estepstar_mem_same [in cstepLib]
estepstar_deter [in cstepLib]
estepstar_estepstar_trans [in cstepLib]
estepstar_estep_trans [in cstepLib]
estepstar_msim_hold [in ruleLib]
estepstar_imply_lostidstepstar [in loststepLib]
estepv_notabortm [in cstepLib]
estep_mem_same [in cstepLib]
estep_deter [in cstepLib]
estep_msim_hold [in ruleLib]
estep_frame_loststep [in loststepLib]
estep_lstep_deter [in loststepLib]
estep_join_lstep [in loststepLib]
estep_imply_loststep [in loststepLib]
evaladdr_imply_estepstar [in cstepLib]
evaladdr_val_eq [in cstepLib]
evaladdr_mono [in lmachLib]
evalexprlist_imply_evalexprlist' [in lmachLib]
evalexprlist_len_eq [in lmachLib]
evalexprlist_imply_eqlen [in asrtLib]
evalexprlist_imply_evalexprlist' [in asrtLib]
evalexprlist_idstep_star [in loststepLib]
evalexprlist'_imply_evalexprlist [in lmachLib]
evalexprlist'_imply_evalexprlist [in asrtLib]
evallist_length_leb_rev [in lmachLib]
evallist_length_leb [in lmachLib]
evaltype_GE_eq [in cstepLib]
evaltype_deter [in lmachLib]
evaltype_eq_prop [in lmachLib]
evaltype_mono [in lmachLib]
evaltype_irrev_mem [in lmachLib]
evaltype_GE_eq [in asrtLib]
evalvaladdr_mono [in lmachLib]
evalval_imply_estepstar [in cstepLib]
evalval_evaladdr_imply_estepstar [in cstepLib]
evalval_deter [in lmachLib]
evalval_eq_prop [in lmachLib]
evalval_mono [in lmachLib]
evalval_imply_evaltype [in lmachLib]
evalval_type [in progtaskstepLib]
evalval_frame_prop [in asrtLib]
evalval_imply_lostidstepstar [in loststepLib]
eval_length_rev [in lmachLib]
eval_length_tlmatch [in lmachLib]
eval_type_match [in lmachLib]
eval_addr_prop [in lmachLib]
eval_addr_eq [in aux_for_hoare_lemmas]
eval_type_addr_eq [in aux_for_hoare_lemmas]
eval_addr_eq [in symbolic_execution]
eval_type_addr_eq [in symbolic_execution]
eventsearch_after_get_H [in sem_common]
eventtype_neq_mutex [in OSMutex_common]
eventtype_neq_q [in common]
eventtype_neq_mbox' [in Mbox_common]
eventtype_neq_mbox [in Mbox_common]
event_type_n_match [in OSQPostPure]
event_type_n_match'' [in OSQPostPure]
event_type_n_match' [in OSQPostPure]
event_type_n_match [in OSQPendPure]
event_wait_rl_tbl_grp'' [in OSTimeDlyPure]
event_wait_rl_tbl_grp [in OSTimeDlyPure]
event_wait_rl_tbl_grp' [in OSTimeDlyPure]
evsllseg_aux [in OSMutex_common]
evsllseg_merge' [in OSEventRemovePure]
evsllseg_astruct_not_in [in OSEventRemovePure]
evsllseg_ecbls_ptr_distinct [in OSEventRemovePure]
evsllseg_get_last_eq_p [in OSEventRemovePure]
evsllseg_vnull_nil_p [in OSEventRemovePure]
evsllseg_append1 [in OSEventRemovePure]
evsllseg_has_node [in OSEventRemovePure]
evsllseg_head_isptr' [in OSEventRemovePure]
evsllseg_vnull_false_p [in OSEventRemovePure]
evsllseg_vnull_false [in OSEventRemovePure]
evsllseg_list_len_eq' [in OSEventRemovePure]
evsllseg_ptr_dup_false [in OSEventRemovePure]
evsllseg_distinct' [in OSEventRemovePure]
evsllseg_not_in_vnull' [in OSEventRemovePure]
evsllseg_not_in_vnull [in OSEventRemovePure]
evsllseg_distinct [in OSEventRemovePure]
evsllseg_head_isptr [in hoare_tactics]
evsllseg_append [in OSESearchPure]
evsllseg_aux [in OSMutexPendPure1]
evsllseg_eid_neq [in common]
evsllseg_list_len_eq [in common]
evsllseg_isptr [in common]
evsllseg_compose [in common]
evsllseg_app [in common]
evsllseg_add_head [in common]
evsllseg_merge [in common]
evsllseg_get_last_eq [in common]
evsllseg_precise [in inv_prop]
evsllseg_osabst_emp [in inv_prop]
evsllseg_isptr [in inv_prop]
excrit_rule_pre [in derivedrules]
excrit1_rule'_ISnil_ISRemp' [in hoare_tactics]
excrit1_rule'_ISnil_ISRemp [in hoare_tactics]
excrit1_rule'_ISnil [in hoare_tactics]
excrit1_rule' [in derivedrules]
excrit1_rule_sound [in crtsound]
excrit2_rule' [in derivedrules]
excrit2_rule_sound [in crtsound]
exint_dec [in lemmasfortoptheo]
exint_notabortm [in asrtLib]
exists_some_unmap_is_x [in OSMutex_common]
exists2Ex [in lemmasforseplog]
exitint_rule_sound [in retsound]
ExProp [in lemmasforseplog]
expr_array_member_rv [in symbolic_execution]
expr_array_member_rv' [in symbolic_execution]
extensionality [in Coqlib]
ex_intro_rule_sound [in simplrulesound]
ex_intro_rule' [in derivedrules]
Ex2exists [in lemmasforseplog]


F

fcall_kstop [in asrtLib]
fcall_not [in asrtLib]
fexec_abt_eq [in progtaskstepLib]
field_offset_plus [in lmachLib]
field_deref_asrt_impl_g [in hoare_assign]
field_deref_asrt_impl [in hoare_assign]
field_array_asrt_impl_g [in hoare_assign]
field_array_asrt_impl [in hoare_assign]
field_asrt_impl_g [in aux_for_hoare_lemmas]
field_asrt_impl [in aux_for_hoare_lemmas]
field_offsetfld_pos_mono [in aux_for_hoare_lemmas]
field_asrt_impl_g [in symbolic_execution]
field_asrt_impl [in symbolic_execution]
forward_rule4 [in derivedrules]
forward_rule3 [in derivedrules]
forward_rule2 [in derivedrules]
forward_rule1 [in derivedrules]
frame_rule_sound [in framesound]
frame_rule_all_sound [in framesound]
frame_sim_aux [in framesound]
frame_rule_all' [in derivedrules]
frame_rule' [in derivedrules]
freeb_get_same [in memory]
freeb_mono [in lmachLib]
freeb_mem_join [in progtaskstepLib]
freeb_inconsistent [in progtaskstepLib]
freeb_consistent [in progtaskstepLib]
freeb_sub [in progtaskstepLib]
freeb_get [in progtaskstepLib]
freeb_mem_join [in tst_prop]
freeb_join_rev [in asrtLib]
freeb_join [in asrtLib]
freeb_join_elim [in asrtLib]
freels_split [in asrtLib]
freels_imply_freels' [in asrtLib]
freels_merge [in asrtLib]
freels_exchage2 [in asrtLib]
freels_exchange1 [in asrtLib]
freels'_split [in asrtLib]
freels'_imply_freels [in asrtLib]
freev_notabortm [in asrtLib]
free_stepn_sim_hold [in funsim]
free_step_sim_hold [in funsim]
free_false [in memory]
free_mono [in lmachLib]
free_nabt [in progtaskstepLib]
free_step_mem_join [in progtaskstepLib]
free_step [in progtaskstepLib]
free_join_disj [in progtaskstepLib]
free_local [in progtaskstepLib]
free_inconsistent [in progtaskstepLib]
free_consistent [in progtaskstepLib]
free_sub [in progtaskstepLib]
free_get [in progtaskstepLib]
free_intro [in asrtLib]
free_intro_aux2 [in asrtLib]
free_intro_aux1 [in asrtLib]
free_locality2 [in asrtLib]
free_locality2' [in asrtLib]
free_exchage [in asrtLib]
free_exchange' [in asrtLib]
free_locality [in asrtLib]
free_locality_pre [in asrtLib]
free_frame_prop [in asrtLib]
fresh_exist [in memory]
fresh_mono [in memory]
fresh_implies_fresh_index [in lmachLib]
fresh_join [in tst_prop]
frm_asrt_prop [in ruleLib]
fu [in cancel_absdata]
funbody_inos [in tst_prop]
funbody'_inos [in lemmasfortoptheo]
fun_free_comp [in funsim]
fun_free_ignore [in funsim]
fun_seq_comp [in funsim]
fun_goodks [in tst_prop]


G

GAarray_imp_length_P [in sep_pure]
GAarray_imp_length [in sep_pure]
genv_introexint_rule_sound [in simplrulesound]
genv_introexint_rule_sound_aux [in simplrulesound]
genv_introret_rule_sound [in simplrulesound]
genv_introret_rule_sound_aux [in simplrulesound]
getaddr_exist [in asrtLib]
getaddr_nil_empenv [in asrtLib]
GetHWait_In [in OSMutex_common]
getoff_mono [in lmachLib]
getop_del_hold [in PIF_aux]
getop_cre_hold [in PIF_aux]
get_last_prop [in OSMutex_common]
get_last_app [in OSEventRemovePure]
get_last_get_last_ptr_eq [in OSEventRemovePure]
get_last_ptr_ptr_in_ectrls_true [in OSEventRemovePure]
get_last_not_in_false [in OSEventRemovePure]
get_tcb_stat_mutex [in OSMutexPostPure]
get_tcb_stat [in OSQPostPure]
get_wellformedosq_in_setst' [in OSQPostPure]
get_wellformedosq_in_setst [in OSQPostPure]
get_last_tcb_ptr_prop' [in OSQPostPure]
get_last_tcb_ptr_prop [in OSQPostPure]
get_get_neq [in OSQPostPure]
get_highest_rdy [in oscore_common]
get_last_prop [in semdel_pure]
get_mem_eq [in tst_prop]
get_env_eq [in asrtLib]
get_env_addrlist_ex [in asrtLib]
get_ptomvallist_less_none [in asrtLib]
get_wellformedosq_end' [in OSQAcceptPure]
get_wellformedosq_end [in OSQAcceptPure]
get_none_joinisig [in cancel_absdata]
get_set_ideq [in cancel_absdata]
get_set_idneq [in cancel_absdata]
get_last_prop [in OSQDelPure]
get_last_ecb_ptr_eq [in OSTimeTickPure]
get_last_tcb_ptr_in [in OSTimeTickPure]
get_ectr_decompose [in OSTimeTickPure]
get_remove_exchange [in mathlib]
get_eidls_inlist [in mathlib]
GET_OP_remove_tid_irrel [in PIF_aux]
GET_OP_st_irrel [in PIF_aux]
get_tcb_stat_mbox [in Mbox_common]
get_last_prop [in Mbox_common]
ge_n_change [in progtaskstepLib]
ge_0_minus_1_in_range [in mathlib]
ge_zero_eq [in aux_for_hoare_lemmas]
ge0_z_nat_le [in symbolic_execution]
gooddecl_neq [in aux_for_hoare_lemmas]
gooddecl_off_add [in aux_for_hoare_lemmas]
gooddecl_gettype [in aux_for_hoare_lemmas]
gooddecl_neq [in symbolic_execution]
gooddecl_gettype [in symbolic_execution]
GoodFrm_sat_absop [in ruleLib]
goodfrm_prop [in ruleLib]
GoodFunAsrt_invlth_isr' [in InternalFunSpec]
GoodFunAsrt_sll [in InternalFunSpec]
GoodFunAsrt_sllseg [in InternalFunSpec]
GoodFunAsrt_ecbf_sll [in InternalFunSpec]
GoodFunAsrt_ecbf_sllseg [in InternalFunSpec]
GoodFunAsrt_qblkf_sll [in InternalFunSpec]
GoodFunAsrt_qblkf_sllseg [in InternalFunSpec]
GoodFunAsrt_tcbdllseg [in InternalFunSpec]
GoodFunAsrt_dllseg [in InternalFunSpec]
GoodFunAsrt_evsllseg [in InternalFunSpec]
GoodFunAsrt_AEventData [in InternalFunSpec]
GoodFunAsrt_AOSEvent [in InternalFunSpec]
GoodFunAsrt_Aarray [in InternalFunSpec]
GoodFunAsrt_Aarray' [in InternalFunSpec]
GoodFunAsrt_Astruct [in InternalFunSpec]
GoodFunAsrt_Astruct' [in InternalFunSpec]
GoodFunAstr_AEventNode [in InternalFunSpec]
Goodg_hmstepstar [in ruleLib]
goodinv [in inv_prop]
GoodInvAsrt_dllseg [in inv_prop]
GoodInvAsrt_AEventNode [in inv_prop]
GoodInvAsrt_Aarray [in inv_prop]
GoodInvAsrt_Aarray' [in inv_prop]
GoodInvAsrt_Astruct [in inv_prop]
GoodInvAsrt_Astruct' [in inv_prop]
goodinv_atoy [in inv_prop]
goodinv_aemp [in inv_prop]
goodI_sw_empO [in ruleLib]
GoodI_I [in hoare_tactics]
goodI_swinv_samet [in lemmasfortoptheo]
GoodI_SWINV_indom_curt [in lemmasfortoptheo]
goodks_int_call_inos [in tst_prop]
goodks_int_call_inos' [in tst_prop]
goodks_call_inos [in tst_prop]
goodks_int_inos [in tst_prop]
goodks_int_int_inos [in tst_prop]
goodks_int_inos' [in tst_prop]
goodks_intcont_os [in tst_prop]
goodks_callcont_os [in tst_prop]
goodks_intcont_still [in tst_prop]
goodks_callcont_still [in tst_prop]
goodks_noinos_noos [in tst_prop]
GoodP_to_S [in lemmasfortoptheo]
GoodSched_GetHPrio [in hoare_tactics]
GoodStmt_ndym [in ruleLib]
Goodstmt_good_clt_stmt [in progtaskstepLib]
goodstmt_n_dym_com_s [in lemmasfortoptheo]
GoodStmt_to_GoodStmt' [in lemmasfortoptheo]
goodstmt'_n_dym_com_s [in lemmasfortoptheo]
good_i [in ucos_correctaux]
good_fun_internal [in ucos_correctaux]
good_fun_api [in ucos_correctaux]
good_dl_le_care [in progtaskstepLib]
good_dl_le_step' [in progtaskstepLib]
good_dl_le_init' [in progtaskstepLib]
good_clt_scont_callcont [in progtaskstepLib]
good_dl_add [in tst_prop]
good_inv_prop_iret [in tst_prop]
good_inv_prop' [in tst_prop]
good_inv [in tst_prop]
good_fun_asrt_absop [in asrtLib]
good_frame_asrt_prop [in asrtLib]
good_inv_prop [in asrtLib]
GOOD_ST_Prop [in PIF_aux]
GOOD_ST_Prop' [in PIF_aux]
good_clt_imp [in PIF_aux]
good_frm_AOSRdyTblGrp [in sep_pure]
good_frm_AOSRdyGrp [in sep_pure]
good_frm_AOSRdyTbl [in sep_pure]
good_frm_AOSTCBFreeList [in sep_pure]
good_frm_AOSTCBList [in sep_pure]
good_frm_AGVars [in sep_pure]
good_frm_AOSTime [in sep_pure]
good_frm_AOSIntNesting [in sep_pure]
good_frm_AOSTCBPrioTbl [in sep_pure]
good_frm_AOSUnMapTbl [in sep_pure]
good_frm_AOSMapTbl [in sep_pure]
good_frm_AMsgQList [in sep_pure]
good_frm_EventList' [in sep_pure]
good_frm_AOSQFreeBlk [in sep_pure]
good_frm_AOSQFreeList [in sep_pure]
good_frm_qblkf_sll [in sep_pure]
good_frm_qblkf_sllseg [in sep_pure]
good_frm_AOSEventFreeList [in sep_pure]
good_frm_ecbfsll [in sep_pure]
good_frm_ecbfslleg [in sep_pure]
good_frm_mqsllseg [in sep_pure]
good_frm_amsgnode [in sep_pure]
good_frm_AMsgData [in sep_pure]
good_frm_AOSQCtr [in sep_pure]
good_frm_AOSQBlk [in sep_pure]
good_frm_AOSEvent [in sep_pure]
good_frm_node [in sep_pure]
good_frm_AOSEventTbl [in sep_pure]
good_frm_ptr [in sep_pure]
good_frm_lvar [in sep_pure]
good_frm_gvar [in sep_pure]
good_frm_absop [in sep_pure]
good_frm_pure [in sep_pure]
good_frm_garray [in sep_pure]
good_frm_array [in sep_pure]
good_frm_array' [in sep_pure]
good_frm_tcbdllseg [in sep_pure]
good_frm_dllseg [in sep_pure]
good_frm_sll [in sep_pure]
good_frm_sllseg [in sep_pure]
good_frm_astruct [in sep_pure]
good_frm_astruct' [in sep_pure]
good_frm_lenv [in sep_pure]
good_frm_aemp [in sep_pure]
good_frm_ex [in sep_pure]
good_frm_star [in sep_pure]
gvar_off_zero [in oscore_common]
gvar_rv [in symbolic_execution]
gvar_rv' [in symbolic_execution]
gvar_to_lv [in symbolic_execution]


H

hapistep_eqdomO [in progtaskstepLib]
hapistep_AddKsToTail [in progtaskstepLib]
hapistep_tidsame [in progtaskstepLib]
hapistep_goodcode [in PIF_aux]
hapistep1_locality [in progtaskstepLib]
higherint_update_eq [in tst_prop]
highest_rdy_eq [in oscore_common]
highest_rdy_eq' [in oscore_common]
hmstepstart_dom_exprop [in ruleLib]
hmstepstar_eqdomO [in ruleLib]
hmstepstar_seq [in conseqsound]
hmstepstar_tidsame [in progtaskstepLib]
hmstepstar_trans [in asrtLib]
hmstepS_One [in cancel_absdata]
hmstep_locality [in ruleLib]
hmstep_eqdomO [in ruleLib]
hmstep_disj [in progtaskstepLib]
hmstep_locality' [in progtaskstepLib]
hmstep_locality [in progtaskstepLib]
hmstep_tidsame [in progtaskstepLib]
hmstep_merge_emp [in absop_rules]
hmstep1_disj [in progtaskstepLib]
hmstestar_disj [in asrtLib]
hn_tlmatch_abt [in progtaskstepLib]
hoare_disj_afalse_r_pre [in hoare_tactics]
hoare_disj_afalseP_l_pre [in hoare_tactics]
hoare_disj_afalseP_r_pre [in hoare_tactics]
hoare_disj_afalse_l_pre [in hoare_tactics]
hoare_pure_gen' [in oscore_common]
hoare_pure_gen [in oscore_common]
hpstepev_eqdomTO [in progtaskstepLib]
hpstepev_eqdomto [in progtaskstepLib]
hpstepstar_goodcode_h [in PIF_aux]
hpstep_star [in progtaskstepLib]
hpstep_eqdomO [in progtaskstepLib]
hpstep_eqdomto [in progtaskstepLib]
hpstep_pif_hold [in PIF_aux]
hpstep_wpif_hold [in PIF_aux]
hpstep_inv_prop_hold [in PIF_aux]
hpstep_goodcode_goodapi [in PIF_aux]
hpstep_goodcode_h [in PIF_aux]
hret_spec [in lemmasfortoptheo]
Hstepstar_with_ev [in etraceref]
Hstepstar_no_ev [in etraceref]
htistep_eqdomO [in progtaskstepLib]
htstepevstar_tidsame [in progtaskstepLib]
htstepstar_compose_tail [in ruleLib]
htstepstar_tidsame [in progtaskstepLib]
htstep_locality [in progtaskstepLib]
htstep_eqdomO [in progtaskstepLib]
htstep_locality' [in progtaskstepLib]
htstep_AddKsToTail [in progtaskstepLib]
htstep_tidsame [in progtaskstepLib]
htstep_goodcode_h [in PIF_aux]
htstep1_locality [in progtaskstepLib]
ht.and_xy_x [in mathlib]
ht.a_mult_b_ge_b [in mathlib]
ht.a_div_b_multi_b_plus_b_ge_a [in mathlib]
ht.disj_star_elim'' [in mathlib]
ht.div_in_intrange [in mathlib]
ht.div_lt_lt [in mathlib]
ht.if_eq_true_cond_is_true [in mathlib]
ht.int_not_0_sz_not_0 [in mathlib]
ht.le_is_ge [in mathlib]
ht.lt_is_gt [in mathlib]
ht.lt_imply_le [in mathlib]
ht.mod_0_div_eq_eq [in mathlib]
ht.nthval'_has_value [in mathlib]
h_has_same_msg [in OSQAcceptPure]


I

identity_step_msim_hold [in ruleLib]
identspec.beq_false_neq [in memory]
identspec.beq_true_eq [in memory]
identspec.blt_beq_dec [in memory]
identspec.blt_asym [in memory]
identspec.blt_irrefl [in memory]
identspec.blt_trans [in memory]
identspec.eq_beq_true [in memory]
identspec.neq_beq_false [in memory]
idle_in_rtbl_hold' [in OSMutexPostPure]
idle_in_rtbl_hold' [in OSQPostPure]
idle_in_rtbl_hold [in mathlib]
id_nth_eq [in aux_for_hoare_lemmas]
id_nth'_suc [in aux_for_hoare_lemmas]
id_nth_ge [in aux_for_hoare_lemmas]
id_nth_ueq_0 [in symbolic_execution]
id_nth_eq_0 [in symbolic_execution]
id_nth_eq [in symbolic_execution]
id_nth'_suc [in symbolic_execution]
id_nth_ge [in symbolic_execution]
ifE [in OSMutex_common]
iff_intro_swap [in LibTactics]
ift_rule_sound [in ifsound]
ift_rule'' [in hoare_tactics]
ift_rule' [in hoare_tactics]
ift_rule_general [in hoare_tactics]
ift_rule_general' [in sem_lab]
if_rule_sound [in ifsound]
if_rule2' [in hoare_lemmas]
if_rule2 [in hoare_lemmas]
if_rule' [in hoare_lemmas]
if_true_false_eq_false_intro [in type_val_match]
if_true_false_eq_false_elim [in type_val_match]
if_true_false_eq_true_intro [in type_val_match]
if_true_false_eq_true_elim [in type_val_match]
ih_no_lvar' [in ToyIntPure]
ih_no_lvar [in OSTimeTickPure]
ImplMonoL [in tacticsforseplog]
ImplMonoR [in tacticsforseplog]
imp_rl_priotbl_p [in common]
imp_isrclr [in common]
incl_same_head [in Coqlib]
incl_app_inv_r [in Coqlib]
incl_app_inv_l [in Coqlib]
incl_cons_inv [in Coqlib]
indom_join_a2b [in OSMutex_common]
indom_eq_join_eq [in mathlib]
infrules_swap_r [in sem_lab]
infrules_swap_l [in sem_lab]
InitAemp [in tst_prop]
inittasks_good_t_ks [in tst_prop]
init_mem_get_some [in lmachLib]
init_mem_not_in_dom [in lmachLib]
init_goodis [in lemmasfortoptheo]
init_empisr [in tst_prop]
init_emple [in tst_prop]
init_tst_oemp [in tst_prop]
init_rdy_empm [in tst_prop]
init_goodks_h' [in PIF_aux]
init_goodks_h [in PIF_aux]
inj_proj_bytes [in memdata]
inlist_ex [in mathlib]
inos_int' [in progtaskstepLib]
inos_step_still [in progtaskstepLib]
inos_lift [in lemmasfortoptheo]
inos_call [in tst_prop]
inos_call' [in tst_prop]
inos_int [in tst_prop]
inos_sw_still [in tst_prop]
insert_star [in aux_for_hoare_lemmas]
insert_star [in symbolic_execution]
intandcomm [in OSMutex_common]
intcbnotvhold [in OSMutex_common]
intcont_dec [in progtaskstepLib]
intcont_ndym [in progtaskstepLib]
intcont_kcall_intcont [in progtaskstepLib]
intcont_notnone_callcont_none [in progtaskstepLib]
intcont_calcont_not_none [in contLib]
intcont_addkcall_imply_intcont_addkcall_exist [in contLib]
intcont_addkcall_imply_intcont [in contLib]
intcont_addkcall_exist [in contLib]
intcont_intcont_none [in contLib]
intcont_some_kcall_none [in contLib]
intcont_none [in contLib]
intcont_nont_addstmt_prev [in contLib]
intcont_none_addcont [in contLib]
intcont_none_addstmsts_rev [in contLib]
intcont_none_addstmts [in contLib]
intcont_some_addstmts [in contLib]
intcont_some_addcont [in contLib]
intcont_local [in tst_prop]
inteq_has_value [in OSMutex_common]
intlemmaf [in OSMutex_common]
intlemmag [in OSMutex_common]
intlemma1 [in OSMutex_common]
intlemma1 [in MboxCreatePure]
intlemma11 [in OSMutex_common]
intlemma13 [in OSMutex_common]
intlt2intlt [in OSMutex_common]
intlt2nat [in OSMutex_common]
IntMethSim [in lemmasfortoptheo]
intorcomm [in OSMutex_common]
IntSeq' [in lemmasfortoptheo]
IntSeq'' [in lemmasfortoptheo]
int_ltu_maxq_eq [in OSQCreatePure]
int_ltu_zero_notbool_zero_true [in OSMutex_common]
int_ltu_zero_zero_false [in OSMutex_common]
int_ltu_zero_notbool_one_false [in OSMutex_common]
int_ltu_zero_one_true [in OSMutex_common]
int_ltu_prop [in OSMutex_common]
int_aux'' [in OSMutex_common]
int_aux' [in OSMutex_common]
int_auxxx [in OSMutex_common]
int_eq_true_eq [in OSEventRemovePure]
int_nabt_lift [in progtaskstepLib]
int_mem_trans [in progtaskstepLib]
int_bpr'_to_bpr [in lemmasfortoptheo]
int_ndymint_false [in lemmasfortoptheo]
int_inos_sw_still [in tst_prop]
int_lift_rule [in tst_prop]
int_wordsize_divides_modulus [in Integers]
int_eq_dec [in IntBool]
int_eq_false_false [in OSTimeTickPure]
int_dec_zero_one [in OSTimeTickPure]
int_not_shrl_and [in mathlib]
int_ltu_neq_zero [in mathlib]
int_ltu_eq_false [in mathlib]
int_add_lt_max [in mathlib]
int_ltu_shru_ltu [in mathlib]
int_nat_ltu_lt [in mathlib]
int_list_length_dec [in mathlib]
int_minus4_mod4 [in mathlib]
int_divu_zero [in mathlib]
int_ltu_false_eq0 [in mathlib]
int_ltu_true [in mathlib]
int_eq_false_ltu [in mathlib]
int_or_zero_split [in mathlib]
int_unsigned_inj [in mathlib]
int_usigned_tcb_range [in mathlib]
Int_eq_false_Vptr_neq [in mathlib]
int_unsigned_or_prop' [in mathlib]
int_unsigned_le_z2nat_lt [in mathlib]
int_iwordsize_gt_3 [in mathlib]
int_lemma1 [in mathlib]
int_unsigned_or_prop [in mathlib]
int_usign_eq [in mathlib]
int_true_le255 [in mathlib]
int_land_zero [in mathlib]
int_aux [in mathlib]
int_not_leq [in mathlib]
int_count_eq [in aux_for_hoare_lemmas]
int_Z_lt [in aux_for_hoare_lemmas]
Int_i2_i_1_iftrue [in sep_pure]
Int_i2_i_1 [in sep_pure]
int_Z_ltu [in symbolic_execution]
Int_modu_to_Z_mod [in symbolic_execution]
Int_div_to_Z_div [in symbolic_execution]
int16_max_unsigned_val [in type_val_match]
int32_inj_neq_Vundef [in sep_pure]
Int64.bits_ofwords [in Integers]
Int64.bits_hiword [in Integers]
Int64.bits_loword [in Integers]
Int64.bits_shr' [in Integers]
Int64.bits_shru' [in Integers]
Int64.bits_shl' [in Integers]
Int64.decompose_le [in Integers]
Int64.decompose_lt [in Integers]
Int64.decompose_leu [in Integers]
Int64.decompose_ltu [in Integers]
Int64.decompose_mul_2 [in Integers]
Int64.decompose_mul [in Integers]
Int64.decompose_sub' [in Integers]
Int64.decompose_sub [in Integers]
Int64.decompose_add [in Integers]
Int64.decompose_shr_2 [in Integers]
Int64.decompose_shr_1 [in Integers]
Int64.decompose_shru_2 [in Integers]
Int64.decompose_shru_1 [in Integers]
Int64.decompose_shl_2 [in Integers]
Int64.decompose_shl_1 [in Integers]
Int64.decompose_not [in Integers]
Int64.decompose_xor [in Integers]
Int64.decompose_or [in Integers]
Int64.decompose_and [in Integers]
Int64.decompose_bitwise_binop [in Integers]
Int64.eqm_mul_2p32 [in Integers]
Int64.hi_ofwords [in Integers]
Int64.lo_ofwords [in Integers]
Int64.mul'_mulhu [in Integers]
Int64.ofwords_add'' [in Integers]
Int64.ofwords_add' [in Integers]
Int64.ofwords_add [in Integers]
Int64.ofwords_recompose [in Integers]
int8ule255 [in OSMutex_common]
int8_range_nat [in mathlib]
int8_neq0_ex [in mathlib]
invisr_imply_noisr' [in tst_prop]
invisr_imply_noisr [in tst_prop]
invlth_isr_invlth_isr'_imp [in OSIntExitPure]
invlth_isr_minus' [in tst_prop]
invlth_isr_minus [in tst_prop]
invlth_isr_add_iret [in tst_prop]
invlth_add_sinum' [in tst_prop]
invlth_divide [in tst_prop]
invlth_add_sinum [in tst_prop]
invlth_isr_add' [in tst_prop]
invlth_isr_add [in tst_prop]
invnoisr_imply_isr' [in derivedrules]
invprop [in inv_prop]
invprop_atoyinv [in inv_prop]
invprop_aemp [in inv_prop]
inv_isr_irrev_prop_noempisr [in tst_prop]
inv_noisr_irrev_prop_enint [in tst_prop]
inv_ncare_le [in tst_prop]
inv_ncare_ab [in tst_prop]
inv_substask_emple [in tst_prop]
inv_isr_irrev_prop'' [in tst_prop]
inv_isr_irrev_prop' [in tst_prop]
inv_isr_prop [in asrtLib]
inv_destr [in asrtLib]
inv_simpl [in asrtLib]
INV_irrev_prop [in asrtLib]
inv_noisr_irrev_prop [in asrtLib]
inv_isr_irrev_prop [in asrtLib]
inv_precise_imply_eqo [in asrtLib]
inv_precise_imply_eqm [in asrtLib]
inv_precise_prop [in asrtLib]
in_ptbl_no_ct_get [in OSEventTaskRdyPure]
in_list_repeat [in Coqlib]
in_app [in Coqlib]
in_cns [in Coqlib]
in_wtset_rm_notin [in OSQPostPure]
in_remove_tid' [in OSTimeTickPure]
in_remove_tid [in OSTimeTickPure]
in_neq_remove_in [in OSTimeTickPure]
in_remove_in [in OSTimeTickPure]
in_remove_tid_false [in OSTimeTickPure]
in_TCBList_P_TCBNode_P [in OSTimeTickPure]
in_get_eidls [in mathlib]
in_decllist_field_offsetfld_some [in aux_for_hoare_lemmas]
In_remove_tid_false [in PIF_aux]
In_remove_tid' [in PIF_aux]
In_remove_tid [in PIF_aux]
iret_spec [in tst_prop]
iret_rule' [in derivedrules]
IRINV_irrev_prop [in asrtLib]
IsFcall_kstop [in asrtLib]
isiret_nabt [in progtaskstepLib]
isptr_zh [in OSMutex_common]
isptr_val_inj_vundef [in OSEventRemovePure]
isptr_vundef1 [in OSEventRemovePure]
isptr_zh [in OSQPostPure]
isptr_zh [in OSQPendProof]
isptr_is_definitely_ptr [in laby]
isptr_is_definitely_ptr [in lab]
isptr_ecbf_sllseg [in inv_prop]
isptr_ecbf_sll [in inv_prop]
isptr_list_tail_add [in mathlib]
isptr_length_nth [in mathlib]
isptr_val_inj_false [in mathlib]
isptr_vundef_not [in mathlib]
isptr_vundef2 [in mathlib]
isptr_val_inj_neqvundef [in sep_pure]
isptr_pointer_intro [in sep_pure]
isptr_match_eq_true [in sep_pure]
isptr_neq_notint_vundef [in sep_pure]
isptr_neq_vundef [in sep_pure]
isptr2_bool_and [in sep_pure]
isptr2_bool_not_vundef [in sep_pure]
isrclr_imp [in common]
isrete_nabt [in progtaskstepLib]
isret_nabt [in progtaskstepLib]
isrnclear_nordy [in tst_prop]
isrupd_true_false [in OSTimeTickPure]
isrupd_empisr [in OSTimeTickPure]
isr_true_S_i_rev [in tst_prop]
isr_false_inv_eq [in tst_prop]
isr_true_S_i' [in tst_prop]
isr_true_aux [in tst_prop]
isr_false_sat1 [in tst_prop]
isr_false_eq [in tst_prop]
isr_false_inv_eq' [in derivedrules]
isr_false_inv_eq [in derivedrules]
isr_is_prop_emp [in common]
iswaiting_del_hold [in PIF_aux]
iswaiting_cre_hold [in PIF_aux]
iswaiting_set_ct_neq_hold [in PIF_aux]
is_tail_trans [in Coqlib]
is_tail_incl [in Coqlib]
is_tail_cons_left [in Coqlib]
is_tail_in [in Coqlib]
is_orderset_remove_mid [in asrtLib]
is_orderset_sub_l [in asrtLib]
is_orderset_sub_r [in asrtLib]
is_orderset_get'_none [in asrtLib]
is_isr_qblkf_sllseg [in inv_prop]
is_isr_tcbdllseg [in inv_prop]
is_isr_dllseg [in inv_prop]
is_isr_qblkf_evsllseg [in inv_prop]
is_isr_AEventNode [in inv_prop]
is_isr_AEventData [in inv_prop]
is_isr_AOSEvent [in inv_prop]
is_isr_irrel_sll [in inv_prop]
is_isr_irrel_sllseg [in inv_prop]
is_isr_irrel_Aarray [in inv_prop]
is_isr_irrel_Aarray' [in inv_prop]
is_isr_irrel_node [in inv_prop]
is_isr_irrel_Astruct [in inv_prop]
is_isr_irrel_Astruct' [in inv_prop]
is_length_neq_zero_elim [in mathlib]
is_owner_set_other [in PIF_aux]
IS_OWNER_P_remove_tid_irrel [in PIF_aux]
IS_OWNER_remove_tid_irrel' [in PIF_aux]
IS_OWNER_remove_tid_irrel [in PIF_aux]


J

joinisig_get_none [in cancel_absdata]
joinmem_eqg [in joinmemLib]
joinmem_get_disj [in joinmemLib]
joinmem_emple [in tst_prop]
joinmem_get_env_eq [in asrtLib]
joinmem_prop_in [in asrtLib]
joinmem_intro [in asrtLib]
joinsig_join_sig2 [in mathlib_join]
joinsig_join_sig2_my [in mathlib_join]
joinsig_join_ex [in mathlib_join]
joinsig_join_ex_my [in mathlib_join]
joinsig_get_minus [in OSTimeTickPure]
joinsig_in_other [in OSTimeTickPure]
joinsig_emp [in OSTimeTickPure]
joinsig_eq [in OSTimeTickPure]
joinsig_join_joinmergesig_eq_set [in OSTimeTickPure]
joinsig_joinsig_neq_ecb [in OSTimeTickPure]
joinsig_joinsig_neq [in OSTimeTickPure]
joinsig_false [in OSTimeTickPure]
joinsig_listset_con [in OSTimeTickPure]
joinsig_beq_addrval_false_get [in OSTimeTickPure]
joinsig_get_none [in mathlib]
joinsig_join_getnone [in mathlib]
joinsig_neq_get [in PIF_aux]
joinsig_joinsig_eq [in PIF_aux]
joinsig_join_ex [in Mbox_common]
joinsig_join_ex_my [in Mbox_common]
joinsig3_neqtid_joinsig [in OSTimeTickPure]
join_sig_minus_tcb [in OSEventTaskRdyPure]
join_eqenv [in joinmemLib]
join_join_getlenv [in joinmemLib]
join_join_getgenv [in joinmemLib]
join_eq_dom_env [in joinmemLib]
join_join_intro' [in joinmemLib]
join_swinv_prop_rev [in joinmemLib]
join_swinv_prop [in joinmemLib]
join_join_intro [in joinmemLib]
join_disj_disj [in joinmemLib]
join_memj_intro [in joinmemLib]
join_inject [in joinmemLib]
join_sub_inv_rev [in joinmemLib]
join_sub_inv [in joinmemLib]
join_frame_dis [in joinmemLib]
join_mjoin_intro_intro [in joinmemLib]
join_intro_r [in joinmemLib]
join_intro_l [in joinmemLib]
join_minus_r [in joinmemLib]
join_store_allocb [in memory]
join_allocb' [in memory]
join_allocb_emp [in memory]
join_store [in memory]
join_storebytes [in memory]
join_free [in memory]
join_freeb [in memory]
join_allocb [in memory]
join_join_disj_copy [in hoare_tactics]
join_mapstoval_store_allocb [in lmachLib]
join_mapstoval_allocb [in lmachLib]
join_mapstoval_allocb' [in lmachLib]
join_eqe [in progtaskstepLib]
join_prop2 [in mathlib_join]
join_prop2_my [in mathlib_join]
join_prop1 [in mathlib_join]
join_prop1_my [in mathlib_join]
join_prop2_my' [in sem_common]
join_store_join [in lemmasfortoptheo]
join_store [in lemmasfortoptheo]
join_store_general [in lemmasfortoptheo]
join_storebytes_storebytes [in lemmasfortoptheo]
join_prop_mutexpend'''' [in OSMutexPendPure1]
join_prop_mutexpend''' [in OSMutexPendPure1]
join_prop_mutexpend'' [in OSMutexPendPure1]
join_mutexpend' [in OSMutexPendPure1]
join_prop_mutexpend' [in OSMutexPendPure1]
join_prop_mutexpend [in OSMutexPendPure1]
join_join [in tst_prop]
join_join_join_move [in tst_prop]
join_join_disj [in tst_prop]
join_add_disj [in tst_prop]
join_disj_trans' [in tst_prop]
join_merge_minus [in tst_prop]
join_tst_wo_mem_eq [in tst_prop]
join_subs_merge_minus [in tst_prop]
join_subs_merge [in tst_prop]
join_eq_nmst [in tst_prop]
join_trans' [in tst_prop]
join_sub [in tst_prop]
join_disj_trans [in tst_prop]
join_disj [in tst_prop]
join_trans [in tst_prop]
join_tst_join [in tst_prop]
join_merge_eq [in tst_prop]
join_mem [in tst_prop]
join_disj_merge_join [in tst_prop]
join_merge_disj [in tst_prop]
join_merge_trans [in tst_prop]
join_minus_join_r [in tst_prop]
join_merge [in common]
join_sub_sub_sig_neq [in common]
join_sig_set_join [in cancel_absdata]
join_join_merge_1_ecb [in OSTimeTickPure]
join_sig_neq_set [in OSTimeTickPure]
join_sig_false [in OSTimeTickPure]
join_tcbjoin_joinsig_eq' [in OSTimeTickPure]
join_join_merge'_ecb [in OSTimeTickPure]
join_join_merge_ecb [in OSTimeTickPure]
join_join_merge' [in OSTimeTickPure]
join_join_merge [in OSTimeTickPure]
join_fst [in OSTimeTickPure]
join_join_disj [in OSTimeTickPure]
join_join_minus [in OSTimeTickPure]
join_indom_or [in mathlib]
join_indom_r [in mathlib]
join3mem_eqenv [in ruleLib]


K

kassignl_ex [in progtaskstepLib]
kassignl_addcont [in contLib]
kassignr_ex [in progtaskstepLib]
kassignr_addcont [in contLib]
kcall_ex [in progtaskstepLib]
kcall_addcont [in contLib]
kfuneval_ex2 [in progtaskstepLib]
kfuneval_ex1 [in progtaskstepLib]
kfuneval_addcont [in contLib]
kif_ex [in progtaskstepLib]
kif_addcont [in contLib]
kint_addcont [in contLib]
kret_ex [in progtaskstepLib]
kret_addcont [in contLib]
kseq_ex [in progtaskstepLib]
kseq_addcont [in contLib]
kseq_eq_addstmt [in contLib]
kseq_not_kstop [in contLib]
ks_puls_kcall_neq [in contLib]
ks_add_call_false [in tst_prop]
ks_add_int_false [in tst_prop]
kwhile_ex [in progtaskstepLib]
kwhile_addcont [in contLib]
kz.unsigned_ge0 [in mathlib]
kz.Zplus_minus [in mathlib]


L

LAarray_imp_length_P [in sep_pure]
LAarray_imp_length [in sep_pure]
last_eq [in OSEventTaskRdyPure]
last_get [in OSTimeTickPure]
last_remain [in mathlib]
lb_remove_mid [in asrtLib]
lb_sub_l [in asrtLib]
lb_sub_r [in asrtLib]
lb_blt_mid [in asrtLib]
lb_get_false [in OSTimeTickPure]
leb_int16max_true_intro [in type_val_match]
leb_bytemax_true_intro [in type_val_match]
leb_int16max_true_elim [in type_val_match]
leb_bytemax_true_elim [in type_val_match]
leftmoven [in mathlib]
lemma_trans_temp [in lemmasfortoptheo]
length_list_repeat [in Coqlib]
length_prop [in lmachLib]
length_list_repeat [in lmachLib]
length_addcont [in contLib]
length_length_dl_eq [in tst_prop]
length_dl_revlcons_add [in tst_prop]
length_tl_1 [in asrtLib]
length_tl_3 [in asrtLib]
length_inj_bytes [in memdata]
length_exists [in common]
length_encode_val [in common]
length_n_change [in mathlib]
length_zero_nil [in mathlib]
length8_ex [in mathlib]
length8_ex [in Mbox_common]
len_rev [in lmachLib]
len_eq_rev_eq [in progtaskstepLib]
len_exist_6 [in init_spec]
len_exist_5 [in init_spec]
len_exist_4 [in init_spec]
len_exist_3 [in init_spec]
len_exist_2 [in init_spec]
len_exist_1 [in init_spec]
len_exist_0 [in init_spec]
len_lt_update_get_eq [in hoare_assign]
le_beq_nat_false [in tst_prop]
le_change [in mathlib]
le255_and_le255 [in laby]
le255_and_le255 [in lab]
le65535shr8mod255self [in OSMutex_common]
le7_le7_range64 [in sempost_pure]
le7_le7_range64 [in Mbox_common]
listeq_addemp [in seplog_tactics]
listeq_getl [in seplog_tactics]
listeq_getl_sort [in seplog_tactics]
listeq_lowern [in seplog_tactics]
listeq_prop2 [in seplog_tactics]
listeq_comm [in seplog_tactics]
listeq_liftn [in seplog_tactics]
listeq_prop1 [in seplog_tactics]
listeq_addemp [in tacticsforseplog]
listeq_getl [in tacticsforseplog]
listeq_getl_sort [in tacticsforseplog]
listeq_lowern [in tacticsforseplog]
listeq_prop2 [in tacticsforseplog]
listeq_comm [in tacticsforseplog]
listeq_liftn [in tacticsforseplog]
listeq_prop1 [in tacticsforseplog]
ListSet_set_In_cons_intro [in joinmemLib]
ListSet_set_In_cons_elim [in joinmemLib]
ListSet_setIn_in_decllist_true [in asrtLib]
listsimplA_prop [in seplog_tactics]
listsimpl_prop [in seplog_tactics]
list_app_neq_nil [in OSEventTaskRdyPure]
list_getl_prop1 [in seplog_tactics]
list_dropn_prop4 [in seplog_tactics]
list_dropn_prop3 [in seplog_tactics]
list_dropn_prop2 [in seplog_tactics]
list_dropn_prop1 [in seplog_tactics]
list_liftn_prop1 [in seplog_tactics]
list_insert_prop1 [in seplog_tactics]
list_to_asrtTree_listsimpl [in seplog_tactics]
list_to_asrtTree_simpl_prop2 [in seplog_tactics]
list_to_asrtTree_prop2 [in seplog_tactics]
list_to_asrtTree_simpl_prop1 [in seplog_tactics]
list_to_asrtTree_prop1 [in seplog_tactics]
list_map_drop [in Coqlib]
list_drop_norepet [in Coqlib]
list_drop_incl [in Coqlib]
list_forall2_imply [in Coqlib]
list_forall2_length [in Coqlib]
list_forall2_app [in Coqlib]
list_norepet_append_left [in Coqlib]
list_norepet_append_right [in Coqlib]
list_norepet_append [in Coqlib]
list_norepet_app [in Coqlib]
list_norepet_append_commut [in Coqlib]
list_map_norepet [in Coqlib]
list_norepet_dec [in Coqlib]
list_disjoint_dec [in Coqlib]
list_disjoint_sym [in Coqlib]
list_disjoint_notin [in Coqlib]
list_disjoint_cons_right [in Coqlib]
list_disjoint_cons_left [in Coqlib]
list_disjoint_cons_r [in Coqlib]
list_disjoint_cons_l [in Coqlib]
list_in_insert [in Coqlib]
list_fold_right_spec [in Coqlib]
list_fold_right_eq [in Coqlib]
list_fold_left_app [in Coqlib]
list_append_map_inv [in Coqlib]
list_append_map [in Coqlib]
list_in_map_inv [in Coqlib]
list_length_map [in Coqlib]
list_map_nth [in Coqlib]
list_map_identity [in Coqlib]
list_map_compose [in Coqlib]
list_map_exten [in Coqlib]
list_nth_z_range [in Coqlib]
list_nth_z_map [in Coqlib]
list_nth_z_in [in Coqlib]
list_length_z_map [in Coqlib]
list_length_z_pos [in Coqlib]
list_length_z_cons [in Coqlib]
list_length_z_aux_shift [in Coqlib]
list_reverse_prop2 [in hoare_lemmas]
list_reverse_prop1 [in hoare_lemmas]
list_getl_prop1 [in tacticsforseplog]
list_dropn_prop4 [in tacticsforseplog]
list_dropn_prop3 [in tacticsforseplog]
list_dropn_prop2 [in tacticsforseplog]
list_dropn_prop1 [in tacticsforseplog]
list_liftn_prop1 [in tacticsforseplog]
list_insert_prop1 [in tacticsforseplog]
list_move [in tst_prop]
list_rev_prop [in asrtLib]
list_cs_noteq [in loststepLib]
list_is_noteq [in loststepLib]
list_app_in [in OSTimeTickPure]
list_split_last [in OSTimeTickPure]
list_gt_0_ex [in mathlib]
list_maxsize_le [in mathlib]
list_length_lt [in mathlib]
list_append_split [in mathlib]
list_cons_assoc [in mathlib]
list_sub_prop4 [in mathlib]
list_sub_prop3 [in mathlib]
list_sub_prop2 [in mathlib]
list_sub_prop1 [in mathlib]
list_prop1 [in mathlib]
list2asrtTree_prop2 [in tacticsforseplog]
list2asrtTree_prop1 [in tacticsforseplog]
loadbytes_mono [in lmachLib]
loadbytes_ptomvallist_memjoin [in tst_prop]
loadbytes_join [in tst_prop]
loadbytes_minus [in tst_prop]
loadbytes_local [in aux_for_hoare_lemmas]
loadm_mono [in lmachLib]
load_mem_deter [in lmachLib]
load_mem_mono [in lmachLib]
load_mono [in lmachLib]
load_local [in aux_for_hoare_lemmas]
losallocstep_irev_prog [in loststepLib]
losidstepstar_imply_losallocstepn [in loststepLib]
losidstepstar_imply_losidstepn [in loststepLib]
losstep_idmove_determistic [in loststepLib]
losstep_idmove_frame [in loststepLib]
lostabt_cont_frm [in loststepLib]
lostidstepstar_transitivity [in loststepLib]
loststepabt_cont_loststepabt' [in loststepLib]
loststepabt_cont_loststepabt [in loststepLib]
loststep_eqenv [in ruleLib]
loststep_code_prop [in ruleLib]
loststep_good_code_prop [in ruleLib]
loststep_no_api_local [in progtaskstepLib]
loststep_not_free [in progtaskstepLib]
loststep_not_alloc [in progtaskstepLib]
loststep_nofree_notabt [in progtaskstepLib]
loststep_no_api_elim [in lemmasfortoptheo]
loststep_cont_locality [in tst_prop]
loststep_keepG [in loststepLib]
loststep_keq_while_mono [in loststepLib]
loststep_cont_locality [in loststepLib]
loststep_genv_prev [in loststepLib]
loststep_frame_prop [in loststepLib]
loststep_join_notabt [in loststepLib]
loststep_join_notabt' [in loststepLib]
low_stat_q_impl_high_stat_q [in OSQPendPure]
low_stat_nordy_imp_high [in OSTimeDlyPure]
low_stat_rdy_imp_high [in OSTimeDlyPure]
low_stat_rdy_imp_high [in sempend_pure]
low_stat_nordy_imp_high [in Mbox_common]
low_stat_q_impl_high_stat_q [in Mbox_common]
lpstepev_goodks [in progtaskstepLib]
lpstepev_good_is_S [in tst_prop]
lpstep_goodks [in progtaskstepLib]
lpstep_eqg [in progtaskstepLib]
lpstep_good_is_S [in tst_prop]
ltac_something_show [in LibTactics]
ltac_something_hide [in LibTactics]
ltac_something_eq [in LibTactics]
ltac_database_provide [in LibTactics]
ltstepev_goodks [in progtaskstepLib]
ltstepev_n_dym_com_int_cd [in lemmasfortoptheo]
ltstep_eqg [in progtaskstepLib]
ltstep_goodks [in progtaskstepLib]
ltstep_no_exint [in progtaskstepLib]
ltstep_inos_nupd_clst [in progtaskstepLib]
ltstep_inos_loststep [in progtaskstepLib]
ltstep_n_dym_com_int_cd [in lemmasfortoptheo]
ltstep_good_is [in tst_prop]
ltstep_keepG [in asrtLib]
ltu_eq_false_ltu' [in OSMutex_common]
ltu_false_eq_false_ltu_true [in OSMutex_common]
ltu_zero_notbool_true [in mathlib]
ltu_zero_eq_zero [in mathlib]
ltu_eq_false [in mathlib]
ltu_ex_and [in mathlib]
ltu_zero_false_imp_eq_zero [in sep_pure]
lvar_rv [in symbolic_execution]
lvar_to_lv [in symbolic_execution]
lv_mapsto_to_rv [in symbolic_execution]
lzh_ecb_join_set_one [in OSMutex_common]
lzh_tcb_list_split [in OSMutex_common]
lzh_evsllseg_compose [in sem_lab]
lzh_if_then_rule [in sem_lab]
lzh_if_else_rule [in sem_lab]
lzh_if_rule' [in sem_lab]
l2 [in OSMutex_common]
l4 [in mathlib]
l5 [in mathlib]


M

MakeProtectWrapper [in OSMutex_common]
Make.add_and [in Integers]
Make.add_is_xor [in Integers]
Make.add_is_or [in Integers]
Make.add_neg_zero [in Integers]
Make.add_permut [in Integers]
Make.add_assoc [in Integers]
Make.add_zero_l [in Integers]
Make.add_zero [in Integers]
Make.add_commut [in Integers]
Make.add_signed [in Integers]
Make.add_unsigned [in Integers]
Make.and_interval [in Integers]
Make.and_positive [in Integers]
Make.and_shr_shru [in Integers]
Make.and_shr [in Integers]
Make.and_shru [in Integers]
Make.and_shl [in Integers]
Make.and_not_self [in Integers]
Make.and_le [in Integers]
Make.and_xor_distrib [in Integers]
Make.and_or_absorb [in Integers]
Make.and_or_distrib_l [in Integers]
Make.and_or_distrib [in Integers]
Make.and_idem [in Integers]
Make.and_mone_l [in Integers]
Make.and_mone [in Integers]
Make.and_zero_l [in Integers]
Make.and_zero [in Integers]
Make.and_assoc [in Integers]
Make.and_commut [in Integers]
Make.bits_size_4 [in Integers]
Make.bits_size_3 [in Integers]
Make.bits_size_2 [in Integers]
Make.bits_size_1 [in Integers]
Make.bits_sign_ext [in Integers]
Make.bits_zero_ext [in Integers]
Make.bits_ror [in Integers]
Make.bits_rol [in Integers]
Make.bits_shr [in Integers]
Make.bits_shru [in Integers]
Make.bits_shl [in Integers]
Make.bits_not [in Integers]
Make.bits_xor [in Integers]
Make.bits_or [in Integers]
Make.bits_and [in Integers]
Make.bits_le [in Integers]
Make.bits_signed [in Integers]
Make.bits_mone [in Integers]
Make.bits_one [in Integers]
Make.bits_zero [in Integers]
Make.bits_above [in Integers]
Make.bitwise_binop_rol [in Integers]
Make.bitwise_binop_shr [in Integers]
Make.bitwise_binop_shru [in Integers]
Make.bitwise_binop_shl [in Integers]
Make.divs_pow2 [in Integers]
Make.divs_mone [in Integers]
Make.divu_pow2 [in Integers]
Make.divu_one [in Integers]
Make.eqmod_sign_ext [in Integers]
Make.eqmod_sign_ext' [in Integers]
Make.eqmod_zero_ext [in Integers]
Make.eqmod_same_bits [in Integers]
Make.eqmod_divides [in Integers]
Make.eqmod_mult [in Integers]
Make.eqmod_sub [in Integers]
Make.eqmod_neg [in Integers]
Make.eqmod_add [in Integers]
Make.eqmod_mod [in Integers]
Make.eqmod_mod_eq [in Integers]
Make.eqmod_small_eq [in Integers]
Make.eqmod_trans [in Integers]
Make.eqmod_sym [in Integers]
Make.eqmod_refl2 [in Integers]
Make.eqmod_refl [in Integers]
Make.eqm_same_bits [in Integers]
Make.eqm_repr_eq [in Integers]
Make.eqm_signed_unsigned [in Integers]
Make.eqm_unsigned_repr_r [in Integers]
Make.eqm_unsigned_repr_l [in Integers]
Make.eqm_unsigned_repr [in Integers]
Make.eqm_samerepr [in Integers]
Make.eqm_mult [in Integers]
Make.eqm_sub [in Integers]
Make.eqm_neg [in Integers]
Make.eqm_add [in Integers]
Make.eqm_small_eq [in Integers]
Make.eqm_trans [in Integers]
Make.eqm_sym [in Integers]
Make.eqm_refl2 [in Integers]
Make.eqm_refl [in Integers]
Make.equal_same_bits [in Integers]
Make.eq_signed [in Integers]
Make.eq_false [in Integers]
Make.eq_true [in Integers]
Make.eq_spec [in Integers]
Make.eq_sym [in Integers]
Make.eq_dec [in Integers]
Make.half_modulus_pos [in Integers]
Make.half_modulus_modulus [in Integers]
Make.half_modulus_power [in Integers]
Make.is_power2_two_p [in Integers]
Make.is_power2_correct [in Integers]
Make.is_power2_range [in Integers]
Make.is_power2_rng [in Integers]
Make.ltu_range_test [in Integers]
Make.ltu_iwordsize_inv [in Integers]
Make.ltu_inv [in Integers]
Make.lt_sub_overflow [in Integers]
Make.max_signed_unsigned [in Integers]
Make.max_signed_pos [in Integers]
Make.min_signed_neg [in Integers]
Make.mkint_eq [in Integers]
Make.mods_mone [in Integers]
Make.mods_divs [in Integers]
Make.mods_divs_Euclid [in Integers]
Make.modulus_pos [in Integers]
Make.modulus_power [in Integers]
Make.modu_and [in Integers]
Make.modu_one [in Integers]
Make.modu_divu [in Integers]
Make.modu_divu_Euclid [in Integers]
Make.mul_pow2 [in Integers]
Make.mul_signed [in Integers]
Make.mul_add_distr_r [in Integers]
Make.mul_add_distr_l [in Integers]
Make.mul_assoc [in Integers]
Make.mul_mone [in Integers]
Make.mul_one [in Integers]
Make.mul_zero [in Integers]
Make.mul_commut [in Integers]
Make.negate_cmpu [in Integers]
Make.negate_cmp [in Integers]
Make.neg_not [in Integers]
Make.neg_mul_distr_r [in Integers]
Make.neg_mul_distr_l [in Integers]
Make.neg_add_distr [in Integers]
Make.neg_involutive [in Integers]
Make.neg_zero [in Integers]
Make.neg_repr [in Integers]
Make.notbool_istrue_isfalse [in Integers]
Make.notbool_isfalse_istrue [in Integers]
Make.not_neg [in Integers]
Make.not_and_or_not [in Integers]
Make.not_or_and_not [in Integers]
Make.not_mone [in Integers]
Make.not_zero [in Integers]
Make.not_involutive [in Integers]
Make.no_overlap_sound [in Integers]
Make.one_bits_decomp [in Integers]
Make.one_bits_range [in Integers]
Make.one_not_zero [in Integers]
Make.or_interval [in Integers]
Make.or_ror [in Integers]
Make.or_rolm [in Integers]
Make.or_shr [in Integers]
Make.or_shru [in Integers]
Make.or_shl [in Integers]
Make.or_not_self [in Integers]
Make.or_le [in Integers]
Make.or_and_absorb [in Integers]
Make.or_and_distrib_l [in Integers]
Make.or_and_distrib [in Integers]
Make.or_idem [in Integers]
Make.or_mone [in Integers]
Make.or_zero_l [in Integers]
Make.or_zero [in Integers]
Make.or_assoc [in Integers]
Make.or_commut [in Integers]
Make.P_mod_two_p_eq [in Integers]
Make.P_mod_two_p_range [in Integers]
Make.repr_signed [in Integers]
Make.repr_unsigned [in Integers]
Make.rolm_rolm [in Integers]
Make.rolm_zero [in Integers]
Make.rol_rol [in Integers]
Make.rol_xor [in Integers]
Make.rol_or [in Integers]
Make.rol_and [in Integers]
Make.rol_zero [in Integers]
Make.ror_rol_neg [in Integers]
Make.ror_rol [in Integers]
Make.same_bits_eq [in Integers]
Make.same_bits_eqm [in Integers]
Make.same_bits_eqmod [in Integers]
Make.shifted_or_is_add [in Integers]
Make.shl_mul [in Integers]
Make.shl_mul_two_p [in Integers]
Make.shl_rolm [in Integers]
Make.shl_shl [in Integers]
Make.shl_zero [in Integers]
Make.shru_div_two_p [in Integers]
Make.shru_rolm [in Integers]
Make.shru_lt_zero [in Integers]
Make.shru_shru [in Integers]
Make.shru_zero [in Integers]
Make.shrx_carry [in Integers]
Make.shrx_shr_2 [in Integers]
Make.shrx_shr [in Integers]
Make.shr_and_is_shru_and [in Integers]
Make.shr_shru_positive [in Integers]
Make.shr_div_two_p [in Integers]
Make.shr_lt_zero [in Integers]
Make.shr_and_shru_and [in Integers]
Make.shr_shr [in Integers]
Make.shr_zero [in Integers]
Make.signed_mone [in Integers]
Make.signed_zero [in Integers]
Make.signed_positive [in Integers]
Make.signed_eq_unsigned [in Integers]
Make.signed_repr [in Integers]
Make.signed_eq_zero [in Integers]
Make.signed_range [in Integers]
Make.signed_repr_eq [in Integers]
Make.sign_ext_range [in Integers]
Make.sign_ext_shr_shl [in Integers]
Make.sign_ext_equal_if_zero_equal [in Integers]
Make.sign_ext_zero_ext [in Integers]
Make.sign_ext_idem [in Integers]
Make.sign_ext_narrow [in Integers]
Make.sign_zero_ext_widen [in Integers]
Make.sign_ext_widen [in Integers]
Make.sign_ext_above [in Integers]
Make.sign_bit_of_unsigned [in Integers]
Make.size_xor [in Integers]
Make.size_or [in Integers]
Make.size_and [in Integers]
Make.size_interval_2 [in Integers]
Make.size_interval_1 [in Integers]
Make.size_range [in Integers]
Make.size_zero [in Integers]
Make.sub_borrow_add_carry [in Integers]
Make.sub_add_not_3 [in Integers]
Make.sub_add_not [in Integers]
Make.sub_signed [in Integers]
Make.sub_shifted [in Integers]
Make.sub_add_r [in Integers]
Make.sub_add_l [in Integers]
Make.sub_idem [in Integers]
Make.sub_add_opp [in Integers]
Make.sub_zero_r [in Integers]
Make.sub_zero_l [in Integers]
Make.swap_cmpu [in Integers]
Make.swap_cmp [in Integers]
Make.testbit_repr [in Integers]
Make.translate_cmp [in Integers]
Make.translate_lt [in Integers]
Make.translate_cmpu [in Integers]
Make.translate_ltu [in Integers]
Make.translate_eq [in Integers]
Make.two_p_range [in Integers]
Make.two_power_nat_infinity [in Integers]
Make.two_wordsize_max_unsigned [in Integers]
Make.unsigned_not [in Integers]
Make.unsigned_sub_borrow [in Integers]
Make.unsigned_add_either [in Integers]
Make.unsigned_add_carry [in Integers]
Make.unsigned_repr_wordsize [in Integers]
Make.unsigned_mone [in Integers]
Make.unsigned_one [in Integers]
Make.unsigned_zero [in Integers]
Make.unsigned_repr [in Integers]
Make.unsigned_eq_zero [in Integers]
Make.unsigned_range_2 [in Integers]
Make.unsigned_range [in Integers]
Make.unsigned_repr_eq [in Integers]
Make.wordsize_max_unsigned [in Integers]
Make.wordsize_pos [in Integers]
Make.xor_interval [in Integers]
Make.xor_shr [in Integers]
Make.xor_shru [in Integers]
Make.xor_shl [in Integers]
Make.xor_is_or [in Integers]
Make.xor_not_self [in Integers]
Make.xor_zero_equal [in Integers]
Make.xor_one_one [in Integers]
Make.xor_zero_one [in Integers]
Make.xor_idem [in Integers]
Make.xor_zero_l [in Integers]
Make.xor_zero [in Integers]
Make.xor_assoc [in Integers]
Make.xor_commut [in Integers]
Make.Zdecomp [in Integers]
Make.Zdiv_shift [in Integers]
Make.zero_ext_range [in Integers]
Make.zero_ext_shru_shl [in Integers]
Make.zero_ext_sign_ext [in Integers]
Make.zero_ext_idem [in Integers]
Make.zero_sign_ext_narrow [in Integers]
Make.zero_ext_narrow [in Integers]
Make.zero_ext_widen [in Integers]
Make.zero_ext_mod [in Integers]
Make.zero_ext_and [in Integers]
Make.zero_ext_above [in Integers]
Make.Ziter_succ [in Integers]
Make.Ziter_base [in Integers]
Make.Znatlike_ind [in Integers]
Make.Zquot_Zdiv [in Integers]
Make.Zshiftin_pos_ind [in Integers]
Make.Zshiftin_ind [in Integers]
Make.Zshiftin_inj [in Integers]
Make.Zshiftin_spec [in Integers]
Make.Zshiftl_mul_two_p [in Integers]
Make.Zshiftr_div_two_p [in Integers]
Make.Zsign_ext_spec [in Integers]
Make.Zsign_bit [in Integers]
Make.Zsize_monotone [in Integers]
Make.Zsize_interval_2 [in Integers]
Make.Zsize_interval_1 [in Integers]
Make.Zsize_shiftin [in Integers]
Make.Zsize_pos' [in Integers]
Make.Zsize_pos [in Integers]
Make.Ztestbit_size_2 [in Integers]
Make.Ztestbit_size_1 [in Integers]
Make.Ztestbit_two_p_m1 [in Integers]
Make.Ztestbit_mod_two_p [in Integers]
Make.Ztestbit_le [in Integers]
Make.Ztestbit_above_neg [in Integers]
Make.Ztestbit_above [in Integers]
Make.Ztestbit_succ [in Integers]
Make.Ztestbit_base [in Integers]
Make.Ztestbit_eq [in Integers]
Make.Ztestbit_shiftin_succ [in Integers]
Make.Ztestbit_shiftin_base [in Integers]
Make.Ztestbit_shiftin [in Integers]
Make.Ztestbit_m1 [in Integers]
Make.Ztestbit_1 [in Integers]
Make.Ztestbit_0 [in Integers]
Make.Zzero_ext_spec [in Integers]
Make.Z_one_bits_two_p [in Integers]
Make.Z_one_bits_zero [in Integers]
Make.Z_one_bits_range [in Integers]
Make.Z_one_bits_powerserie [in Integers]
Make.Z_add_is_or [in Integers]
Make.Z_one_complement [in Integers]
Make.Z_mod_modulus_eq [in Integers]
Make.Z_mod_modulus_range' [in Integers]
Make.Z_mod_modulus_range [in Integers]
MapFun.beq_t_bgt_f [in MapLib]
MapFun.beq_t_blt_f [in MapLib]
MapFun.beq_trans [in MapLib]
MapFun.beq_refl [in MapLib]
MapFun.beq_sym [in MapLib]
MapFun.beq_dec [in MapLib]
MapFun.bgt_t_beq_f [in MapLib]
MapFun.blt_beq_blt [in MapLib]
MapFun.blt_t_beq_f [in MapLib]
MapFun.blt_dec [in MapLib]
MapFun.compat_sub_r [in MapLib]
MapFun.compat_sub_l [in MapLib]
MapFun.compat_sym [in MapLib]
MapFun.compat_refl [in MapLib]
MapFun.disjoint_merge_subseteq [in Map]
MapFun.disjoint_commut [in Map]
MapFun.disjUnion_subseteq_right [in Map]
MapFun.disjUnion_subseteq_left [in Map]
MapFun.disjUnion_presv_eqDom [in Map]
MapFun.disjUnion_presv_in_dom [in Map]
MapFun.disjUnion_reshuffle [in Map]
MapFun.disjUnion_equ [in Map]
MapFun.disjUnion_unique [in Map]
MapFun.disjUnion_assoc_right_left [in Map]
MapFun.disjUnion_assoc_left_right [in Map]
MapFun.disjUnion_in_right [in Map]
MapFun.disjUnion_in_left [in Map]
MapFun.disjUnion_commut [in Map]
MapFun.disj_merge_unique_right [in Map]
MapFun.disj_merge_unique [in Map]
MapFun.disj_emp_B [in Map]
MapFun.disj_emp [in Map]
MapFun.disj_merge_ABC_CAB [in Map]
MapFun.disj_merge_ABC_BAC [in Map]
MapFun.disj_merge_assoc_right_left [in Map]
MapFun.disj_merge_assoc_left_right [in Map]
MapFun.disj_merge_B [in Map]
MapFun.disj_merge_A [in Map]
MapFun.disj_merge_disjUnion [in Map]
MapFun.disj_merge_commut [in Map]
MapFun.disj_x_merge_disj_right [in Map]
MapFun.disj_x_merge_disj_left [in Map]
MapFun.disj_merge_disj_right [in Map]
MapFun.disj_merge_disj_left [in Map]
MapFun.disj_remove_merge_merge_remove [in Map]
MapFun.disj_exclusive_right [in Map]
MapFun.disj_exclusive_left [in Map]
MapFun.disj_get_neq [in MapLib]
MapFun.disj_trans_sub [in MapLib]
MapFun.disj_comm [in MapLib]
MapFun.disj_set_disj_2 [in MapLib]
MapFun.disj_set_disj_1 [in MapLib]
MapFun.disj_meq_join [in MapLib]
MapFun.disj_merge_elim_lr [in MapLib]
MapFun.disj_merge_intro_lr [in MapLib]
MapFun.disj_merge_elim_r [in MapLib]
MapFun.disj_merge_intro_r [in MapLib]
MapFun.disj_merge_elim_l [in MapLib]
MapFun.disj_merge_intro_l [in MapLib]
MapFun.disj_compat [in MapLib]
MapFun.disj_meq_disj_l [in MapLib]
MapFun.disj_meq_disj_r [in MapLib]
MapFun.disj_indom [in MapLib]
MapFun.disj_sig [in MapLib]
MapFun.disj_sym [in MapLib]
MapFun.disj_emp_r [in MapLib]
MapFun.disj_emp_l [in MapLib]
MapFun.emp_disjUnion_unique [in Map]
MapFun.emp_sem [in MapLib]
MapFun.eqDom_disj_presv [in Map]
MapFun.eqDom_notin_presv [in Map]
MapFun.eqDom_disjUnion_right [in Map]
MapFun.eqDom_disjUnion_left [in Map]
MapFun.eqDom_merge [in Map]
MapFun.eqDom_indom_update_eq [in Map]
MapFun.eqDom_trans [in Map]
MapFun.eqDom_sym [in Map]
MapFun.eqDom_refl [in Map]
MapFun.eqdom_merge_set [in MapLib]
MapFun.equal_ext [in MapLib]
MapFun.eq_get [in Map]
MapFun.eq_dec [in MapLib]
MapFun.extend_presv_disjUnion_right [in Map]
MapFun.extend_presv_disjUnion_left [in Map]
MapFun.extend_presv_disj_right [in Map]
MapFun.extend_presv_disj_left [in Map]
MapFun.extensionality [in MapLib]
MapFun.ext_presv_mapsto [in Map]
MapFun.ext_mapsto [in Map]
MapFun.ext_in_dom [in Map]
MapFun.ext_emp_sglton [in Map]
MapFun.get_sub_get [in MapLib]
MapFun.get_indom [in MapLib]
MapFun.get_lookup [in MapLib]
MapFun.get_sig_some_eq' [in MapLib]
MapFun.get_sig_some_eq [in MapLib]
MapFun.get_a_sig_a' [in MapLib]
MapFun.get_a_sig_a [in MapLib]
MapFun.get_sig_none [in MapLib]
MapFun.get_sig_some [in MapLib]
MapFun.get_sig [in MapLib]
MapFun.get_set_same [in MapLib]
MapFun.get_dec [in MapLib]
MapFun.get'_set'_neq [in MapLib]
MapFun.get'_set' [in MapLib]
MapFun.index_beq_false_1 [in MapLib]
MapFun.indom_merge_elim [in MapLib]
MapFun.indom_merge_intro [in MapLib]
MapFun.indom_disj [in MapLib]
MapFun.indom_meq_indom [in MapLib]
MapFun.indom_sub_indom [in MapLib]
MapFun.indom_get [in MapLib]
MapFun.indom_lookup [in MapLib]
MapFun.in_right_in_merge [in Map]
MapFun.in_left_in_merge [in Map]
MapFun.in_merge_commut [in Map]
MapFun.in_merge_not_right_in_left [in Map]
MapFun.in_merge_not_left_in_right [in Map]
MapFun.in_merge_left_or_right [in Map]
MapFun.in_or_notin [in Map]
MapFun.in_not_notin [in Map]
MapFun.in_notlb [in MapLib]
MapFun.is_orderset_minus' [in MapLib]
MapFun.is_set_app' [in MapLib]
MapFun.is_orderset_set' [in MapLib]
MapFun.is_orderset_sig' [in MapLib]
MapFun.is_orderset_emp' [in MapLib]
MapFun.joinsig_merge_sig [in MapLib]
MapFun.joinsig_set_set [in MapLib]
MapFun.joinsig_set [in MapLib]
MapFun.join_get_get_neq [in MapLib]
MapFun.join_meq_eql [in MapLib]
MapFun.join_get_l [in MapLib]
MapFun.join_get_r [in MapLib]
MapFun.join_whole2part [in MapLib]
MapFun.join_join_disj_l [in MapLib]
MapFun.join_join_disj_r [in MapLib]
MapFun.join_assoc_spec_1 [in MapLib]
MapFun.join_assoc [in MapLib]
MapFun.join_meq_sub_1st [in MapLib]
MapFun.join_shift_l [in MapLib]
MapFun.join_joinsig_get [in MapLib]
MapFun.join_sig_get [in MapLib]
MapFun.join_index_beq_false [in MapLib]
MapFun.join_join_join3 [in MapLib]
MapFun.join_sub_sub [in MapLib]
MapFun.join_sub_minus [in MapLib]
MapFun.join_emp_eq [in MapLib]
MapFun.join_meq [in MapLib]
MapFun.join_unique_r [in MapLib]
MapFun.join_sig_set [in MapLib]
MapFun.join_emp [in MapLib]
MapFun.join_set_nindom_r [in MapLib]
MapFun.join_set_nindom_l [in MapLib]
MapFun.join_set_l_rev [in MapLib]
MapFun.join_set_r [in MapLib]
MapFun.join_set_l [in MapLib]
MapFun.join_get_or [in MapLib]
MapFun.join_lookup_or [in MapLib]
MapFun.join_merge_disj [in MapLib]
MapFun.join_get_get_r [in MapLib]
MapFun.join_get_get_l [in MapLib]
MapFun.join_lookup_lookup_r [in MapLib]
MapFun.join_lookup_lookup_l [in MapLib]
MapFun.join_unique [in MapLib]
MapFun.join_sub_r [in MapLib]
MapFun.join_sub_l [in MapLib]
MapFun.join_disj_meq [in MapLib]
MapFun.join_assoc_r [in MapLib]
MapFun.join_assoc_l [in MapLib]
MapFun.join_comm [in MapLib]
MapFun.join3_2join [in MapLib]
MapFun.join3_comm_132 [in MapLib]
MapFun.join3_comm_231 [in MapLib]
MapFun.join3_comm_312 [in MapLib]
MapFun.join3_comm_213 [in MapLib]
MapFun.join3_join_join [in MapLib]
MapFun.lb_minus' [in MapLib]
MapFun.lb_set'_gt [in MapLib]
MapFun.lb_set'_lt [in MapLib]
MapFun.lb_notin [in MapLib]
MapFun.lb_trans [in MapLib]
MapFun.lookup_merge_intro [in MapLib]
MapFun.lookup_merge_elim [in MapLib]
MapFun.lookup_meq_lookup [in MapLib]
MapFun.lookup_sub_lookup [in MapLib]
MapFun.lookup_indom [in MapLib]
MapFun.lookup_unique [in MapLib]
MapFun.lookup_get [in MapLib]
MapFun.lookup_emp [in MapLib]
MapFun.mapsto_subseteq_mapsto [in Map]
MapFun.mapsto_mapsto_put [in Map]
MapFun.mapsto_put_neq [in Map]
MapFun.mapsto_put_eq [in Map]
MapFun.mapsto_put [in Map]
MapFun.mapsto_indom [in Map]
MapFun.meq_merge_meq [in MapLib]
MapFun.meq_merge_emp_r [in MapLib]
MapFun.meq_merge_emp_l [in MapLib]
MapFun.meq_merge_assoc_r [in MapLib]
MapFun.meq_merge_assoc_l [in MapLib]
MapFun.meq_merge_sym [in MapLib]
MapFun.meq_eq [in MapLib]
MapFun.meq_sem [in MapLib]
MapFun.meq_trans [in MapLib]
MapFun.meq_sym [in MapLib]
MapFun.meq_refl [in MapLib]
MapFun.merge_assoc [in Map]
MapFun.merge_extends_map [in Map]
MapFun.merge_presv_indom_right [in Map]
MapFun.merge_presv_indom_left [in Map]
MapFun.merge_set_eq_2 [in MapLib]
MapFun.merge_set_eq_1 [in MapLib]
MapFun.merge_sub_intro [in MapLib]
MapFun.merge_sem [in MapLib]
MapFun.minus_disjUnion [in Map]
MapFun.minus_disjoint [in Map]
MapFun.minus_sem [in MapLib]
MapFun.my_join_disj [in MapLib]
MapFun.my_joinsig_set [in MapLib]
MapFun.my_join_sig_abc [in MapLib]
MapFun.my_joinsig_join_set [in MapLib]
MapFun.nid_remove [in Map]
MapFun.nindom_get [in MapLib]
MapFun.notin_left_notin_right_notin_merge [in Map]
MapFun.notin_merge_distr_right [in Map]
MapFun.notin_merge_distr_left [in Map]
MapFun.notin_not_in [in Map]
MapFun.not_in_merge_commut [in Map]
MapFun.not_notin_in [in Map]
MapFun.not_in_notin [in Map]
MapFun.option2false [in MapLib]
MapFun.option2val [in MapLib]
MapFun.putA_presv_nidB [in Map]
MapFun.put_xx_update [in Map]
MapFun.put_xy_commut [in Map]
MapFun.put_merge_merge_put [in Map]
MapFun.put_cancel_remove [in Map]
MapFun.put_unique [in Map]
MapFun.put_noninterfere [in Map]
MapFun.put_get_eq [in Map]
MapFun.removeX_presv_Y [in Map]
MapFun.remove_left_presv_disjUnion_right [in Map]
MapFun.remove_left_presv_disjUnion_left [in Map]
MapFun.remove_merge_merge_remove_right [in Map]
MapFun.remove_presv_disj_right [in Map]
MapFun.remove_presv_disj_left [in Map]
MapFun.remove_ext_ext_remove [in Map]
MapFun.remove_cancel_put [in Map]
MapFun.remove_nothing [in Map]
MapFun.remove_shrinks_dom [in Map]
MapFun.set_emp_sig [in MapLib]
MapFun.set_sig [in MapLib]
MapFun.set_a_get_a' [in MapLib]
MapFun.set_a_get_a [in MapLib]
MapFun.set_sem [in MapLib]
MapFun.set_sem_old [in MapLib]
MapFun.sig_sem [in MapLib]
MapFun.split_sglton_free [in Map]
MapFun.subDom_inDom_update [in Map]
MapFun.subDom_update [in Map]
MapFun.subDom_trans [in Map]
MapFun.subseteq_split [in Map]
MapFun.subseteq_transitivity [in Map]
MapFun.subset_unique_map [in Map]
MapFun.sub_exists_join [in MapLib]
MapFun.sub_merge_intro_r [in MapLib]
MapFun.sub_merge_intro_l [in MapLib]
MapFun.sub_merge_elim_r [in MapLib]
MapFun.sub_merge_elim_l [in MapLib]
MapFun.sub_merge_r [in MapLib]
MapFun.sub_merge_l [in MapLib]
MapFun.sub_compat [in MapLib]
MapFun.sub_sig [in MapLib]
MapFun.sub_trans [in MapLib]
MapFun.sub_asym [in MapLib]
MapFun.sub_refl [in MapLib]
MapFun.unit_emp_disjUnion [in Map]
MapFun.unit_emp_merge_B [in Map]
MapFun.unit_emp_merge [in Map]
MapFun.update_presv_disjUnion_right [in Map]
MapFun.update_presv_disjUnion_left [in Map]
MapFun.update_presv_disj_right [in Map]
MapFun.update_presv_disj_left [in Map]
mapstoval_exist [in lmachLib]
mapstoval_load_vptr [in tst_prop]
mapstoval_load [in tst_prop]
mapstoval_loadbytes [in tst_prop]
mapstoval_disj_false [in common]
mapstoval_vptr_eq1 [in inv_prop]
mapstoval_vptr_eq [in inv_prop]
mapstoval_mem_eq [in inv_prop]
mapstoval_rule_type_val_match_eq [in inv_prop]
mapsto_load_eq [in tst_prop]
match_loadbytes [in lmachLib]
math_MN_le_max [in mathlib]
math_MN_le_int16 [in mathlib]
math_MN_max_prop [in mathlib]
math_le_int16 [in mathlib]
math_ltu_false_false [in mathlib]
math_int_lt_eq_split'' [in mathlib]
math_int_lt_eq_split' [in mathlib]
math_int_lt_eq_split [in mathlib]
math_int_eq_len [in mathlib]
math_inc_eq_ltu [in mathlib]
math_max_le_q [in mathlib]
math_length_int_eq [in mathlib]
math_len_le_and [in mathlib]
math_le_max_q [in mathlib]
math_prio_eq [in mathlib]
math_mapval_core_prop [in mathlib]
math_nth_8_eq_zero' [in mathlib]
math_pry_neq_prio_neq [in mathlib]
math_nth_8_eq_zero2 [in mathlib]
math_out_start_eq' [in mathlib]
math_xyz_prop4' [in mathlib]
math_xyz_prop3' [in mathlib]
math_xyz_prop2' [in mathlib]
math_le_trans [in mathlib]
math_nth_8_eq_zero [in mathlib]
math_nth_8_eq_shl [in mathlib]
math_nth_8_gt_zero [in mathlib]
math_nth_8_neq_zero' [in mathlib]
math_nth_8_neq_zero [in mathlib]
math_nth_8_neq_not [in mathlib]
math_xy_prio_cons [in mathlib]
math_prio_neq_zero [in mathlib]
math_prop_divu_ltmod [in mathlib]
math_prop_divu_zle [in mathlib]
math_prop_ltu_mod [in mathlib]
math_highest_prio_select [in mathlib]
math_prio_8_lt [in mathlib]
math_unmap_core_prop [in mathlib]
math_and_shf_ltu_true [in mathlib]
math_unmap_get_y [in mathlib]
math_88_prio_range [in mathlib]
math_shrl_3_eq [in mathlib]
math_8range_eqy [in mathlib]
math_64_le_8 [in mathlib]
math_prop_int_zero_eq [in mathlib]
math_8_255_eq [in mathlib]
math_unmap_range [in mathlib]
math_prop_ltu_20 [in mathlib]
math_prop_int_modu [in mathlib]
math_lt_mod_lt [in mathlib]
math_out_start_eq [in mathlib]
math_xyz_prop3 [in mathlib]
math_xyz_prop2 [in mathlib]
math_le_xyz [in mathlib]
math_prop_eq [in mathlib]
math_prop_neq_zero2 [in mathlib]
math_lshift_neq_zero [in mathlib]
math_prop_neq_zero [in mathlib]
math_and_zero [in mathlib]
math_prop_eq0 [in mathlib]
math_prop_and [in mathlib]
math_des88 [in mathlib]
math_prop_l3 [in mathlib]
math_prop_l2 [in mathlib]
math_prop_l1 [in mathlib]
max_signed_val [in IntLib]
max_unsigned_val [in IntLib]
max_unsigned_gt0 [in IntLib]
max_signed_gt0 [in IntLib]
MboxAcceptProof [in MboxAcceptProof]
MboxCreateProof [in MboxCreateProof]
MboxDelProof [in MboxDelProof]
MboxPendProof [in MboxPendProof]
MboxPostProof [in MboxPostProof]
mbox_pend_part0 [in MboxPendPart2]
mbox_post_part0 [in MboxPostProof]
mbox_post_part6 [in MboxPostProof]
mbox_post_part5 [in MboxPostProof]
mbox_post_part4 [in MboxPostProof]
mbox_post_part3 [in MboxPostProof]
mbox_post_part2 [in MboxPostProof]
mbox_post_part1 [in MboxPostProof]
MBox_Create_TCB_prop [in MboxCreatePure]
mbox_rh_tcblist_ecblist_p_hold [in Mbox_common]
mbox_acpt_rh_tcblist_ecblist_p_hold [in Mbox_common]
MemMod_join_sub' [in asrtLib]
MemMod_join_sub [in asrtLib]
MemMod_eq_join_eq [in inv_prop]
memset_allocb_comm [in lmachLib]
Mem_join_disj [in joinmemLib]
Mem_minus_disj [in joinmemLib]
mem_join_sig_r [in lmachLib]
mem_set_a_set_a' [in lmachLib]
mem_set_a_set_a [in lmachLib]
mem_get_eq [in progtaskstepLib]
mem_sub_false [in progtaskstepLib]
mem_sub_get_get [in progtaskstepLib]
mem_disj_disj_join_disj [in progtaskstepLib]
mem_disj_merge_minus_merge' [in lemmasfortoptheo]
mem_disj_merge_minus_disj' [in lemmasfortoptheo]
mem_disj_join2_disj [in tst_prop]
mem_disj_join_join_sub [in tst_prop]
mem_join_disj_join [in tst_prop]
mem_join_merge_merge_eq [in tst_prop]
mem_join_join_disj_mergeeq [in tst_prop]
mem_join_disj_disj [in tst_prop]
mem_disj_join_disjmerge' [in tst_prop]
mem_disj_join_mergeeq [in tst_prop]
mem_disj_join_disjmerge [in tst_prop]
mem_join_disj_disj_join [in tst_prop]
mem_join_join_merge_eq [in tst_prop]
Mem_disj_join_dis [in tst_prop]
Mem_join_disj_disj_disj [in tst_prop]
Mem_join_disj_merge [in tst_prop]
mem_join_join_merge [in tst_prop]
mem_join_join_join_disj_merge' [in tst_prop]
mem_join_join_join_eqmerge [in tst_prop]
mem_join_disj_trans [in tst_prop]
mem_disj_merge_ass [in tst_prop]
mem_disj_merge_minus_merge [in tst_prop]
mem_disj_merge_minus_disj [in tst_prop]
mem_join_join_disj [in tst_prop]
mem_minus_disj [in tst_prop]
mem_join_minus [in tst_prop]
merge_set_eq [in lemmasfortoptheo]
merge_store_merge [in lemmasfortoptheo]
MethSim_to_Methsim' [in soundness]
MethSim_to_Methsim'_aux [in methsimlift]
minus_sub [in tst_prop]
minus_set_comm [in tst_prop]
minus1lt [in IntLib]
min_signed_val [in IntLib]
min_signed_lt0 [in IntLib]
modulus_val [in IntLib]
modusponens [in Coqlib]
msglist_p_compose_mutex [in OSMutexPostPure]
msglist_p_compose_mbox [in Mbox_common]
msgqlist_p_compose' [in OSQPostPure]
msgqlist_p_compose [in OSQAcceptPure]
MsgqMod_merge_emp_l [in lemmasforseplog]
MsgqMod_disj_merge_eq [in lemmasforseplog]
msgqnode_p_hold_no_end [in OSQAcceptPure]
msgqnode_p_hold_end [in OSQAcceptPure]
msgqnode_p_nomsg [in OSQAcceptPure]
mund_nth_val_a1 [in OSMutex_common]
mund_to_nat_a1 [in OSMutex_common]
mund_int_byte_max_unsigned [in OSMutex_common]
mund_ltu_a2 [in OSMutex_common]
mund_ltu_a1 [in OSMutex_common]
mund_int_mod [in OSMutex_common]
mund_int_byte_modulus [in OSMutex_common]
mund_int_a3 [in OSMutex_common]
mund_int_ltu_revers [in OSMutex_common]
mund_val_inj_a1 [in OSMutex_common]
mund_val_inj_a0 [in OSMutex_common]
mund_int_a2 [in OSMutex_common]
mund_int_a1 [in OSMutex_common]
mund_int_c1 [in OSMutex_common]
mund_disj_sub_w [in OSMutexPendPure1]
mund_disj_sub_r [in OSMutexPendPure1]
mund_disj_sub_l [in OSMutexPendPure1]
mutexacc_succ_absinfer [in OSMutex_common]
mutexacc_prio_err_absinfer [in OSMutex_common]
mutexacc_no_available_absinfer [in OSMutex_common]
mutexacc_no_mutex_err_absinfer [in OSMutex_common]
mutexacc_null_absinfer [in OSMutex_common]
mutexandnotmutex [in OSMutexPostPure]
mutexcre_succ_absinfer [in OSMutex_common]
mutexcre_error_absinfer [in OSMutex_common]
mutexdel_pr_not_holder_err_absinfer [in OSMutex_common]
mutexdel_succ_absinfer [in OSMutex_common]
mutexdel_ex_wt_err_absinfer [in OSMutex_common]
mutexdel_type_err_absinfer [in OSMutex_common]
mutexdel_no_mutex_err_absinfer [in OSMutex_common]
mutexdel_null_absinfer [in OSMutex_common]
mutexdel_intlemma1 [in OSMutex_common]
mutexpend_TCBNode_P_in_tcb_rdy [in OSMutex_common]
mutexpend_block_get_step [in OSMutexPendPure1]
mutexpend_block_timeout_step [in OSMutexPendPure1]
mutexpend_block_no_lift_step [in OSMutexPendPure1]
MutexPostNoUnliftSuccReturn [in OSMutexPostPart3_3]
MutexPostPart1 [in OSMutexPostPart2]
MutexPostPart10 [in OSMutexPostPart2_0]
MutexPostPart3 [in OSMutexPostPart3]
MutexPostPart3133 [in OSMutexPostPart30]
MutexPostPIRdyTable2 [in OSMutexPostPart2_1]
mutexpost_intlemma1 [in OSMutex_common]
mutex_rh_tcblist_ecblist_p_hold [in OSMutex_common]
mutex_createpure [in OSMutex_common]
Mutex_Create_TCB_prop [in OSMutex_common]
mutex_triangle [in OSMutex_common]
mutex_eventtype_neq_mutex [in OSMutex_common]
mutex_pend_inv_update1 [in OSMutex_common]
mutex_acpt_rh_tcblist_ecblist_p_hold [in OSMutex_common]
Mutex_owner_set_true [in OSMutex_common]
mutex_ex_wt_ex_owner [in OSMutex_common]
Mutex_owner_set' [in OSMutex_common]
mutex_no_owner_nil_wls' [in OSMutex_common]
mutex_no_owner_nil_wls [in OSMutex_common]
mutex_rh_tcblist_ecblist_p_hold [in OSMutexPostPure]
mutex_pend_ptcb_is_rdy_right_to_cur' [in OSMutexPendPart4]
mutex_pend_part_0 [in OSMutexPendProof]
Mutex_owner_hold_for_set_tcb [in sem_common]
Mutex_owner_set [in sem_common]
mutex_pend_can_not_lift_right_to_cur [in OSMutexPendPart2]
mutex_pend_ptcb_is_rdy_right_to_cur [in OSMutexPendPart2]
mutex_pend_pip_is_not_hold_right_to_cur [in OSMutexPendPart5]
mutex_pend_cur_prio_eql_mprio_right_to_cur [in OSMutexPendPart5]
mutex_pend_ptcb_is_not_rdy_right_to_cur [in OSMutexPendPart5]
mutex_pend_ptcb_is_idle_err_right_to_cur [in OSMutexPendPart5]
mutex_pend_pip_is_not_hold_left_to_cur [in OSMutexPendPart5]
mutex_pend_cur_prio_eql_mprio_left_to_cur [in OSMutexPendPart5]
mutex_pend_ptcb_is_not_rdy_left_to_cur [in OSMutexPendPart5]
mutex_pend_ptcb_is_idle_err_left_to_cur [in OSMutexPendPart5]
mutex_pend_ptcb_is_cur_err [in OSMutexPendPart5]
mutex_pend_ptcb_is_rdy_left_to_cur' [in OSMutexPendPart3]
mutex_pend_can_not_lift_left_to_cur [in OSMutexPendPart1]
mutex_pend_ptcb_is_rdy_left_to_cur [in OSMutexPendPart1]
Mutex_owner_hold_for_set_tcb [in Mbox_common]
Mutex_owner_set [in Mbox_common]
myAppAsrtTree_true_r [in seplog_tactics]
myAppAsrtTree_assoc [in seplog_tactics]
myAppAsrtTree_nil_r [in seplog_tactics]
myAppAssnTree_assoc [in tacticsforseplog]
myAppAssnTree_nil_r [in tacticsforseplog]
my_nth_val'_and_nth_val [in mathlib]
my_nth_val'_eql_yours [in mathlib]


N

nabt_lift [in progtaskstepLib]
nat_of_Z_plus [in Coqlib]
nat_of_Z_neg [in Coqlib]
nat_of_Z_eq [in Coqlib]
nat_of_Z_max [in Coqlib]
nat_of_Z_of_nat [in Coqlib]
nat_n_Sn_neq [in progtaskstepLib]
nat_gt_neq [in tst_prop]
nat_exists [in asrtLib]
nat_elim [in mathlib]
nat_x_prop_range [in mathlib]
nat_8_range_conver [in mathlib]
nat_of_Z_eq [in mathlib]
nat_int64_range_eq [in mathlib]
nat8_ex_shift3 [in mathlib]
nat8_des [in mathlib]
ndym_cont_red [in progtaskstepLib]
negb_false [in IntLib]
negb_true [in IntLib]
neg_priointbl_prionotintbl [in OSMutexPendPure1]
neq_imp_neqq [in OSMutex_common]
neq_beq_int_false [in IntBool]
neq_set_comm [in OSTimeTickPure]
neq_null_true_elim [in OSTimeTickPure]
neq_null_false_elim [in OSTimeTickPure]
neq_comm [in mathlib]
new_rtbl.prio_set_rdy_not_in_tbl_rev [in OSQPostPure]
new_rtbl.prio_set_rdy_not_in_tbl [in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl_rev [in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl [in OSQPostPure]
new_rtbl.prio_set_rdy_in_tbl_lemma_1 [in OSQPostPure]
new_rtbl.trans_lemma_1 [in OSQPostPure]
new_t_taskm_eq [in tst_prop]
ne_0_minus_1_in_range [in OSTimeTickPure]
nhapi_set_hold [in PIF_aux]
nil_simp [in mathlib]
nil_get_eid_nil [in mathlib]
nnp_remove_nwait [in PIF_aux]
node_osabst_emp [in inv_prop]
node_vl_eq [in inv_prop]
node_precise [in inv_prop]
node_fold' [in sempost_pure]
node_fold [in sem_lab]
notabortm_if_v [in asrtLib]
notabortm_if [in asrtLib]
notabort_expr [in asrtLib]
notabort_rete [in asrtLib]
notabort_sseq [in asrtLib]
notabt_frame [in loststepLib]
notbool_zero_one [in OSEventRemovePure]
notbool_one_zero [in OSEventRemovePure]
notint_neq_zero_eq [in mathlib]
notvundef_true_false [in ruleLib]
not_in_get_last_ptr_false [in OSEventRemovePure]
not_add_os_stat_q [in OSEventTaskRdyPure]
not_eq_comm [in mathlib_join]
not_skipend [in asrtLib]
not_free_cont_loc [in loststepLib]
not_in_remove_last [in OSTimeTickPure]
not_and_p' [in mathlib]
not_and_p [in mathlib]
no_call_api_os_intcont [in progtaskstepLib]
no_call_api_os_callcont [in progtaskstepLib]
no_call_api_os_stmt [in progtaskstepLib]
no_call_api_loststep_still [in progtaskstepLib]
no_call_api_loststep_eq [in progtaskstepLib]
no_inos_pc [in progtaskstepLib]
no_os_goodks' [in tst_prop]
no_os_goodks [in tst_prop]
no_nest_prop_step_hold [in PIF_aux]
no_nest_pif [in PIF_aux]
no_owner_del [in PIF_aux]
no_owner_cre [in PIF_aux]
no_nest_pending_del [in PIF_aux]
no_nest_pending_cre_hold [in PIF_aux]
no_nest_pending_set_hold [in PIF_aux]
no_nest_pending_set_prio_eq [in PIF_aux]
no_nest_pending_set_none [in PIF_aux]
nsc_isched_step [in oscore_common]
nth_val'_length [in OSMutex_common]
nth_val_upd_prop [in OSMutex_common]
nth_val_le_len_is_none [in OSMutex_common]
nth_val_exx [in OSMutex_common]
nth_val_upd_ex [in OSMutex_common]
nth_error_nil [in Coqlib]
nth_error_in [in Coqlib]
nth_val'2nth_val [in OSQPostPure]
nth_val'2nth_val' [in oscore_common]
nth_val_upd_prop [in semdel_pure]
nth_val_nth_val'_some_eq [in common]
nth_val_upd_prop [in OSQDelPure]
nth_vallist_append [in OSTimeTickPure]
nth_vallist_inc_eq [in OSTimeTickPure]
nth_val_length [in OSTimeTickPure]
nth_val'_imp_nth_val_vptr [in mathlib]
nth_val'_imply_nth_val [in mathlib]
nth_upd_neqrev [in mathlib]
nth_upd_eq [in mathlib]
nth_upd_neq [in mathlib]
nth_val'_imp_nth_val_int [in mathlib]
nth_val'_and_nth_val [in mathlib]
nth_id_exists_off [in aux_for_hoare_lemmas]
nth_id_Some_imply_in_decllist [in aux_for_hoare_lemmas]
nth_id_field_offsetfld_some [in aux_for_hoare_lemmas]
nth_id_some_in_decllist_true [in aux_for_hoare_lemmas]
nth_val_upd_prop [in Mbox_common]
nth_val_imp_nth_val'_2 [in symbolic_execution]
nth_val_imp_nth_val'_1 [in symbolic_execution]
nth_id_Some_imply_in_decllist [in symbolic_execution]
null_rv [in symbolic_execution]
n_dym_com_int_scont_intcont_n_dym_com_int_cd [in ruleLib]
n_dym_com_int_scont_callcont [in ruleLib]
n_dym_com_int_cd_cont [in progtaskstepLib]
n_tlmatch_abt [in progtaskstepLib]
n_dym_ks_call [in lemmasfortoptheo]
n07_arr_len_ex [in mathlib]


O

Old_Priority_Inversion_Free_Proof [in PIF_aux]
Old_Priority_Inversion_Free_Proof' [in PIF_aux]
or_OS_MUTEX_AVAILABLE_le_65535 [in OSMutex_common]
or_true_ltrue_rtrue [in OSMutex_common]
or_one_one [in IntLib]
or_zero_one [in IntLib]
or_one_zero [in IntLib]
or_zero_zero [in IntLib]
or_and_combine_zero [in mathlib]
or_and_distrib_zero [in mathlib]
or_and_distrib [in mathlib]
or_and_combine [in mathlib]
OSAbstMod_join_disj3' [in ruleLib]
OSAbstMod_disj_join3 [in ruleLib]
OSAbstMod_join_gettls [in ruleLib]
OSAbstMod_joinmerge_join [in ruleLib]
OSAbstMod_join_disj2 [in ruleLib]
OSAbstMod_disj_merge [in ruleLib]
OSAbstMod_join_disj2_merge [in ruleLib]
OSabstMod_disj_merger_disj2 [in ruleLib]
OSAbstMod_join_emp [in ruleLib]
OSAbstMod_join_emp_eq [in ruleLib]
OSAbstMod_join_disj3 [in ruleLib]
OSAbstMod_join_disj_eq [in ruleLib]
OSAbstMod_disj_join_meg [in ruleLib]
OSAbstMod_disj_disj [in ruleLib]
OSAbstMod_join_disj2' [in ruleLib]
OSAbstMod_disj_join2 [in ruleLib]
OSAbstMod_disj_join_disj3 [in ruleLib]
OSAbstMod_join_disj [in ruleLib]
OSAbstMod_join_exists_merge [in tst_prop]
OSAbstMod_disj_merge_disj [in asrtLib]
OSAbst_join_get2 [in ruleLib]
OSAbst_join_of [in ruleLib]
OSAbst_disj_merge_disj [in ruleLib]
OSAbst_disj_join [in ruleLib]
OSAbst_merge_eq' [in ruleLib]
OSAbst_merge_eq [in ruleLib]
OSAbst_disj_merge [in ruleLib]
OSAbst_join_merge [in ruleLib]
osabst_disj_merge_get_r [in ruleLib]
OSAbst_join_disj [in ruleLib]
OSAbst_disj_join_dis [in tst_prop]
OSAbst_join_disj_disj_disj [in tst_prop]
OSAbst_join_disj_merge [in tst_prop]
osabst_disj_eqdom_sym [in asrtLib]
osabst_disj_join_merge_lpro [in asrtLib]
OSAbst_join_sub' [in asrtLib]
OSAbst_join_sub [in asrtLib]
OsAbst_Merge_eq [in asrtLib]
osabst_eq_join_eq [in inv_prop]
osabst_get_get_disj_get [in PIF_aux]
osabst_get_get_disj_eq [in PIF_aux]
OSAbs_disj_eqdom [in asrtLib]
osapi_lift' [in progtaskstepLib]
osapi_lift1' [in progtaskstepLib]
OSEventRemove_proof [in OSEventRemoveProof]
OSEventSearch_proof [in OSEventSearchProof]
OSEventTaskRdy_proof [in OSEventTaskRdy]
OSEventTaskWait_proof [in OSEventTaskWait]
OSEventWaitListInit_proof [in OSEventWaitListInitProof]
OSIntExitPostGood [in InternalFunSpec]
OSIntExitPreGood [in InternalFunSpec]
OSIntExit_proof [in IntExitProof]
OSInv_set_curtid [in hoare_tactics]
OSInv_prop [in hoare_tactics]
OSInv_isr_is_irrel [in inv_prop]
OSInv_precise [in inv_prop]
osmapvallist_length8 [in OSMutex_common]
osmapvallist_int8u [in OSMutex_common]
osmapvallist_prop [in OSEventTaskRdyPure]
OSMutexAccepteRight [in OSMutexAcceptProof]
OSMutexCreateRight [in OSMutexCreateProof]
OSMutexDelRight [in OSMutexDelProof]
OSMutexPendProof [in OSMutexPendProof]
OSMutexPostRight [in OSMutexPostProof]
OSMutexPost3_3_event_rdy_post1 [in OSMutexPostPart3_3_1]
OSMutexPost3_3_event_rdy_post3' [in OSMutexPostPart3_3_3a]
OSMutexPost3_3_event_rdy_post5 [in OSMutexPostPart3_3_5]
OSMutexPost3_3_event_rdy_post3 [in OSMutexPostPart3_3_3]
OSMutexPost3_3_event_rdy_post1' [in OSMutexPostPart3_3_1a]
OSMutexPost3_3_event_rdy_post5' [in OSMutexPostPart3_3_5a]
OSQAccProof [in OSQAcceptProof]
OSQCreateProof [in OSQCreateProof]
OSQCRT_TCB_prop [in OSQCreatePure]
OSQDelProof [in OSQDelProof]
OSQEnd_elim [in OSQPendPure]
OSQGetMsgProof [in OSQGetMsgProof]
OSQGetMsg_high_level_step [in OSQGetMsgPure]
OSQOut_elim [in OSQPendPure]
OSQPendRight [in OSQPendProof]
OSQPendRightPart2 [in OSQPendProof]
OSQPend_high_step_block_get [in OSQPendPure]
OSQPend_high_step_to [in OSQPendPure]
OSQPend_high_step_block [in OSQPendPure]
OSQPend_high_step_get_succ [in OSQPendPure]
OSQPend_high_step_null [in OSQPendPure]
OSQPostProof [in OSQPostProof]
OSQPostProofPart1 [in OSQPostProof]
OSQPostProofPart2 [in OSQPostProof]
OSQStart_elim [in OSQPendPure]
osq_same_blk_st_in' [in OSQPostPure]
osq_inv_in [in hoare_tactics]
osq_same_blk_st_out' [in OSQAcceptPure]
osq_sll_precise [in inv_prop]
OSSched_proof [in OSSchedProof]
OSSemAccProof [in OSSemAcceptProof]
OSSemCreProof [in OSSemCreateProof]
OSSemDeleteProof [in OSSemDeleteProof]
OSSemPendProof [in OSSemPendProof]
OSSemPostProof [in OSSemPostProof]
ostcb_sll_precise [in inv_prop]
ostidstep_imply_idstepn [in loststepLib]
OSTimeDlyProof [in OSTimeDlyProof]
OSTimeDly_high_level_step_3 [in absop_rules]
OSTimeDly_high_level_step_4 [in absop_rules]
OSTimeDly_high_level_step_2 [in absop_rules]
OSTimeDly_high_level_step_1 [in absop_rules]
OSTimeGetRight [in OSTimeGetProof]
OSTimeGetRight' [in OSTimeGetProof]
OSTimeGet_high_level_step [in absop_rules]
OSTimeTickPostGood [in InternalFunSpec]
OSTimeTickPreGood [in InternalFunSpec]
OSTimeTick_proof [in OSTimeTickProof]
osunmapvallist_prop [in mathlib]
OSUnMapVallist_type_vallist_match [in mathlib]
os_stat_q_not_and [in OSEventTaskRdyPure]
os_no_call_api [in ucos_correctaux]
os_stat_mbox_and_le255 [in laby]
os_stat_mbox_and_le255 [in lab]
os_exint_not_step_ks [in loststepLib]
os_ret_not_step_ks [in loststepLib]
os_ret_not_step [in loststepLib]
os_skip_not_step [in loststepLib]
OS_SchedPostGood [in InternalFunSpec]
OS_SchedPreGood [in InternalFunSpec]
OS_EventTaskWaitPostGood [in InternalFunSpec]
OS_EventTaskWaitPreGood [in InternalFunSpec]
OS_EventTaskRdyPostGood [in InternalFunSpec]
OS_EventTaskRdyPreGood [in InternalFunSpec]
OS_EventPtrRemovePostGood [in InternalFunSpec]
OS_EventRemovePreGood [in InternalFunSpec]
OS_EventSearchPostGood [in InternalFunSpec]
OS_EventSearchPreGood [in InternalFunSpec]
OS_EventWaitListInitPostGood [in InternalFunSpec]
OS_EventWaitListInitPreGood [in InternalFunSpec]


P

pair_prop [in hoare_lemmas]
partm_nochange [in tst_prop]
partm_minus_sub [in tst_prop]
partm_merge_disj [in tst_prop]
partm_new [in tst_prop]
part_store_part [in lemmasfortoptheo]
part_storebytes_part [in lemmasfortoptheo]
part_merge_m [in tst_prop]
part_disjm [in tst_prop]
part_sub [in tst_prop]
pend_lift_getop_ct [in PIF_aux]
pend_lift_iswait [in PIF_aux]
pend_lift_getop_t [in PIF_aux]
pend_lift_nnp [in PIF_aux]
pend_no_lift_iswating [in PIF_aux]
pend_no_lift_nnp [in PIF_aux]
pend_no_lift_getop [in PIF_aux]
peq_false [in Coqlib]
peq_true [in Coqlib]
pfalse_rule_sound [in simplrulesound]
Ple_succ [in Coqlib]
Ple_trans [in Coqlib]
Ple_refl [in Coqlib]
Plt_wf [in Coqlib]
Plt_strict [in Coqlib]
Plt_Ple_trans [in Coqlib]
Plt_Ple [in Coqlib]
Plt_succ_inv [in Coqlib]
Plt_trans_succ [in Coqlib]
Plt_succ [in Coqlib]
Plt_trans [in Coqlib]
Plt_ne [in Coqlib]
positive_Peano_ind [in Coqlib]
positive_rec_succ [in Coqlib]
positive_rec_base [in Coqlib]
postintlemma1 [in OSMutex_common]
postintlemma2 [in OSMutex_common]
postintlemma2' [in OSMutex_common]
postintlemma3 [in OSMutex_common]
postintlemma4 [in OSMutex_common]
post_exwt_succ_pre_mutex' [in OSMutex_common]
post_valinjlemma1 [in OSMutex_common]
post_intlemma2 [in OSMutex_common]
post_intlemma1 [in OSMutex_common]
post_exwt_succ_pre_mutex [in OSMutex_common]
post_intlemma4 [in OSMutex_common]
post_intlemma3 [in OSMutex_common]
post_exwt_succ_pre_mutex' [in OSMutexPostPure]
post_exwt_succ_pre_mutex [in OSMutexPostPure]
post_exwt_succ_pre_mutex'' [in OSMutexPostPure]
post_exwt_succ_pre [in OSQPostPure]
post_exwt_succ_pre_sem [in sempost_pure]
post_iswait' [in PIF_aux]
post_iswait [in PIF_aux]
post_nolift_exwt_ct_nowner [in PIF_aux]
post_nolift_exwt_get_op_ct [in PIF_aux]
post_lift_exwt_ct_nowner [in PIF_aux]
post_lift_exwt_get_op_ct [in PIF_aux]
post_ex_wait_ct_neq [in PIF_aux]
post_no_lift_ct_nowner [in PIF_aux]
post_nolift_get_op_ct [in PIF_aux]
post_lift_ct_nowner [in PIF_aux]
post_lift_get_op_ct [in PIF_aux]
post_nowt_return_getop_t [in PIF_aux]
post_nowt_return_getop_ct [in PIF_aux]
post_exwt_succ_pre_mbox' [in Mbox_common]
post_exwt_succ_pre_mbox [in Mbox_common]
post1' [in OSMutexPostPart30]
post3 [in OSMutexPostPart30]
post3' [in OSMutexPostPart30]
post5 [in OSMutexPostPart30]
post5' [in OSMutexPostPart30]
pos_to_nat_range_0_7 [in OSEventTaskRdyPure]
pos_to_nat_range_0_255 [in mathlib]
Ppred_Plt [in Coqlib]
precise_starinv_isr [in asrtLib]
precise_Aie_Adisj [in asrtLib]
precise_Apure [in asrtLib]
precise_Astar [in asrtLib]
pred_dec_false [in Coqlib]
pred_dec_true [in Coqlib]
prioinq_exists [in mathlib]
Priority_Inversion_Free_Proof [in PIF_aux]
Priority_Inversion_Free_Prop [in PIF_aux]
priotbl_null_no_tcb [in OSMutex_common]
prio_from_grp_tbl_PrioWaitInQ [in OSMutex_common]
prio_in_rtbl_hold [in OSMutexPostPure]
prio_in_rtbl_hold [in OSQPostPure]
prio_wt_inq_tid_neq [in OSQPostPure]
prio_wt_inq_convert [in OSQPostPure]
prio_notin_tbl_orself [in OSQPostPure]
prio_in_tbl_orself [in OSQPostPure]
prio_set_rdy_not_in_tbl_rev [in OSQPostPure]
prio_set_rdy_not_in_tbl [in OSQPostPure]
prio_set_rdy_in_tbl_rev [in OSQPostPure]
prio_set_rdy_in_tbl [in OSQPostPure]
prio_eq_tid_eq [in oscore_common]
prio_neq_tid_neq [in oscore_common]
prio_neq_cur_set [in OSMutexPendPure1]
Prio_Not_In_app [in OSTimeTickPure]
Prio_Not_In_ex [in OSTimeTickPure]
prio_bit_and_zero [in mathlib]
prio_update_self_not_in [in mathlib]
prio_wt_inq_keep [in mathlib]
prio_in_tbl_rgrp_neq_zero [in mathlib]
prio_neq_not_in_tbl_rev [in mathlib]
prio_neq_not_in_tbl [in mathlib]
prio_neq_in_tbl_rev [in mathlib]
prio_neq_in_tbl [in mathlib]
prio_rtbl_dec [in mathlib]
prio_neq_grpeq_prop [in mathlib]
prio_int_disj [in mathlib]
prio_in_rtbl_has_tid [in mathlib]
prio_inq [in mathlib]
prio_prop [in mathlib]
prio_destruct [in mathlib]
prio_range_com [in mathlib]
prio_destruct4 [in mathlib]
prio_destruct3 [in mathlib]
prio_destruct2 [in mathlib]
prio_destruct1 [in mathlib]
progsim_imply_eref [in etraceref]
progsim_imply_eref_aux [in etraceref]
projs_steq_projs [in lemmasfortoptheo]
projs_eqg [in lemmasfortoptheo]
projs_nc_tst [in tst_prop]
projs_snew [in tst_prop]
projs_eq_isr [in tst_prop]
projs_eqm [in tst_prop]
projs_repl [in tst_prop]
projs_ge_eq [in tst_prop]
projS_t_Snewt_t' [in tst_prop]
proj_sumbool_is_true [in Coqlib]
proj_sumbool_true [in Coqlib]
proj_steq_eqdata [in tst_prop]
proj_stneq_ex [in tst_prop]
proj_stneq [in tst_prop]
proj_inj_bytes [in memdata]
prop_elim_rule2 [in hoare_tactics]
prop_elim_rule1 [in hoare_tactics]
prop_intro_rule [in derivedrules]
prop_eq_impl [in PIF_aux]
ptomvallist_get_none [in lmachLib]
ptomvallist_init_mem [in lmachLib]
ptomvallist_loadbytes [in tst_prop]
ptomvallist_eqlen_storebytes_exists [in asrtLib]
ptomvallist_mem_eq [in inv_prop]
ptomval_nnil_neq [in common]
ptr_in_ectrls_false_append [in OSEventRemovePure]
ptr_in_ectrls_nil_false [in OSEventRemovePure]
ptr_isptr [in laby]
ptr_isptr [in lab]
ptr_neq_null [in sep_pure]
pumerge_get_ex [in lemmasfortoptheo]
pumerge_get [in tst_prop]
pure_ex_intro_rule [in hoare_tactics]
pure_split_rule_sound [in simplrulesound]
pure_split_rule' [in derivedrules]
pure_intro_rule' [in derivedrules]
pv_false [in common]
p_eq [in lemmasfortoptheo]
p_lift [in tst_prop]


Q

qacc_absinfer_no_q [in OSQAcceptPure]
qacc_absinfer_null [in OSQAcceptPure]
qacc_absinfer_get_msg [in OSQAcceptPure]
qacc_absinfer_no_msg [in OSQAcceptPure]
qacc_dl_vl_match [in mathlib]
qblkfsllseg_head_isptr [in hoare_tactics]
qblkfsll_head_isptr [in hoare_tactics]
qblkf_sll_osabst_emp [in inv_prop]
qblkf_sll_precise [in inv_prop]
qblkf_sllseg_osabst_emp [in inv_prop]
qblkf_sll_isptr [in inv_prop]
qentries_eq_zero [in mathlib]
qpend_absimp_stat_err [in OSQPendPure]
qpend_absinfer_idle [in OSQPendPure]
qpend_absinfer_block_get [in OSQPendPure]
qpend_absinfer_to [in OSQPendPure]
qpend_absinfer_block [in OSQPendPure]
qpend_absinfer_get [in OSQPendPure]
qpend_absinfer_no_q [in OSQPendPure]
qpend_absinfer_null [in OSQPendPure]
qpost_absinfer_exwt_succ [in OSQPostPure]
qpost_absinfer_nowt_succ [in OSQPostPure]
qpost_absinfer_ovf [in OSQPostPure]
qpost_absinfer_no_q [in OSQPostPure]
qpost_absinfer_msg_null [in OSQPostPure]
qpost_absinfer_null [in OSQPostPure]
qpost_no_wait_prop' [in OSQPostPure]
qpost_ovf_prop' [in OSQPostPure]
qpost_ovf_prop [in OSQPostPure]
qwaitset_notnil_ex [in mathlib]


R

range_ostcby [in OSETWaitPure]
rdyinv_isremp [in tst_prop]
RdyTCBblk_rtbl_add [in OSQPostPure]
RdyTCBblk_change_next_ptr' [in OSTimeTickPure]
RdyTCBblk_change_next_ptr [in OSTimeTickPure]
rel_pif_upif [in pif_theory]
removelast_prop [in mathlib]
remove_tid_eq [in OSTimeTickPure]
remove_tid_in_false [in PIF_aux]
remove_is_wait_neq [in PIF_aux]
repl_tst_join [in tst_prop]
repl_change_tstm_trans [in tst_prop]
repr_one [in IntLib]
repr_zero [in IntLib]
rete_rule' [in derivedrules]
rete_rule_sound [in retsound]
retpost_eventrdy [in OSMutex_common]
retpost_osev [in common]
retspec_intro_rule_sound [in simplrulesound]
return_rh_ctcb [in OSMutex_common]
return_rh_tcbl_ecbl_p [in OSMutex_common]
return_ecbl_p [in OSMutex_common]
return_r_ecb_et_p [in OSMutex_common]
return_tcbl_p' [in OSMutex_common]
return_tcbl_p [in OSMutex_common]
return_gethwait [in OSMutex_common]
return_rl_t_g_p' [in OSMutex_common]
return_rl_t_g_p [in OSMutex_common]
return_rl_rt_pt_p [in OSMutex_common]
return_r_pt_p [in OSMutex_common]
return_rh_ctcb [in OSMutexPostPure]
retv_step [in progtaskstepLib]
retv_dec [in lemmasfortoptheo]
retv_spec [in tst_prop]
ret_step [in progtaskstepLib]
ret_dec [in lemmasfortoptheo]
ret_st [in tst_prop]
ret_spec [in tst_prop]
ret_rule' [in derivedrules]
ret_rule_sound [in retsound]
revlcons_len_plus [in lmachLib]
revlcons_nil [in lmachLib]
rev_len_eq [in lmachLib]
rev_cons_n_nil [in tst_prop]
rev_tl_vl [in asrtLib]
rg1 [in OSMutex_common]
rg1 [in OSMutexPostPure]
rg1 [in sempost_pure]
rg1 [in Mbox_common]
rg2 [in OSMutex_common]
rg2 [in OSMutexPostPure]
rg2 [in sempost_pure]
rg2 [in Mbox_common]
RHL_ECB_ETbl_P_msg [in OSQGetMsgPure]
RHL_Wait_all_rtbl_add [in OSQPostPure]
RHL_WaitMS_P_rtbl_add [in OSQPostPure]
RHL_WaitMB_P_rtbl_add [in OSQPostPure]
RHL_WaitQ_P_rtbl_add [in OSQPostPure]
RHL_WaitS_P_rtbl_add [in OSQPostPure]
RHL_Wait_P_rtbl_add [in OSQPostPure]
RHL_RdyI_P_rtbl_add [in OSQPostPure]
RHL_Wait_prioneq_prop_hold [in OSTimeDlyPure]
RHL_Rdy_prioneq_prop_hold [in OSTimeDlyPure]
RH_TCBList_ECBList_P_changeprio [in OSMutex_common]
RH_TL_EL_MUTEX_OWNER_hold [in OSMutex_common]
RH_CurTCB_Prop [in OSQGetMsgPure]
RH_TCBList_ECBList_P_msg [in OSQGetMsgPure]
rh_tcblist_ecblist_p_post_exwt_mutex [in OSMutexPostPure]
rh_tcblist_ecblist_p_post_exwt_aux_mbox [in OSMutexPostPure]
rh_tcblist_ecblist_p_post_exwt_aux [in OSQPostPure]
rh_tcbls_mqls_p_setmsg_hold [in OSQPostPure]
rh_tcblist_ecblist_p_post_exwt [in OSQPostPure]
rh_curtcb_set_nct [in OSQPostPure]
RH_TCBList_ECBList_P_high_block_hold [in OSQPendPure]
RH_TCBList_ECBList_P_high_get_msg_hold [in OSQPendPure]
RH_CurTCB_high_block_hold [in OSQPendPure]
RH_CurTCB_high_get_msg_hold [in OSQPendPure]
RH_TCBList_ECBList_P_high_block_hold_mutex [in OSMutexPendPure1]
RH_TCBList_ECBList_P_high_block_hold_mutexsem [in OSMutexPendPure1]
RH_CurTCB_high_block_hold_mutex [in OSMutexPendPure1]
RH_CurTCB_hold1 [in OSTimeDlyPure]
RH_TCBList_ECBList_P_hold1 [in OSTimeDlyPure]
rh_tcbls_mqls_p_getmsg_hold [in OSQAcceptPure]
rh_tcblist_ecblist_p_post_exwt_sem [in sempost_pure]
rh_tcblist_ecblist_p_post_exwt_aux_sem [in sempost_pure]
RH_TCBList_ECBList_P_tickchange [in OSTimeTickPure]
RH_TCBList_ECBList_Q_P_tickchange [in OSTimeTickPure]
RH_TCBList_ECBList_MUTEX_P_tickchange [in OSTimeTickPure]
rh_tcblist_ecblist_mutex_owner_set' [in OSTimeTickPure]
rh_tcblist_ecblist_mutex_owner_set [in OSTimeTickPure]
RH_TCBList_ECBList_MBOX_P_tickchange [in OSTimeTickPure]
RH_TCBList_ECBList_SEM_P_tickchange [in OSTimeTickPure]
RH_TCBList_ECBList_P_rel_st_els [in OSTimeTickPure]
RH_TCBList_ECBList_P_high_block_hold_sem [in sempend_pure]
RH_CurTCB_high_block_hold_sem [in sempend_pure]
rh_tcblist_ecblist_p_post_exwt_aux_mbox [in Mbox_common]
rh_tcblist_ecblist_p_post_exwt_mbox [in Mbox_common]
RH_TCBList_ECBList_P_high_block_hold_mbox [in Mbox_common]
RH_CurTCB_high_block_hold_mbox [in Mbox_common]
RH_CurTCB_high_get_msg_hold [in Mbox_common]
RH_TCBList_ECBList_P_high_get_msg_hold_mbox [in Mbox_common]
RH_TCBList_ECBList_MUTEX_OWNER_subset_hold [in Mbox_common]
RLH_ECBData_p_high_mbox_acpt_hold [in OSMutex_common]
RLH_ECBData_P_or_available [in OSMutex_common]
RLH_ECB_ETbl_P_msg [in OSQGetMsgPure]
rlh_ecbdata_in_noend [in OSQPostPure]
rlh_ecbdata_in_end [in OSQPostPure]
rlh_ecb_nowait_prop [in OSQPostPure]
RLH_Wait_all_rtbl_add [in OSQPostPure]
RLH_WaitMS_P_rtbl_add [in OSQPostPure]
RLH_WaitMB_P_rtbl_add [in OSQPostPure]
RLH_WaitQ_P_rtbl_add [in OSQPostPure]
RLH_WaitS_P_rtbl_add [in OSQPostPure]
RLH_Wait_P_rtbl_add [in OSQPostPure]
RLH_RdyI_P_rtbl_add [in OSQPostPure]
RLH_ECBData_P_impl_high_ecb_msg_nil [in OSQPendPure]
RLH_Wait_prioneq_prop_hold [in OSTimeDlyPure]
RLH_Rdy_prioneq_prop_hold [in OSTimeDlyPure]
RLH_ECBData_p_high_mbox_acpt_hold [in Mbox_common]
RL_Tbl_init_prop [in OSQCreatePure]
RL_RTbl_PrioTbl_P_hold_for_del [in OSMutex_common]
RL_RTbl_PrioTbl_P_update_vhold [in OSMutex_common]
rl_rtbl_priotbl_p_hold' [in OSMutex_common]
RL_RTbl_PrioTbl_P_set [in OSMutex_common]
rl_etbl_ptbl_p [in OSEventTaskRdyPure]
rl_tbl_grp_p_set_hold' [in OSMutexPostPure]
rl_tbl_grp_p_set_hold [in OSMutexPostPure]
rl_tbl_grp_neq_zero [in OSQPostPure]
rl_rtbl_priotbl_p_hold [in OSQPostPure]
rl_tbl_grp_p_set_hold'' [in OSQPostPure]
rl_tbl_grp_p_set_hold' [in OSQPostPure]
rl_tbl_grp_p_set_hold [in OSQPostPure]
RL_RTbl_PrioTbl_P_set_vhold [in OSMutexPendPure1]
rl_rtbl_priotbl_p_set_hold [in OSTimeTickPure]
rl_tcbblk_tcby_range [in OSTimeTickPure]
rtbl_remove_RL_RTbl_PrioTbl_P_hold' [in OSMutex_common]
rtbl_remove_RL_RTbl_PrioTbl_P_hold [in OSQPendPure]
rtbl_remove_RL_RTbl_PrioTbl_P_hold'' [in OSMutexPendPure1]
rtbl_remove_RL_RTbl_PrioTbl_P_hold [in OSTimeDlyPure]
RuleSound [in soundness]
ruletypevalmatch8u [in OSMutex_common]
rule_type_val_match_comptr_elim [in type_val_match]
rule_type_val_match_ptr_elim [in type_val_match]
rule_type_val_match_int32u_elim [in type_val_match]
rule_type_val_match_int16u_elim [in type_val_match]
rule_type_val_match_int8u_elim [in type_val_match]
rule_type_val_match_nvundef [in symbolic_execution]
rvl_nil [in hoare_tactics]
rvl_elim [in hoare_tactics]
RYDINV_irrev_prop [in asrtLib]
R_Prio_Tbl_P_hold_for_del [in OSMutex_common]
R_ECB_upd_hold [in OSMutex_common]
R_PrioTbl_P_update_vhold [in OSMutex_common]
R_ECB_ETbl_P_high_ecb_mutex_acpt_hold [in OSMutex_common]
R_ECB_ETbl_P_msg [in OSQGetMsgPure]
R_PrioTbl_P_msg [in OSQGetMsgPure]
r_priotbl_p_set_hold [in OSQPostPure]
R_TCB_Status_P_rtbl_add [in OSQPostPure]
r_tcb_status_p_nrdy [in OSQPendPure]
R_ECB_ETbl_P_high_tcb_block_hold [in OSQPendPure]
R_ECB_ETbl_P_high_tcb_get_msg_hold [in OSQPendPure]
R_ECB_upd_hold [in semdel_pure]
R_ECB_ETbl_P_high_tcb_block_hold [in OSMutexPendPure1]
R_ECB_ETbl_P_high_tcb_block_hold_mutex [in OSMutexPendPure1]
R_TCB_Status_mutexpend_lift [in OSMutexPendPure1]
R_PrioTbl_Pend_lift [in OSMutexPendPure1]
r_lift [in tst_prop]
r_lift_rule [in tst_prop]
R_PrioTbl_P_hold1 [in OSTimeDlyPure]
R_ECB_upd_hold [in OSQDelPure]
r_ecb_etbl_p_tcbstats_eq_hold [in OSTimeTickPure]
r_ecb_etbl_p_wait_rdy_hold [in OSTimeTickPure]
r_prio_no_dup_two_neq [in OSTimeTickPure]
r_prio_no_dup_l_mid [in OSTimeTickPure]
R_Prio_No_Dup_L_proc [in OSTimeTickPure]
r_prio_no_dup_setst_hold [in OSTimeTickPure]
r_prio_no_dup_join_imp [in OSTimeTickPure]
R_Prio_No_Dup_Sub_hold [in OSTimeTickPure]
R_Prio_No_Dup_Eq [in OSTimeTickPure]
R_Prio_No_Dup_Convert_rev [in OSTimeTickPure]
R_Prio_No_Dup_Convert [in OSTimeTickPure]
R_PrioTbl_P_impl_prio_neq_cur [in mathlib]
R_Prio_NoChange_Prio_hold [in mathlib]
R_ECB_ETbl_P_high_tcb_block_hold [in sempend_pure]
R_ECB_ETbl_P_high_tcb_block_hold [in Mbox_common]
r_tcb_status_p_nrdy [in Mbox_common]
R_ECB_ETbl_P_high_ecb_mbox_acpt_hold [in Mbox_common]
R_ECB_upd_hold [in Mbox_common]


S

saddempL [in seplog_tactics]
saddempL [in tacticsforseplog]
saddempR [in seplog_tactics]
saddempR [in tacticsforseplog]
saddempRE [in seplog_tactics]
saddempRE [in tacticsforseplog]
saddempRE' [in seplog_tactics]
saddempRI [in seplog_tactics]
saddempRI [in tacticsforseplog]
saddempRI' [in seplog_tactics]
sat_lenv_mono [in tst_prop]
sat_prop [in asrtLib]
sat_sep_conj_elim1 [in inv_prop]
sc_isched_step [in oscore_common]
semacc_RH_TCBList_ECBList_P_hold [in semacc_pure]
semacc_new_fundation [in semacc_pure]
semacc_compose_EcbList_P [in sem_common]
semacc_ltu_trans [in sem_common]
semacc_triangle_sem [in sem_common]
semacc_eventtype_neq_sem [in sem_common]
semacc_absimp_succ [in sem_absop_rule]
semacc_absimp_no_source [in sem_absop_rule]
semacc_absimp_no_sem [in sem_absop_rule]
semacc_absimp_null [in sem_absop_rule]
semacc_int_eq_false [in sem_lab]
semacc_int_eq_true [in sem_lab]
semacc_ltu_zero_false [in sem_lab]
semcre_ecblist_star_not_inh [in sem_common]
semcre_RH_TCBList_ECBList_P [in sem_common]
semcre_ECBList_P [in sem_common]
semcre_absimp_succ [in sem_absop_rule]
semcre_absimp_no_free [in sem_absop_rule]
semdel_absimp_succ [in sem_absop_rule]
semdel_absimp_task_waiting [in sem_absop_rule]
semdel_absimp_type_err [in sem_absop_rule]
semdel_absimp_no_sem [in sem_absop_rule]
semdel_absimp_null [in sem_absop_rule]
semdel_ecb_list_join_join [in semdel_pure]
semdel_ecbjoin_sig_join [in semdel_pure]
semdel_ecblist_ecbmod_get' [in semdel_pure]
semdel_ecblist_p_decompose [in semdel_pure]
semdel_ecb_del_prop_RHhold [in semdel_pure]
semdel_ecblist_ecbmod_get [in semdel_pure]
SemMod_merge_emp_l [in lemmasforseplog]
SemMod_disj_merge_eq [in lemmasforseplog]
sempend_ltu_ass2 [in sem_common]
sempend_ltu_ass1 [in sem_common]
sempend_part1 [in OSSemPendProof]
sempend_TCBListP_head_in_tcb_rdy [in sempend_pure]
sempost_part_0 [in OSSemPostProof]
sempost_part_6 [in OSSemPostProof]
sempost_part_5 [in OSSemPostProof]
sempost_part_4 [in OSSemPostProof]
sempost_part_3 [in OSSemPostProof]
sempost_part_2 [in OSSemPostProof]
sempost_part_1 [in OSSemPostProof]
sempost_struct_type_vallist_match_sem [in sempost_pure]
sempost_vallist_match_assert1 [in sempost_pure]
sempost_inc_RH_TCBList_ECBList_P_hold [in sempost_pure]
sempost_grp_wls_nil' [in sempost_pure]
sempost_grp_wls_nil [in sempost_pure]
sempost_inc_cnt_prop [in sempost_pure]
sempost_ltu_trans [in sempost_pure]
sem_eventtype_neq_sem [in sem_common]
sem_H_get_none [in sem_common]
sem_ecb_wt_ex_prop [in semdel_pure]
sem_post_get_tcb_stat [in sempost_pure]
seporI [in OSMutex_common]
seporI' [in OSMutex_common]
seporI2 [in OSMutex_common]
seporI2' [in OSMutex_common]
sep_aconj_r_aisfalse_to_astar [in hoare_lemmas]
sep_aconj_r_aistrue_to_astar [in hoare_lemmas]
sep_pure [in asrtLib]
sep_ptr_neq_OS_EVENT [in common]
sep_pure_get [in common]
sep_pure_split [in common]
sep_aconj_r_aisfalse_to_astar' [in sem_lab]
sep_aconj_r_aistrue_to_astar' [in sem_lab]
seq_rule_sound [in seqcomsound]
seq_rule_sound_aux [in seqcomsound]
set_empmem_sig_eq [in lmachLib]
set_minus_comm [in tst_prop]
set_env_good_env_decllist [in loststepLib]
set_rdy_grp_simpl [in OSTimeTickPure]
set_nth_nth_val' [in OSTimeTickPure]
set_nth_nth_val [in OSTimeTickPure]
set_rdy_tbl_grp_hold [in OSTimeTickPure]
set_getop_eq [in PIF_aux]
set_neq_getop_eq [in PIF_aux]
shl3_add_le_255' [in OSEventTaskRdyPure]
shl3_add_le_255 [in OSEventTaskRdyPure]
shl3_add_range [in mathlib]
shrl_eq [in mathlib]
shru_3_lt_8 [in sep_pure]
sig_indom_eq [in OSMutex_common]
sig_indom_eq' [in OSMutex_common]
simpl_valinj [in OSMutex_common]
simpl_inv_excrit''' [in OSIntExitPure]
simpl_inv_excrit'' [in OSIntExitPure]
simpl_inv_excrit' [in OSIntExitPure]
simpl_inv_excrit [in hoare_tactics]
simpl_inv_excrit' [in hoare_tactics]
simpl_inv_encrit [in hoare_tactics]
simpl_inv_encrit' [in hoare_tactics]
sim_retspec_intro [in simplrulesound]
skip_expr_eval_msim_hold [in ruleLib]
slift [in seplog_tactics]
slift [in tacticsforseplog]
sliftE [in seplog_tactics]
sliftE [in tacticsforseplog]
sliftE' [in seplog_tactics]
sliftI [in seplog_tactics]
sliftI [in tacticsforseplog]
sliftI' [in seplog_tactics]
sllseg_head_isptr [in hoare_tactics]
sllseg_osabst_emp [in inv_prop]
sll_head_isptr [in hoare_tactics]
sll_isptr [in inv_prop]
sll_osabst_emp [in inv_prop]
slower [in seplog_tactics]
slower [in tacticsforseplog]
slowerE [in seplog_tactics]
slowerE [in tacticsforseplog]
slowerE' [in seplog_tactics]
slowerI [in seplog_tactics]
slowerI [in tacticsforseplog]
slowerI' [in seplog_tactics]
SmCTaskSim [in lemmasfortoptheo]
SmCTaskSim' [in lemmasfortoptheo]
sm_nat_exist [in asrtLib]
snewt_neqt [in tst_prop]
Snewt_t_projS_t' [in tst_prop]
sn_le_n_le_minus1 [in mathlib]
something_in_not_nil [in OSMutex_common]
something_in_not_nil [in OSMutexPostPure]
something_in_not_nil [in sempost_pure]
something_in_not_nil [in Mbox_common]
Soundness [in toprule]
specstep_locality [in ruleLib]
specstep_merge_emp [in absop_rules]
spec_step_tidsame [in progtaskstepLib]
spec_step_disjo [in asrtLib]
spec_step_eqdomo [in asrtLib]
spec_ext [in PIF_aux]
srearr [in seplog_tactics]
srearr [in tacticsforseplog]
srearrE [in seplog_tactics]
srearrE [in tacticsforseplog]
srearrE' [in seplog_tactics]
srearrI [in seplog_tactics]
srearrI [in tacticsforseplog]
srearrI' [in seplog_tactics]
ssimplE [in seplog_tactics]
ssimplE [in tacticsforseplog]
ssimplE_simpl [in seplog_tactics]
ssimplE' [in seplog_tactics]
ssimplI [in seplog_tactics]
ssimplI [in tacticsforseplog]
ssimplI_simpl [in seplog_tactics]
ssimplI' [in seplog_tactics]
sss [in OSIntExitPure]
sss' [in OSIntExitPure]
sstep_idmove_deter [in cstepLib]
sstep_pumerge' [in progtaskstepLib]
sstep_pumerge [in progtaskstepLib]
sstep_AddKsToTail [in progtaskstepLib]
sstep_cont_locality [in tst_prop]
sstep1_locality [in progtaskstepLib]
StarAssocE [in lemmasforseplog]
StarAssocI [in lemmasforseplog]
StarComm [in lemmasforseplog]
StarEmpEL [in lemmasforseplog]
StarEmpER [in lemmasforseplog]
StarEmpIL [in lemmasforseplog]
StarEmpIR [in lemmasforseplog]
StarExEL [in lemmasforseplog]
StarExER [in lemmasforseplog]
StarExIL [in lemmasforseplog]
StarExIR [in lemmasforseplog]
starinvnoisr_prop1_rev [in tst_prop]
starinv_prop1_rev' [in OSIntExitPure]
starinv_isr_set_highest_tid [in hoare_tactics]
starinv_isr_osabst_emp [in hoare_tactics]
starinv_isr_prop4' [in tst_prop]
starinv_isr_ncare_ab [in tst_prop]
starinv_isr_ncare_aux_ab_iret [in tst_prop]
starinv_isr_prop_intro2' [in tst_prop]
starinv_isr_ncare_aux_ab [in tst_prop]
starinv_prop [in asrtLib]
starinv_isr_prop_elim [in asrtLib]
starinv_isr_prop_rev [in asrtLib]
starinv_isr_prop5 [in asrtLib]
starinv_isr_prop4 [in asrtLib]
starinv_isr_elim1 [in asrtLib]
starinv_isr_prop_intro3 [in asrtLib]
starinv_isr_prop_intro2 [in asrtLib]
starinv_isr_prop_intro1 [in asrtLib]
starinv_prop2_rev [in asrtLib]
starinv_prop2 [in asrtLib]
starinv_prop1_rev [in asrtLib]
starinv_prop1 [in asrtLib]
starinv_prop1_rev [in derivedrules]
starinv_prop1' [in derivedrules]
StarMono [in lemmasforseplog]
StarPureE [in lemmasforseplog]
StarPureI [in lemmasforseplog]
StarTrueI [in lemmasforseplog]
star_star_comm [in aux_for_hoare_lemmas]
star_star_eq_rep [in aux_for_hoare_lemmas]
star_star_comm [in symbolic_execution]
star_star_eq_rep [in symbolic_execution]
Star2PureE [in lemmasforseplog]
Star2PureI [in lemmasforseplog]
Star2PureLE [in lemmasforseplog]
Star2PureLI [in lemmasforseplog]
Star2PureRE [in lemmasforseplog]
Star2PureRI [in lemmasforseplog]
Star2TrueE [in lemmasforseplog]
Star2TrueI [in lemmasforseplog]
star3_comm' [in aux_for_hoare_lemmas]
star3_comm [in aux_for_hoare_lemmas]
star3_comm' [in symbolic_execution]
star3_comm [in symbolic_execution]
statmbox_and_not_statmbox_eq_rdy [in Mbox_common]
statq_and_not_statq_eq_rdy [in OSQPostPure]
statsem_and_not_statsem_eq_rdy [in sem_common]
stepev_still_inos [in progtaskstepLib]
step_fexec_ninos [in progtaskstepLib]
step_to_inos_dec [in progtaskstepLib]
Steq_projS_tid_neq_is_eq [in tst_prop]
sti1_rule_sound [in clistisound]
sti1_rule' [in derivedrules]
sti2_rule_sound [in clistisound]
sti2_rule' [in derivedrules]
stmtcont_eq_length [in contLib]
stmts_dec [in lemmasfortoptheo]
storebytes_mono' [in memory]
storebytes_get_same [in memory]
storebytes_ptomvallist_eqlen_infer [in lmachLib]
storebytes_indom [in lmachLib]
storebytes_ptomvallist_frame [in lmachLib]
storebytes_memjoin [in lmachLib]
storebytes_mono [in lmachLib]
storebytes_set [in lemmasfortoptheo]
storebytes_minus [in tst_prop]
store_same_mono [in memory]
store_mono' [in memory]
store_mapstoval_frame1 [in lmachLib]
store_mapstoval_frame [in lmachLib]
store_mono [in lmachLib]
store_join_map_join [in chkissound]
store_join_store [in lemmasfortoptheo]
store_sub_disj_disj [in lemmasfortoptheo]
store_disj_merge [in lemmasfortoptheo]
store_sub_minus_eq [in lemmasfortoptheo]
store_exists_fcall [in asrtLib]
store_asrt_hold' [in asrtLib]
store_asrt_hold [in asrtLib]
store_exist_join [in asrtLib]
store_exist_join' [in asrtLib]
store_mapstoval_mono_rev2 [in asrtLib]
store_mono_join_eq [in loststepLib]
structtype_imply_fieldoffset [in lmachLib]
struct_type_vallist_match_os_event [in OSEventRemovePure]
struct_type_vallist_match_os_event [in laby]
struct_type_vallist_match_os_event_mbox [in laby]
struct_type_vallist_match_os_tcb [in laby]
struct_type_vallist_match_elim_13 [in type_val_match]
struct_type_vallist_match_elim_12 [in type_val_match]
struct_type_vallist_match_elim_11 [in type_val_match]
struct_type_vallist_match_elim_10 [in type_val_match]
struct_type_vallist_match_elim_9 [in type_val_match]
struct_type_vallist_match_elim_8 [in type_val_match]
struct_type_vallist_match_elim_7 [in type_val_match]
struct_type_vallist_match_elim_6 [in type_val_match]
struct_type_vallist_match_elim_5 [in type_val_match]
struct_type_vallist_match_elim_4 [in type_val_match]
struct_type_vallist_match_elim_3 [in type_val_match]
struct_type_vallist_match_elim_2 [in type_val_match]
struct_type_vallist_match_elim_1 [in type_val_match]
struct_array_rm_type_val_match [in type_val_match]
struct_type_vallist_match_elim_0 [in type_val_match]
struct_type_vallist_match_os_event [in lab]
struct_type_vallist_match_os_event_mbox [in lab]
struct_type_vallist_match_os_tcb [in lab]
struct_type_vallist_match_os_tcb [in inv_prop]
struct_type_vallist_match_os_q_freeblk [in inv_prop]
struct_type_vallist_match_os_q [in inv_prop]
struct_type_vallist_match_os_event [in inv_prop]
struct_member_rv_general [in symbolic_execution]
struct_offset_rv [in symbolic_execution]
struct_member_array_rv [in symbolic_execution]
struct_member_rv_g_general [in symbolic_execution]
struct_member_array_rv_g [in symbolic_execution]
struct_member_rv_g [in symbolic_execution]
struct_member_rv_g''' [in symbolic_execution]
struct_member_rv_g'' [in symbolic_execution]
struct_member_rv_g' [in symbolic_execution]
struct_member_rv [in symbolic_execution]
struct_member_rv'' [in symbolic_execution]
struct_member_rv' [in symbolic_execution]
struct_asrt_eq [in symbolic_execution]
struct_rm_update_eq [in symbolic_execution]
subdomenv_conse [in asrtLib]
subs_tst_wo_mem_eq [in tst_prop]
subs_eq_isr [in tst_prop]
sub_disj_disj [in lemmasfortoptheo]
sub_len_neq [in tst_prop]
sub_join_trans' [in tst_prop]
sub_join_trans [in tst_prop]
sub_eqe [in tst_prop]
sub_minus_merge [in tst_prop]
sub_minus_disj [in tst_prop]
sub_disj [in tst_prop]
sub_minus_merge_eq [in tst_prop]
sub_minus [in tst_prop]
sub_dom_exists [in asrtLib]
sub_emp [in OSTimeTickPure]
sub_joinsig_get [in OSTimeTickPure]
sub_joinsig_set_sud [in OSTimeTickPure]
sub_zero_eq_rev [in mathlib]
sub_joinsig_get [in PIF_aux]
sub_zero_eq [in symbolic_execution]
sub_mul_eq_add_mul [in symbolic_execution]
swinv_prop2 [in ruleLib]
swinv_prop1 [in ruleLib]
swinv_inv_O''' [in ruleLib]
swinv_inv_O [in tst_prop]
swinv_ncare_ab [in tst_prop]
swinv_isremp [in tst_prop]
swinv_isr_emp [in tst_prop]
SWINV_irrev_prop [in asrtLib]
switch_rule_sound [in switchsound]
switch_rule_sound' [in switchsound]
switch_rule' [in derivedrules]
swi_rdy_inv''' [in lemmasfortoptheo]
swi_rdy_eq_swi [in tst_prop]
swi_rdy_inv' [in tst_prop]
swpre_join_prop' [in ruleLib]
swpre_store [in lemmasfortoptheo]
swpre_locality [in tst_prop]
swpre_prop' [in tst_prop]
swpre_ncare_ab [in tst_prop]
swpre_prop [in tst_prop]
swpre_join_prop [in asrtLib]
SWPRE_irrev_prop [in asrtLib]
sw_has_code [in tst_prop]
sw_same_t [in tst_prop]


T

tarray_tvoid [in common]
taskst_join_merge [in joinmemLib]
tasks_set_set [in progtaskstepLib]
tasks_set_a_set_a [in progtaskstepLib]
tasks_set_eq_set2 [in tst_prop]
tasks_get_set [in tst_prop]
tasks_set_get_neq [in tst_prop]
tblemma1 [in OSMutex_common]
tblemma2 [in OSMutex_common]
tblemma3 [in OSMutex_common]
tblemma4 [in OSMutex_common]
tcbblk_prio_range [in common]
tcbdllseg_get_last_tcb_ptr [in OSEventTaskRdyPure]
tcbdllseg_split' [in OSEventTaskRdyPure]
tcbdllseg_isvptr [in OSEventTaskRdyPure]
tcbdllseg_last_nextptr [in hoare_tactics]
tcbdllseg_l_not_nil [in OSMutexPendPure1]
tcbdllseg_cons [in OSMutexPendPure1]
tcbdllseg_split [in common]
tcbdllseg_compose [in common]
tcbdllseg_osabst_emp [in inv_prop]
tcbdllseg_precise [in inv_prop]
tcbdllseg_compose [in inv_prop]
tcbdllseg_compose_tail [in OSTimeTickPure]
tcbdllseg_compose' [in OSTimeTickPure]
tcbjoinsig_set_sub_sub [in oscore_common]
tcbjoinsig_set_sub_sub [in OSTimeTickPure]
tcbjoinsig_set_sub_sub [in PIF_aux]
tcbjoin_mod [in OSMutex_common]
tcbjoin_set_ex [in mathlib_join]
tcbjoin_set_ex_main [in mathlib_join]
tcbjoin_join_ex2 [in mathlib_join]
tcbjoin_join_ex2_main [in mathlib_join]
tcbjoin_join_get_neq [in mathlib_join]
tcbjoin_join_get_neq_my [in mathlib_join]
tcbjoin_get_getneq [in mathlib_join]
tcbjoin_get_getneq_my [in mathlib_join]
tcbjoin_get_a [in mathlib_join]
tcbjoin_get_a_my [in mathlib_join]
tcbjoin_get_get [in mathlib_join]
tcbjoin_get_get_my [in mathlib_join]
tcbjoin_get [in mathlib_join]
tcbjoin_get_my [in mathlib_join]
tcbjoin_set [in mathlib_join]
tcbjoin_set_my [in mathlib_join]
tcbjoin_neq [in OSTimeTickPure]
tcbjoin_set [in OSTimeTickPure]
tcbjoin_get_n [in OSTimeTickPure]
tcbjoin_get_none [in OSTimeTickPure]
tcbjoin_join_ex_join [in OSTimeTickPure]
tcbjoin_joinsig_eq [in OSTimeTickPure]
tcbjoin_tid_neq [in mathlib]
tcbjoin_join_ex [in mathlib]
tcbjoin_get_get2 [in mathlib]
TCBListP_head_in_tcb [in sempend_pure]
TCBListP_head_in_tcb [in Mbox_common]
TCBList_imp_TCBNode [in OSMutex_common]
TCBList_get_head [in OSMutex_common]
TCBList_P_split_by_tcbls_verbose [in OSMutex_common]
TCBList_P_post_msg_gen [in OSMutexPostPure]
TCBList_P_post_msg [in OSQPostPure]
TCBList_P_Combine [in OSQPostPure]
TCBList_P_Split [in OSQPostPure]
TCBList_P_rtbl_add [in OSQPostPure]
TCBList_P_rtbl_add_lemma_main [in OSQPostPure]
TCBList_P_rtbl_add_lemma_2 [in OSQPostPure]
TCBList_P_rtbl_add_lemma_2a [in OSQPostPure]
TCBList_P_rtbl_add_lemma_1 [in OSQPostPure]
TCBList_P_rtbl_add_lemma_1a [in OSQPostPure]
TCBList_P_rtbl_add_simpl_version [in OSQPostPure]
TCBList_P_split_by_tcbls [in hoare_tactics]
TCBList_P_combine_copy [in hoare_tactics]
TCBList_P_impl_high_tcbcur_rdy' [in OSQPendPure]
TCBList_P_impl_high_tcbcur_rdy [in OSQPendPure]
tcblist_p_node_rl [in OSQPendPure]
TCBList_P_tcb_block_hold' [in OSQPendPure]
TCBList_P_tcb_block_hold'' [in OSQPendPure]
TCBList_P_tcb_block_hold [in OSQPendPure]
TCBList_P_tcb_get_msg_hold [in OSQPendPure]
TCBList_P_impl_high_tcbcur_Some' [in OSQPendPure]
TCBList_P_impl_high_tcbcur_Some [in OSQPendPure]
TCBList_P_tcb_block_hold_mutex [in OSMutexPendPure1]
TCBList_P_tcb_dly_hold' [in OSTimeDlyPure]
TCBList_P_tcb_dly_hold [in OSTimeDlyPure]
TCBList_P_post_sem [in sempost_pure]
TCBList_P_imp_RL [in OSTimeTickPure]
tcblist_p_imp_tcbnode_p [in OSTimeTickPure]
tcblist_p_tid_neq' [in OSTimeTickPure]
TCBList_P_not_in_remove_last [in OSTimeTickPure]
TCBList_P_imp_Prio_Not_In [in OSTimeTickPure]
TCBList_P_nth_prio [in OSTimeTickPure]
TCBList_P_in_list_get_some_mutex [in OSTimeTickPure]
TCBList_P_in_list_get_some_sem [in OSTimeTickPure]
TCBList_P_in_list_get_some_mbox [in OSTimeTickPure]
TCBList_P_in_list_get_some_q [in OSTimeTickPure]
tcblist_p_recombine [in OSTimeTickPure]
TCBList_P_combine [in OSTimeTickPure]
TCBList_P_split [in OSTimeTickPure]
TCBList_P_RL_TCBblk_P [in OSTimeTickPure]
tcblist_p_sub_eq [in mathlib]
tcblist_p_indom_eq [in mathlib]
TCBList_merge_prop [in mathlib]
TCBList_get_TCBNode_P [in mathlib]
TCBList_P_decompose [in mathlib]
TCBList_P_tcbmod_get [in mathlib]
TCBList_P_tcb_block_hold [in sempend_pure]
tcblist_p_node_rl_sem [in sempend_pure]
TCBList_P_post_msg_mbox [in Mbox_common]
TCBList_P_post_mbox [in Mbox_common]
TCBList_P_tcb_block_hold' [in Mbox_common]
TCBList_P_tcb_block_hold'' [in Mbox_common]
TCBList_P_tcb_block_hold [in Mbox_common]
TCBList_P_tcb_get_msg_hold [in Mbox_common]
TCBList_P_impl_high_tcbcur_rdy [in Mbox_common]
TCBList_P_impl_high_tcbcur_Some [in Mbox_common]
tcblist_p_node_rl_mbox [in Mbox_common]
tcbls_l_mutexpend [in OSMutex_common]
tcbls_rtbl_timetci_update_rl_rtbl_priotbl_p [in OSTimeTickPure]
tcbls_rtbl_timetci_update_rl_rtbl_priotbl_p' [in OSTimeTickPure]
tcbls_rtbl_timetci_update_len_eq [in OSTimeTickPure]
tcbls_rtbl_timetci_update_len_eq' [in OSTimeTickPure]
tcbls_rtbl_timetci_update_rgrp_vint [in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_split [in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_link [in OSTimeTickPure]
tcbls_rtbl_timetci_update_tls_eq_next [in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold'' [in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold' [in OSTimeTickPure]
tcbls_rtbl_timetci_update_hold [in OSTimeTickPure]
tcbls_rtbl_timetci_update_decompose [in OSTimeTickPure]
tcbls_rtbl_timetci_update_compose [in OSTimeTickPure]
tcbls_rtbl_timetci_update_get_ectr_eq [in OSTimeTickPure]
TcbMod_merge_emp_l [in lemmasforseplog]
TcbMod_disj_merge_eq [in lemmasforseplog]
tcbmod_join_ex [in progtaskstepLib]
tcbmod_join_sig_nex [in progtaskstepLib]
TcbMod_set_R_PrioTbl_P_hold [in OSQPendPure]
tcbmod_joinsig_get [in laby]
tcbmod_joinsig_get [in lab]
tcbmod_sub_joinsig_sub [in OSTimeTickPure]
tcbmod_set_neq_change [in OSTimeTickPure]
tcbmod_get_or [in mathlib]
TcbMod_join_impl_prio_neq_cur_r [in mathlib]
TcbMod_join_impl_prio_neq_cur_l [in mathlib]
tcbmod_neq_set_get [in mathlib]
TcbMod_set_R_PrioTbl_P_hold [in Mbox_common]
TCBNode_P_msg [in OSQGetMsgPure]
TCBNode_P_prio [in OSQPostPure]
TCBNode_P_rtbl_add [in OSQPostPure]
TCBNode_P_change_next_ptr [in OSTimeTickPure]
tcbnode_rl_prop [in OSTimeTickPure]
tcbnode_rl_prop' [in OSTimeTickPure]
tcbset_indom_eq [in OSMutex_common]
tcb_join_join_merge [in OSMutex_common]
tcb_join_join_joinsig' [in OSEventTaskRdyPure]
tcb_join_join_joinsig [in OSEventTaskRdyPure]
tcb_get_ex_tcbjoin [in OSEventTaskRdyPure]
tcb_join_disj_get [in OSEventTaskRdyPure]
tcb_inrtbl_not_vhold [in OSMutexPostPure]
tcb_inrtbl_not_vhold [in sempost_pure]
tcb_neq_joinsig_tcbjoin_joinsig_minus [in OSTimeTickPure]
tcb_join_joinsig_ex_joinsig [in OSTimeTickPure]
tcb_minus_emp_eq [in OSTimeTickPure]
tcb_minus_mergesig_minus_minus_eq [in OSTimeTickPure]
tcb_joinsig_join_get_minus_eq [in OSTimeTickPure]
tcb_minus_self_emp [in OSTimeTickPure]
tcb_joinsig_get_sub_ex [in OSTimeTickPure]
tcb_domeq_joinsig_ex [in OSTimeTickPure]
tcb_eptr_get_ectr [in OSTimeTickPure]
tcb_eptr_get_ectr' [in OSTimeTickPure]
tcb_get_join [in mathlib]
tcb_get_set_neq_none [in PIF_aux]
tcb_inrtbl_not_vhold [in Mbox_common]
temp [in OSIntExitPure]
temp' [in OSIntExitPure]
th_no_create_lift_ev [in progtaskstepLib]
th_free_lift [in progtaskstepLib]
th_no_create_lift [in progtaskstepLib]
th_ttop_lift [in progtaskstepLib]
tickchange_tcblist_p_hold_mid [in OSTimeTickPure]
tickchange_ecblist_p [in OSTimeTickPure]
tickchange_other_tcblist_p_hold [in OSTimeTickPure]
tickchange_other_tcbnode_p_hold [in OSTimeTickPure]
tickchange_other_tcbnode_p_hold' [in OSTimeTickPure]
tickchange_tcbnode_p_hold [in OSTimeTickPure]
tickchange_nodup [in OSTimeTickPure]
tickchange_exists [in OSTimeTickPure]
tickchange_shift [in OSTimeTickPure]
tickchange_eq_ostcbnext [in OSTimeTickPure]
tickchange_goodst [in PIF_aux]
tickchange_not_waiting [in PIF_aux]
tickchange_nonest_ct [in PIF_aux]
tickchange_eq_prio [in PIF_aux]
tickchange_exct [in PIF_aux]
tickchange_nonestpend [in PIF_aux]
tickchange_iswait [in PIF_aux]
tickchange_nonone [in PIF_aux]
tickchange_no_owner [in PIF_aux]
tickchange_highestrdy_rdy [in PIF_aux]
tickchange_getop_eq [in PIF_aux]
tickchange_els [in PIF_aux]
tickstep_eqdomtls [in oscore_common]
tickstep_ecblist_p [in OSTimeTickPure]
tickstep_ecblist_p' [in OSTimeTickPure]
tickstep_decompose [in OSTimeTickPure]
tickstep_r_priotbl_p [in OSTimeTickPure]
tickstep_r_priotbl_p' [in OSTimeTickPure]
tickstep_rh_tcblist_ecblist_p [in OSTimeTickPure]
tickstep_rh_tcblist_ecblist_p' [in OSTimeTickPure]
tickstep_rh_curtcb [in OSTimeTickPure]
tickstep_rh_curtcb' [in OSTimeTickPure]
tickstep_exists [in OSTimeTickPure]
tickstep_exists' [in OSTimeTickPure]
tickstep_exists'' [in OSTimeTickPure]
tickstep_l_get_last_tcb_ptr_eq [in OSTimeTickPure]
tickstep_l_get_last_tcb_ptr_eq' [in OSTimeTickPure]
tickstep_goodst [in PIF_aux]
tickstep'_other_get_eq [in OSTimeTickPure]
tick_rdy_ectr_split [in OSTimeTickPure]
tick_rdy_ectr'_decompose [in OSTimeTickPure]
tick_fixpoint_convert_rev [in OSTimeTickPure]
tick_fixpoint_convert [in OSTimeTickPure]
tick_rdy_ectr_ignore [in OSTimeTickPure]
tick_rdy_ectr_imp' [in OSTimeTickPure]
tick_rdy_ectr_imp [in OSTimeTickPure]
tick_rdy_ectr_imp_x' [in OSTimeTickPure]
tick_rdy_ectr_imp_x [in OSTimeTickPure]
tick_rdy_ectr_get_ectr_eq [in OSTimeTickPure]
tidneq_inwt_in [in OSQPostPure]
tidsame_trans [in laby]
tidsame_set [in absop_rules]
tidsame_trans [in lab]
tidspec.beq_false_neq [in language]
tidspec.beq_true_eq [in language]
tidspec.blt_beq_dec [in language]
tidspec.blt_asym [in language]
tidspec.blt_irrefl [in language]
tidspec.blt_trans [in language]
tidspec.eq_beq_true [in language]
tidspec.neq_beq_false [in language]
tid_in_rmwt_in [in OSQPostPure]
tid_eq_dec [in auxdef]
tid_blt_false [in OSTimeTickPure]
tid_beq_true [in OSTimeTickPure]
timetickisr_proof [in TimeIntProof]
timetick_tcblist_p [in OSTimeTickPure]
timetick_tcblist_prop_hold [in OSTimeTickPure]
timetick_idle_in_rtbl [in OSTimeTickPure]
timetick_update_prop [in OSTimeTickPure]
timetick_weakpif [in PIF_aux]
tlmatch_len_eq [in lmachLib]
tlmatch_dec' [in lemmasfortoptheo]
tlmatch_lengtheq [in tst_prop]
tlmatch_trans [in tst_prop]
tlmatch_trans'' [in tst_prop]
tlmatch_trans' [in tst_prop]
tlmatch_dec [in tst_prop]
tls_get_set_indom [in absop_rules]
tls_get_set [in tst_prop]
tl_dl_vl_eq [in tst_prop]
tl_rev_eq [in tst_prop]
tl_vl_match_rev [in asrtLib]
tl_vl_dl'' [in asrtLib]
tl_vl_dl' [in asrtLib]
tl_vl_match_false_append [in asrtLib]
tl_vl_match_true_append [in asrtLib]
tl_vl_rev_match [in asrtLib]
tl_vl_match_leneq' [in asrtLib]
tl_vl_match_leneq [in asrtLib]
tl_vl_dl [in asrtLib]
tmp [in OSMutexPostPart2_2]
tmp2 [in OSMutexPostPart2_2]
tm_mapsto_put' [in tst_prop]
tm_mapsto_put [in tst_prop]
topis_nil [in common]
topis_0_imp [in common]
toptheorem [in lemmasfortoptheo]
toptheorem' [in lemmasfortoptheo]
toptheorem'' [in lemmasfortoptheo]
toyint_sti_inv_elim [in ToyIntPure]
toyisr_proof [in ToyIntProof]
transitive_lex_ord [in Coqlib]
TrueI [in lemmasforseplog]
true_if_else_true [in mathlib]
tsimtopsim [in lemmasfortoptheo]
tstepev_osstepabt [in progtaskstepLib]
tstep_to_osstep [in progtaskstepLib]
tstep_alloc_nabt [in progtaskstepLib]
TStWoMemEq_emple_tst_same [in progtaskstepLib]
tst_subs_disj_join [in tst_prop]
tst_wo_mem_eq_isremp_trans [in tst_prop]
tst_wo_mem_eq_trans [in tst_prop]
tst_wo_mem_eq_sym [in tst_prop]
tst_wo_mem_eq_subs_trans [in tst_prop]
tst_wo_mem_eq_subs_eq [in tst_prop]
two_p_strict_2 [in Coqlib]
two_p_strict [in Coqlib]
two_p_monotone_strict [in Coqlib]
two_p_monotone [in Coqlib]
two_power_nat_two_p [in Coqlib]
two_power_nat_pos [in Coqlib]
two_power_nat_O [in Coqlib]
typematch_mono [in lmachLib]
type_val_match_comptr_elim [in type_val_match]
type_val_match_ptr_elim [in type_val_match]
type_val_match_int32u_elim [in type_val_match]
type_val_match_int16u_elim [in type_val_match]
type_val_match_int8u_elim [in type_val_match]
type_val_mach_encode_val_decode_val [in tst_prop]
type_encode_nnil [in common]
type_eq_true_eq [in aux_for_hoare_lemmas]


U

ucos_correct [in ucos_correct]
ucos_toprule_sat [in ucos_correct]
Unbounded_Priority_Inversion_Free_Proof [in ucos_correct]
unMapvallistint8u [in OSMutex_common]
unmap_inrtbl' [in OSEventTaskRdyPure]
unmap_inrtbl [in mathlib]
unmap_inrtbl' [in mathlib]
unroll_positive_rec [in Coqlib]
unsignedsimpllemma [in OSMutex_common]
unsigned_int_and_not_range [in OSEventTaskRdyPure]
unsigned_one [in IntLib]
unsigned_zero [in IntLib]
unsigned_inj [in IntLib]
unsigned_mone_val [in IntLib]
unsigned_to_z_eq [in mathlib]
unsigned_zero [in aux_for_hoare_lemmas]
unsigned_minus_le_max [in symbolic_execution]
unTree_prop2 [in seplog_tactics]
unTree_prop1 [in seplog_tactics]
unTree_prop2 [in tacticsforseplog]
unTree_prop1 [in tacticsforseplog]
uop_rv [in symbolic_execution]
update_rtbl_tcblist_hold [in OSTimeDlyPure]
update_nth_aux [in mathlib]
update_nth_val_length_eq [in mathlib]
update_nth_val_len_eq [in hoare_assign]
update_nth [in aux_for_hoare_lemmas]
update_nth [in symbolic_execution]
upd_last_prop [in OSMutex_common]
upd_last_ectrls_last [in OSEventRemovePure]
upd_last_prop [in semdel_pure]
upd_last_prop [in OSQDelPure]
upd_last_prop' [in mathlib]
upd_vallist_eq_length [in mathlib]
upd_last_prop [in Mbox_common]
up_val_op_ex [in aux_for_hoare_lemmas]


V

valinjlemma1 [in OSMutex_common]
valinj_lemma2 [in OSMutex_common]
valinj_lemma1 [in OSMutex_common]
vallistseg_n_m_split [in mathlib]
vallist_seg_upd_irr [in mathlib]
vallist_seg_upd_SM [in mathlib]
vallist_seg_length [in mathlib]
vallist_seg_length_prop [in mathlib]
vallist_pre_size_eq [in mathlib]
vallist_seg_upd_prop [in mathlib]
vallist_seg_prop_eq [in mathlib]
vallist_seg_ltunm_prop [in mathlib]
vallist_seg_n_m_split' [in mathlib]
vallist_seg_prop [in mathlib]
vallist_seg_Sn [in mathlib]
vallist_seg_eqnil [in mathlib]
vallist_destru [in mathlib]
val_inj_boolor_false [in OSQCreatePure]
val_inj2 [in OSMutex_common]
val_eq_lemma001 [in OSMutex_common]
val_eq_some_not_zero [in OSMutex_common]
val_inj_eq' [in OSMutex_common]
val_injsimpl [in OSMutex_common]
val_inj_or [in OSMutex_common]
val_inj_eq [in OSMutex_common]
val_inj_notint_vnull_false [in OSEventRemovePure]
val_inj_notint_zero_eq [in OSEventRemovePure]
val_beq_sym [in OSEventRemovePure]
val_beq_true [in OSEventRemovePure]
val_beq_true_eq [in OSEventRemovePure]
val_eq_true_eq [in OSEventRemovePure]
val_elem_neq_one [in OSTimeTickPure]
val_eq_zero_neq [in mathlib]
val_inj_eq_elim [in mathlib]
val_inj_eq_p [in mathlib]
val_inj_i1_i2_lt [in mathlib]
val_inj_eq_q [in mathlib]
val_eq_vundef' [in mathlib]
val_eq_vundef [in mathlib]
val_inj_122 [in mathlib]
val_inj_12' [in mathlib]
val_inj_12 [in mathlib]
val_inj_1 [in mathlib]
val_inj_impl_neq [in sem_lab]
val_inj_not_false [in sem_lab]
val_inj_not_true [in sem_lab]
val_inj_false [in sem_lab]
val_inj_true [in sem_lab]
val_inj_not_Vundef_2 [in sep_pure]
val_inj_impl_Vptr [in sep_pure]
val_inj_impl_Vnull [in sep_pure]
val_inj_impl_eq [in sep_pure]
val_inj_not_Vundef_1 [in sep_pure]
val_inj_lemma [in Mbox_common]
val_inj_eq [in Mbox_common]
var_rv [in symbolic_execution]
verified_os' [in toptheorem]
vhold_not_get' [in OSMutex_common]
vhold_not_get [in OSMutex_common]
vl_app_v_h_t [in asrtLib]
vl_elem_neq_dec [in OSTimeTickPure]
Vnull_is_ptr [in laby]
Vnull_is_ptr [in lab]
vptr_inj_neq_Vundef [in sep_pure]
V_OSTCBEventPtr_change_next_ptr' [in OSTimeTickPure]
V_OSTCBStat_change_next_ptr' [in OSTimeTickPure]
V_OSTCBDly_change_next_ptr' [in OSTimeTickPure]
V_OSTCBPrio_change_next_ptr' [in OSTimeTickPure]
V_OSTCBDly_change_next_ptr [in OSTimeTickPure]
V_OSTCBEventPtr_change_next_ptr [in OSTimeTickPure]
V_OSTCBStat_change_next_ptr [in OSTimeTickPure]
V_OSTCBBitY_change_next_ptr [in OSTimeTickPure]
V_OSTCBBitX_change_next_ptr [in OSTimeTickPure]
V_OSTCBY_change_next_ptr [in OSTimeTickPure]
V_OSTCBX_change_next_ptr [in OSTimeTickPure]
V_OSTCBPrio_change_next_ptr [in OSTimeTickPure]
V_OSTCBMsg_change_next_ptr [in OSTimeTickPure]
V_OSTCBNext_set_tcb_next [in OSTimeTickPure]


W

WaitTCBblk_rtbl_add_rev [in OSQPostPure]
WaitTCBblk_rtbl_add [in OSQPostPure]
wellformedosq_ens_add_1 [in OSQPostPure]
wellformedosq_size_add_1 [in OSQPostPure]
wellq_in_props [in OSQPostPure]
wellq_props [in OSQAcceptPure]
WFFunEnv_imply_Methsim' [in soundness]
WFFunEnv_imply_WFFuncsSim [in soundness]
wf_lex_ord [in Coqlib]
while_rule'' [in OSEventRemovePure]
while_rule' [in hoare_lemmas]
while_rule_sound [in whilesound]
while_sim_aux [in whilesound]
WLF_OSQ_prop [in OSQCreatePure]
Wordsize_64.wordsize_not_zero [in Integers]
Wordsize_8.wordsize_not_zero [in Integers]
Wordsize_16.wordsize_not_zero [in Integers]
Wordsize_32.wordsize_not_zero [in Integers]
wtset_notnil_msgls_nil [in OSQPostPure]


X

xmapis1shlx [in OSMutex_common]
xx [in OSIntExitPure]
xx [in ToyIntPure]
xx [in OSQPendPure]
xx [in oscore_common]
xx [in derivedrules]
xx [in mathlib]
xxx [in OSIntExitPure]
xxx [in ToyIntPure]
xxx [in oscore_common]
xxx [in tst_prop]
xxx [in derivedrules]
xxxx [in ToyIntPure]
xxxx [in oscore_common]
XXXX [in lemmasfortoptheo]
xxxxx [in oscore_common]
xxx' [in OSIntExitPure]
xx' [in ToyIntPure]
xx' [in OSQPendPure]


Z

zadd_rm_tail [in IntLib]
zadd_rm_head [in IntLib]
Zdivides_trans [in Coqlib]
Zdivide_interval [in Coqlib]
Zdiv_interval_2 [in Coqlib]
Zdiv_interval_1 [in Coqlib]
Zdiv_Zdiv [in Coqlib]
Zdiv_unique [in Coqlib]
Zdiv_small [in Coqlib]
zdiv_range_le_le [in IntLib]
zdiv_range_le_lt [in IntLib]
zdiv_equiv [in IntLib]
zeq_false [in Coqlib]
zeq_true [in Coqlib]
zh_asdf [in OSMutex_common]
zh_asdf1 [in OSMutex_common]
Zland_le_r [in OSMutex_common]
Zland_le_l [in OSMutex_common]
zle_false [in Coqlib]
zle_true [in Coqlib]
Zle_imply_natle [in asrtLib]
Zle_natle [in mathlib]
zlt_false [in Coqlib]
zlt_true [in Coqlib]
Zmax_bound_r [in Coqlib]
Zmax_bound_l [in Coqlib]
Zmax_spec [in Coqlib]
Zmin_spec [in Coqlib]
Zmod_recombine [in Coqlib]
Zmod_unique [in Coqlib]
Zmod_small [in Coqlib]
Zmult_le_compat_l_neg [in Coqlib]
zof_nat_eq_zero_zero [in mathlib]
z_le_n_lt [in OSEventTaskRdyPure]
z_le_n_lt' [in OSEventTaskRdyPure]
Z_shiftl_16_range [in IntLib]
Z_lxor_range [in IntLib]
Z_lor_range [in IntLib]
Z_lor_range_hi [in IntLib]
Z_lor_range_lo [in IntLib]
Z_land_range [in IntLib]
Z_land_range_hi [in IntLib]
Z_land_range_lo_r [in IntLib]
Z_land_range_lo [in IntLib]
z_to_nat_shr3 [in OSTimeTickPure]
z_split [in mathlib]
z_le_255_imp_n [in mathlib]
z_le_7_imp_n [in mathlib]
Z_le_nat [in mathlib]
Z_prop [in mathlib]
Z2Nat_0 [in mathlib]


_

_mathsolver_ext.OSMapVallist_safe_deVint32 [in mathsolver]
_mathsolver_ext.OSUnMapVallist_safe_deVint32 [in mathsolver]
_mathsolver.sample2 [in mathsolver]
_mathsolver.sample1 [in mathsolver]
_mathsolver.sample0 [in mathsolver]
_mathsolver.sample'' [in mathsolver]
_mathsolver.repr_unsigned [in mathsolver]
_mathsolver.unsigned_ge2stdrange [in mathsolver]
_mathsolver.unsigned_gt2stdrange [in mathsolver]
_mathsolver.unsigned_le2stdrange [in mathsolver]
_mathsolver.unsigned_lt2stdrange [in mathsolver]
_mathsolver.nat_ge2stdrange [in mathsolver]
_mathsolver.nat_gt2stdrange [in mathsolver]
_mathsolver.nat_le2stdrange [in mathsolver]
_mathsolver.nat_lt2stdrange [in mathsolver]
_mathsolver.nat_has_dist.dist_a [in mathsolver]
_mathsolver.nat_has_dist.dist_a' [in mathsolver]
_mathsolver.nat_has_next.next_is_smallest [in mathsolver]
_mathsolver.Z_has_dist.dist_a [in mathsolver]
_mathsolver.Z_has_dist.dist_a' [in mathsolver]
_mathsolver.Z_has_next.next_is_smallest [in mathsolver]
_mathsolver.Range.range_fin_elem2 [in mathsolver]
_mathsolver.Range.range_fin_elem2'' [in mathsolver]
_mathsolver.Range.range_fin_elem2' [in mathsolver]
_mathsolver.Range.range_split_last [in mathsolver]
_mathsolver.Range.iter_n_lt_lt [in mathsolver]
_mathsolver.Range.range_split_last' [in mathsolver]
_mathsolver.Range.range_split_last'' [in mathsolver]
_mathsolver.Range.range_l_r_fin_elem [in mathsolver]
_mathsolver.Range.range_fin_elem [in mathsolver]
_mathsolver.Range.range_eq [in mathsolver]
_mathsolver.Range.range_split_first [in mathsolver]
_mathsolver.Range.range_split_first'' [in mathsolver]
_mathsolver.Range.range_split_first' [in mathsolver]
_mathsolver.Range.range_l_r [in mathsolver]
_mathsolver.Range.x_le_iter_next [in mathsolver]
_mathsolver.Range.x_le_next [in mathsolver]


Axiom Index

A

absopx [in tst_prop]


C

CurPr [in pif_theory]


I

InitG [in simulation]
inj_pair2 [in LibTactics]
IsCur [in pif_theory]
IsOwner [in pif_theory]
IsRdy [in pif_theory]
IsWt [in pif_theory]


M

MapSpec.beq_Domain [in Map]
MapSpec.domain [in Map]
MapSpec.image [in Map]
MAP_RANGE.B [in MapLib]
MAP_DOMAIN.blt_beq_dec [in MapLib]
MAP_DOMAIN.blt_asym [in MapLib]
MAP_DOMAIN.blt_irrefl [in MapLib]
MAP_DOMAIN.blt_trans [in MapLib]
MAP_DOMAIN.neq_beq_false [in MapLib]
MAP_DOMAIN.eq_beq_true [in MapLib]
MAP_DOMAIN.beq_false_neq [in MapLib]
MAP_DOMAIN.beq_true_eq [in MapLib]
MAP_DOMAIN.blt [in MapLib]
MAP_DOMAIN.beq [in MapLib]
MAP_DOMAIN.A [in MapLib]
MemoryNotFull [in memory]


O

OldPr [in pif_theory]
OSTCBHighRdy [in opsem]


P

pdata [in opsem]


S

State [in pif_theory]


T

TaskEx [in pif_theory]
taskid [in pif_theory]


W

WaitRel [in pif_theory]
WORDSIZE.wordsize_not_zero [in Integers]


_

_mathsolver.has_dist.dist_a [in mathsolver]
_mathsolver.has_dist.dist [in mathsolver]
_mathsolver.has_next.next_is_smallest [in mathsolver]
_mathsolver.has_next.next [in mathsolver]
_mathsolver.has_le.le_trans [in mathsolver]
_mathsolver.has_le.le_antisymm [in mathsolver]
_mathsolver.has_le.le_refl [in mathsolver]
_mathsolver.has_le.le [in mathsolver]
_mathsolver.has_le.A [in mathsolver]


Constructor Index

A

Aabsdata [in assertion]
abscsq_rule [in inferules]
absecblist [in language]
absecblsid [in language]
absinfer_assume [in inferules]
absinfer_choice2 [in inferules]
absinfer_choice1 [in inferules]
absinfer_seq_end [in inferules]
absinfer_seq [in inferules]
absinfer_prim [in inferules]
absinfer_frm [in inferules]
absinfer_ex [in inferules]
absinfer_conseq [in inferules]
absinfer_disj [in inferules]
absinfer_trans [in inferules]
absinfer_eq [in inferules]
absmbox [in language]
absmsgq [in language]
absmutexsem [in language]
abssem [in language]
abstcblist [in language]
abstcblsid [in language]
Aconj [in assertion]
Acs [in assertion]
Adisj [in assertion]
Aemp [in assertion]
Aexists [in assertion]
Afalse [in assertion]
Agenv [in assertion]
Agvarenv [in assertion]
AHprio [in assertion]
Aie [in assertion]
Ais [in assertion]
Aisfalse [in assertion]
Aisr [in assertion]
Aistrue [in assertion]
Alval [in assertion]
Alvarenv [in assertion]
Amapsto [in assertion]
Amapstolsval [in assertion]
Anot [in assertion]
Aop [in assertion]
api_rule [in toprule]
Apure [in assertion]
array_to_vptr [in opsem]
assign_rule [in inferules]
Astar [in assertion]
ATopis [in assertion]
Atrue [in assertion]
A_notin_lenv [in assertion]
A_dom_lenv [in assertion]
A_eval_list [in assertion]
A_eval_expr [in assertion]


B

baseTree [in seplog_tactics]
baseTree [in tacticsforseplog]
boxer [in LibTactics]
Byte [in memdata]


C

calle_rule_lvar [in inferules]
calle_rule [in inferules]
call_rule [in inferules]
Ceq [in Integers]
Cge [in Integers]
Cgt [in Integers]
checkis [in language]
checkis_rule [in inferules]
checkis_step [in opsem]
Cle [in Integers]
cli [in language]
cli_step [in opsem]
cli1_rule [in inferules]
cli2_rule [in inferules]
Clt [in Integers]
clt_stepev [in opsem]
clt_step [in opsem]
Cne [in Integers]
conseq_rule [in inferules]
cure [in language]
curs [in language]
curtid [in language]
c_stepstarn [in opsem]
c_stepstar0 [in opsem]


D

dcons [in memdata]
disj_rule [in inferules]
DMbox [in assertion]
DMsgQ [in assertion]
DMutex [in assertion]
dnil [in memdata]
DSem [in assertion]


E

eaddrderef_step [in opsem]
eaddrof [in language]
eaddr_step [in opsem]
eaelemaddr_step [in opsem]
eaelem_step [in opsem]
eaptrelemaddr_step [in opsem]
eaptrelem_step [in opsem]
earrayelem [in language]
ebinop [in language]
ebop_step [in opsem]
ecast [in language]
ecastcomptr_step [in opsem]
ecastint_step [in opsem]
ecastnull_step [in opsem]
ecast_step [in opsem]
econst32 [in language]
ec32_step [in opsem]
ederef [in language]
ederef_step [in opsem]
efield [in language]
empTree [in seplog_tactics]
empTree [in tacticsforseplog]
emptylisteq [in seplog_tactics]
emptylisteq [in tacticsforseplog]
emp_update [in InternalFunSpec]
encrit [in language]
encrit_step [in opsem]
encrit1_rule [in inferules]
encrit2_rule [in inferules]
endtls_step [in absop]
enull [in language]
enull_step [in opsem]
eoi [in language]
eoi_ieoff_rule [in inferules]
eoi_ieon_rule [in inferules]
eoi_step [in opsem]
eq_int [in opsem]
eq_struct [in opsem]
eq_array [in opsem]
eq_vcomptr [in opsem]
eq_vptr [in opsem]
eq_tvoid [in opsem]
eq_tnull [in opsem]
esidaddr_step [in opsem]
esid_step [in opsem]
etrref_subset [in etraceref]
eunop [in language]
euopstep [in opsem]
evabort [in etraceref]
evaddrelem_step [in opsem]
evaddrv_step [in opsem]
evalexprlist_i [in lmachLib]
evalexprlist_b [in lmachLib]
evalexprlist_i [in asrtLib]
evalexprlist_b [in asrtLib]
evar [in language]
evar_step [in opsem]
evbop1_step [in opsem]
evbop2_step [in opsem]
evcastint_step [in opsem]
evcons [in etraceref]
evderef_step [in opsem]
evnil [in etraceref]
evoff_step [in opsem]
evuop_step [in opsem]
excrit [in language]
excrit_step [in opsem]
excrit1_rule [in inferules]
excrit2_rule [in inferules]
exint [in language]
exint_step [in opsem]
expr_step [in opsem]
ext_step [in absop]
ex_intro_rule [in inferules]
e_stepn [in opsem]
e_step0 [in opsem]


F

frame_rule_all [in inferules]
frame_rule [in inferules]
freelist_n [in asrtLib]
freelist_0 [in asrtLib]
freelist'_n [in asrtLib]
freelist'_0 [in asrtLib]


G

genv_introexint_rule [in inferules]
genv_introret_rule [in inferules]


H

hapienter_step [in opsem]
hapiexit_step [in opsem]
hapi_step [in opsem]
hapi_code [in language]
hclt_stepev [in opsem]
HETr_abt [in etraceref]
HETr_e [in etraceref]
HETr_ne [in etraceref]
HETr_emp [in etraceref]
hidapi_step [in opsem]
hinten_step [in opsem]
hintex_step [in opsem]
hi_step [in opsem]
hpabt_step [in opsem]
hpt_stepev [in opsem]
hp_stepstarabt [in opsem]
hp_stepev [in opsem]
hp_stepS [in opsem]
hp_stepO [in opsem]
hp_step [in opsem]
hswi_step [in opsem]
htabtstar [in opsem]
htclt_step [in opsem]
htev_stepstar [in opsem]
htstep_abt [in opsem]
ht_starS [in opsem]
ht_starO [in opsem]


I

ift_rule [in inferules]
if_rule [in inferules]
inapi_step [in opsem]
inter_rule [in toprule]
iret_rule [in inferules]
is_tail_cons [in Coqlib]
is_tail_refl [in Coqlib]
itrp_rule [in toprule]


K

kassignl [in language]
kassignr [in language]
kcall [in language]
kearrbase [in language]
kearrindex [in language]
kecast [in language]
kederef [in language]
kenil [in language]
keoffset [in language]
keop1 [in language]
keop2l [in language]
keop2r [in language]
kevent [in language]
kfuneval [in language]
kif [in language]
kint [in language]
kret [in language]
kseq [in language]
kstop [in language]
kwhile [in language]


L

LETr_abt [in etraceref]
LETr_e [in etraceref]
LETr_ne [in etraceref]
LETr_emp [in etraceref]
lex_ord_right [in Coqlib]
lex_ord_left [in Coqlib]
listsubrec [in mathlib]
listsub1 [in mathlib]
list_forall2_cons [in Coqlib]
list_forall2_nil [in Coqlib]
list_norepet_cons [in Coqlib]
list_norepet_nil [in Coqlib]
li_step [in opsem]
li_step [in lemmasfortoptheo]
logic_code [in assertion]
logic_absecb [in assertion]
logic_abstcb [in assertion]
logic_leventc [in assertion]
logic_leventd [in assertion]
logic_llv [in assertion]
logic_lv [in assertion]
logic_val [in assertion]
logic_hid [in assertion]
logic_cs [in assertion]
logic_ie [in assertion]
logic_is [in assertion]
logic_isr [in assertion]
losallocstepstar_n [in loststepLib]
losallocstepstar_0 [in loststepLib]
losallocstep_n [in loststepLib]
losallocstep_0 [in loststepLib]
losidstep_n [in loststepLib]
losidstep_0 [in loststepLib]
lostidstepstarn [in loststepLib]
lostidstepstar0 [in loststepLib]
loststepn_n [in loststepLib]
loststepn_0 [in loststepLib]
loststepstar_n [in loststepLib]
loststepstar_0 [in loststepLib]
ltac_mark [in LibTactics]
ltac_wilds [in LibTactics]
ltac_wild [in LibTactics]
ltac_no_arg [in LibTactics]


M

Make.mkint [in Integers]
MapFun.listset_con [in MapLib]
meth_sim [in simulation]
meth_sim_mod [in simulation]
mkfunasrt [in assertion]
mkinvasrt [in assertion]
MNull [in memdata]


N

negation [in val]
none [in seplog_tactics]
none [in tacticsforseplog]
nonemptylisteq [in seplog_tactics]
nonemptylisteq [in tacticsforseplog]
NoneT [in Coqlib]
NoneT1 [in Coqlib]


O

oand [in val]
obitand [in val]
obitor [in val]
odiv [in val]
oeq [in val]
olshift [in val]
olt [in val]
ominus [in val]
omulti [in val]
oor [in val]
oplus [in val]
oppsite [in val]
orshift [in val]
oscurt [in language]
ostc_step [in opsem]
ostm [in language]
ostmid [in language]
os_stat_mutexsem [in language]
os_stat_mbox [in language]
os_stat_time [in language]
os_stat_q [in language]
os_stat_sem [in language]


P

pairT [in Coqlib]
pattern_absdata [in seplog_tactics]
pattern_default [in seplog_tactics]
pattern_aarray [in seplog_tactics]
pattern_gvararray [in seplog_tactics]
pattern_lvararray [in seplog_tactics]
pattern_ptrarray [in seplog_tactics]
pattern_ptrstruct [in seplog_tactics]
pattern_gvarmapsto [in seplog_tactics]
pattern_lvarmapsto [in seplog_tactics]
pattern_ptrmapsto [in seplog_tactics]
pattern_aexists [in seplog_tactics]
pattern_aemp [in seplog_tactics]
pattern_atrue [in seplog_tactics]
pattern_adisj [in seplog_tactics]
pattern_aconj [in seplog_tactics]
pattern_pure [in seplog_tactics]
pattern_apure [in seplog_tactics]
pfalse_rule [in inferules]
pint_step [in opsem]
Pointer [in memdata]
progabort [in opsem]
prog_sim [in simulation]
pswitch_step [in opsem]
pt_stepev [in opsem]
pt_step [in opsem]
pureTree [in seplog_tactics]
pureTree [in tacticsforseplog]
pure_split_rule [in inferules]


R

rdy [in language]
rdy_change [in absop]
rdy_change_l [in InternalFunSpec]
rete_rule [in inferules]
retspec_intro_rule [in inferules]
ret_rule [in inferules]
r_conseq_rule [in inferules]


S

salloc [in language]
sallocend_step [in opsem]
salloclv_step [in opsem]
sallocp_step [in opsem]
sassign [in language]
sassignend_step [in opsem]
sassignrv_step [in opsem]
sassign_step [in opsem]
scall [in language]
scalle [in language]
scalle_step [in opsem]
sched [in language]
seq_rule [in inferules]
sfexec [in language]
sfexec_step [in opsem]
sfree [in language]
sfreeend_step [in opsem]
sfree_step [in opsem]
sif [in language]
sifthen [in language]
sifthen_step [in opsem]
sif_step [in opsem]
snpcall_step [in opsem]
some [in seplog_tactics]
some [in tacticsforseplog]
SomeT [in Coqlib]
SomeT1 [in Coqlib]
spcall_step [in opsem]
spec_stepS [in opsem]
spec_stepO [in opsem]
spec_assume_step [in opsem]
spec_choice_step2 [in opsem]
spec_choice_step1 [in opsem]
spec_seq_step2 [in opsem]
spec_seq_step1 [in opsem]
spec_prim_step [in opsem]
spec_assume [in language]
spec_choice [in language]
spec_seq [in language]
spec_done [in language]
spec_prim [in language]
sprim [in language]
sprint [in language]
sprint_step [in opsem]
sret [in language]
srete [in language]
srete_step [in opsem]
sretv_step [in opsem]
sret_step [in opsem]
sseq [in language]
sseq_step [in opsem]
sskip [in language]
sskip_step [in opsem]
starTree [in seplog_tactics]
starTree [in tacticsforseplog]
sti [in language]
sti_step [in opsem]
sti1_rule [in inferules]
sti2_rule [in inferules]
stmt_stepev [in opsem]
stmt_step [in opsem]
svfevalnil_step [in opsem]
svfeval_step [in opsem]
sviff_step [in opsem]
svift_step [in opsem]
svseq_step [in opsem]
svwhilef_step [in opsem]
svwhilet_step [in opsem]
swhile [in language]
swhile_step [in opsem]
switch [in language]
switch_rule [in inferules]


T

Tarray [in memdata]
taskabort [in opsem]
task_sim [in simulation]
Tcom_ptr [in memdata]
Tint16 [in memdata]
Tint32 [in memdata]
Tint8 [in memdata]
tl_update [in InternalFunSpec]
Tnull [in memdata]
top_rule [in toprule]
Tptr [in memdata]
trueTree [in seplog_tactics]
trueTree [in tacticsforseplog]
Tstruct [in memdata]
Tvoid [in memdata]


U

Undef [in memdata]


V

Vint32 [in memdata]
Vnull [in memdata]
Vptr [in memdata]
Vundef [in memdata]


W

wait [in language]
waite_rdy_change [in absop]
waite_change [in absop]
waite_rdy_change_l [in InternalFunSpec]
waitO [in pif_theory]
waitS [in pif_theory]
wait_S [in PIF_def]
wait_O [in PIF_def]
wait_rdy_change [in absop]
wait_change [in absop]
wait_rdy_change_l [in InternalFunSpec]
wait_change_l [in InternalFunSpec]
while_rule [in inferules]


Projection Index

G

getasrt [in assertion]
getinv [in assertion]
getprop [in assertion]


I

invp [in assertion]


M

Make.intrange [in Integers]
Make.intval [in Integers]


P

prec [in assertion]


Inductive Index

A

absdata [in language]
absdataid [in language]
absinfer [in inferules]
APIRule [in toprule]
asrt [in assertion]
asrtTree [in seplog_tactics]
asrtTree [in tacticsforseplog]
assign_type_match [in opsem]


B

bop [in val]
Boxer [in LibTactics]


C

comparison [in Integers]
cstep [in opsem]
cstepev [in opsem]
cstepstar [in opsem]
cureval [in language]


D

decllist [in memdata]


E

edata [in language]
estep [in opsem]
estepstar [in opsem]
ETrRef [in etraceref]
evalexprlist' [in lmachLib]
evalexprlist' [in asrtLib]
EventData [in assertion]
evtrace [in etraceref]
expr [in language]
exprcont [in language]


F

find [in seplog_tactics]
find [in tacticsforseplog]
freels [in asrtLib]
freels' [in asrtLib]


H

hapistep [in opsem]
HETr [in etraceref]
hpstep [in opsem]
hpstepabt [in opsem]
hpstepabtstar [in opsem]
hpstepev [in opsem]
hpstepevstar [in opsem]
hpstepstar [in opsem]
htistep [in opsem]
htstep [in opsem]
htstepabt [in opsem]
htstepabtstar [in opsem]
htstepev [in opsem]
htstepevstar [in opsem]
htstepstar [in opsem]


I

InfRules [in inferules]
InterRule [in toprule]
is_tail [in Coqlib]
ItrpRule [in toprule]


L

LETr [in etraceref]
lex_ord [in Coqlib]
lintstep [in opsem]
lintstep' [in lemmasfortoptheo]
listeq [in seplog_tactics]
listeq [in tacticsforseplog]
listsub [in mathlib]
list_forall2 [in Coqlib]
list_norepet [in Coqlib]
logicvar [in assertion]
losallocstepn [in loststepLib]
losallocstepstar [in loststepLib]
losidstepn [in loststepLib]
lostidstepstar [in loststepLib]
loststep [in opsem]
loststepn [in loststepLib]
loststepstar [in loststepLib]
lpstep [in opsem]
lpstepabt [in opsem]
lpstepev [in opsem]
ltac_Mark [in LibTactics]
ltac_Wilds [in LibTactics]
ltac_Wild [in LibTactics]
ltac_No_arg [in LibTactics]
ltstep [in opsem]
ltstepabt [in opsem]
ltstepev [in opsem]


M

MapFun.listset [in MapLib]
memval [in memdata]
MethSim [in simulation]
MethSimMod [in simulation]


O

optionT [in Coqlib]
OptionT [in Coqlib]


P

pattern [in seplog_tactics]
prim [in language]
prodT [in Coqlib]
ProgSim [in simulation]


S

spec_stepstar [in opsem]
spec_step [in opsem]
spec_code [in language]
sstep [in opsem]
sstepev [in opsem]
stmtcont [in language]
stmts [in language]


T

TaskSim [in simulation]
taskstatus [in language]
tcbstats [in language]
tickchange [in absop]
tickchange_l [in InternalFunSpec]
tickstep_l [in InternalFunSpec]
tickstep' [in absop]
TopRule [in toprule]
type [in memdata]


U

uop [in val]


V

val [in memdata]


W

WaitChain [in pif_theory]
WAIT_CHAIN [in PIF_def]


Section Index

D

DECIDABLE_PREDICATE [in Coqlib]
DECIDABLE_EQUALITY [in Coqlib]


E

equatesLemma [in LibTactics]


F

FORALL2 [in Coqlib]


L

LEX_ORDER [in Coqlib]
LIST_FOLD [in Coqlib]
lzh_join [in OSMutexPendPure1]


M

Make.EQ_MODULO [in Integers]
MapFun.Test [in MapLib]


P

POSITIVE_ITERATION [in Coqlib]


Abbreviation Index

A

abtcblsid [in auxdef]
abtcblsid [in absop]


B

byte [in Integers]


E

empabst [in assertion]
empenv [in assertion]
empmem [in assertion]


H

HCurTCB [in OSTCBInvDef]
HECBList [in OSTCBInvDef]
hmstep [in simulation]
hmstepstar [in simulation]
HTCBList [in OSTCBInvDef]
HTime [in OSTCBInvDef]


I

ieoff [in assertion]
ieon [in assertion]
INIT_EVENT_TBL [in InternalFunSpec]
int [in Integers]
int16 [in Integers]
int32 [in Integers]
int64 [in Integers]
int8 [in Integers]


O

optgT [in Coqlib]
optpT [in Coqlib]
opt_predT2 [in Coqlib]
opt_predT [in Coqlib]


Definition Index

A

Aarray [in BaseAsrtDef]
Aarray_rm [in BaseAsrtDef]
Aarray' [in BaseAsrtDef]
absdataidspec.A [in language]
absdataidspec.beq [in language]
absdataidspec.blt [in language]
absdataid_lt [in language]
absdataid_eq [in language]
absdatastru.B [in language]
absecb.B [in language]
absexpr [in language]
absimp [in inferules]
absimp' [in inferules]
absimp'' [in cancel_absdata]
absmsgq.B [in language]
absop [in assertion]
AbsOsEmpAsrt [in assertion]
abssem.B [in language]
abstcb.B [in language]
add [in val]
AddKsToTail [in opsem]
addr [in memdata]
addrlist [in language]
addrspec.A [in memory]
addrspec.B [in memory]
addrspec.beq [in memory]
addrspec.blt [in memory]
addrtypespec.B [in memory]
addrval [in memdata]
addrval_to_addr [in opsem]
addrval_a [in PIF_aux]
addr_to_addrval [in opsem]
AddStmtToKs [in opsem]
add_option_first [in InternalFunSpec]
AECBList [in OSQInvDef]
aemp_isr_is [in inv_prop]
AEventData [in OSQInvDef]
AEventNode [in OSQInvDef]
Agvarenv' [in assertion]
Agvarmapsto [in assertion]
AGVars [in OSTCBInvDef]
Aisrhid [in auxdef]
align [in Coqlib]
alloc [in memory]
allocb [in memory]
allocstep [in loststepLib]
all_elem_p [in mathlib]
Alvarenv' [in assertion]
Alvarmapsto [in assertion]
AMsgData [in OSQInvDef]
and [in val]
andaux [in tst_prop]
Aop' [in assertion]
AOSEvent [in OSQInvDef]
AOSEventFreeList [in OSQInvDef]
AOSEventTbl [in OSQInvDef]
AOSIntNesting [in OSTCBInvDef]
AOSMapTbl [in OSTCBInvDef]
AOSQBlk [in OSQInvDef]
AOSQCtr [in OSQInvDef]
AOSQFreeBlk [in OSQInvDef]
AOSQFreeList [in OSQInvDef]
AOSRdyGrp [in OSTCBInvDef]
AOSRdyTbl [in OSTCBInvDef]
AOSRdyTblGrp [in OSTCBInvDef]
AOSTCBFreeList [in OSTCBInvDef]
AOSTCBList [in OSTCBInvDef]
AOSTCBPrioTbl [in OSTCBInvDef]
AOSTime [in OSTCBInvDef]
AOSUnMapTbl [in OSTCBInvDef]
apibound [in PIF_aux]
api_code [in language]
api_fun_list [in os_program]
api_spec' [in PIF_aux]
api_spec_list' [in PIF_aux]
api_spec [in os_spec]
api_spec_list [in os_spec]
Aptrmapsto [in assertion]
arfalse [in assertion]
arrayelem_addr_right [in OSQInvDef]
arraymapstovallist [in assertion]
array_type_vallist_match [in BaseAsrtDef]
array_struct [in common]
asrtTree_to_list [in seplog_tactics]
asrtTree_to_list' [in seplog_tactics]
asrtTree2list [in tacticsforseplog]
asrtTree2list' [in tacticsforseplog]
asrt_add_cell_to_tail [in tst_prop]
assign_type_match_fun [in aux_for_hoare_lemmas]
Astruct [in BaseAsrtDef]
Astruct_rm [in BaseAsrtDef]
Astruct' [in BaseAsrtDef]
atoy_inv [in inv_prop]
atoy_inv' [in inv_prop]
auxand [in mathlib]
AuxProps [in pif_theory]
A_isr_is_prop [in OSQInvDef]


B

baseList [in seplog_tactics]
baseList [in tacticsforseplog]
Bbj [in auxdef]
beq_addr [in memory]
beq_Z [in memory]
beq_pos [in memory]
beq_tid [in language]
beq_int [in IntBool]
beq_pos [in IntBool]
beq_addrval [in InternalFunSpec]
bitx [in os_code_defs]
bity [in os_code_defs]
block [in memdata]
blocktypespec.B [in memory]
blt_addr [in memory]
blt_Z [in memory]
blt_pos [in memory]
blt_tid [in language]
blt_int [in IntBool]
blt_pos [in IntBool]
bool_or [in val]
bool_and [in val]
bop_type [in val]
bop_int_type [in val]
bop_eval [in val]
BuildintPre [in auxdef]
BuildintRet [in auxdef]
buildp [in simulation]
BuildPreA [in simulation]
BuildPreA' [in auxdef]
BuildPreI [in simulation]
buildq [in simulation]
BuildRetA [in simulation]
BuildRetA' [in auxdef]
BuildRetI [in simulation]


C

callcont [in opsem]
can_change_aop [in assertion]
can_be_cancelled [in seplog_lemmas]
cast_eval [in opsem]
cfun [in os_code_notations]
check_pointer [in memdata]
cjy_and [in asrtLib]
cjy_and [in loststepLib]
clientst [in language]
cltenvs [in language]
cmpu [in val]
cmp_int_type [in val]
cmp_val [in val]
cnt [in os_code_defs]
code [in language]
CodeSpec.B [in language]
cont [in language]
convert_cfuns [in os_code_notations]
convert_spec [in InternalFunSpec]
convert_ifuns [in os_cpu_a]
convert_int_spec [in os_spec]
convert_api_spec [in os_spec]
cs [in language]
cstepabt [in opsem]


D

decllen [in init_spec]
decllist_ind2 [in aux_for_hoare_lemmas]
decode_val [in memdata]
decode_int [in memdata]
DEL_NO_EXIST_ERR [in absop]
DEL_IDLE_ERR [in absop]
distance [in OSQInvDef]
distinct [in OSEventRemovePure]
distinct' [in OSEventRemovePure]
divs [in val]
dladd [in auxdef]
dll [in BaseAsrtDef]
dllseg [in BaseAsrtDef]
dlyapi [in absop]
dl_add [in auxdef]
dl_eq [in aux_for_hoare_lemmas]
dl_vl_match [in simulation]
Dnewt [in opsem]
Dteq [in opsem]


E

ecbf_sll [in OSQInvDef]
ecbf_sllseg [in OSQInvDef]
ecbid [in language]
ECBList_P [in OSQInvDef]
ecbls_ptr_distinct [in OSEventRemovePure]
ecb_get_next_ptr [in OSEventRemovePure]
edom [in assertion]
empisr [in language]
emple_tst [in auxdef]
emposabst [in assertion]
emposspec [in inferules]
empprogunit [in ruleLib]
empst [in assertion]
emptaskenv [in auxdef]
emptaskst [in assertion]
Emp_AbsOs_Asrt [in assertion]
encode_val [in memdata]
encode_int [in memdata]
env [in memory]
EnvSpec.B [in language]
env_domain_eq [in loststepLib]
EqDom [in simulation]
EqDomAPI [in toptheorem]
EqDomInt [in toptheorem]
eqdomO [in opsem]
eqdomOS [in auxdef]
eqdomSO [in lemmasfortoptheo]
eqdomtls [in opsem]
eqdomTO [in etraceref]
eqenv [in simulation]
eqevntls [in lemmasfortoptheo]
eqisttls [in lemmasfortoptheo]
eqtls [in absop_rules]
eq_dom_env [in assertion]
eq_next [in OSTimeTickPure]
eq' [in LibTactics]
err [in os_code_defs]
etrace_subset [in etraceref]
evaladdr [in opsem]
evalexprlist [in assertion]
evaltype [in opsem]
evalval [in opsem]
EventCtr [in assertion]
EventCtr [in OSQInvDef]
event_rdy_post6' [in InternalFunSpec]
event_rdy_post5' [in InternalFunSpec]
event_rdy_post4' [in InternalFunSpec]
event_rdy_post3' [in InternalFunSpec]
event_rdy_post2' [in InternalFunSpec]
event_rdy_post1' [in InternalFunSpec]
event_rdy_post6 [in InternalFunSpec]
event_rdy_post5 [in InternalFunSpec]
event_rdy_post4 [in InternalFunSpec]
event_rdy_post3 [in InternalFunSpec]
event_rdy_post2 [in InternalFunSpec]
event_rdy_post1 [in InternalFunSpec]
Event_Type_P [in OSQInvDef]
EVENT_TBL_INIT_VL [in OSQInvDef]
evsllseg [in OSQInvDef]
exprlist [in language]


F

fid [in language]
field_offset [in opsem]
field_offsetfld [in opsem]
fpost [in assertion]
fpre [in assertion]
free [in memory]
freeb [in memory]
freelist [in language]
fresh [in memory]
fresh_index [in lmachLib]
frp [in loststepLib]
fspec [in assertion]
ftype [in memory]
FullMemory [in memory]
function [in language]
funspec [in assertion]
funtype [in language]
fx [in InternalFunSpec]


G

GAarray [in BaseAsrtDef]
gen_MutexPostPart3 [in gen_lemmas]
gen_MutexPostNoUnliftSuccReturn [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post5 [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post5' [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post3 [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post3' [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post1 [in gen_lemmas]
gen_OSMutexPost3_3_event_rdy_post1' [in gen_lemmas]
gen_post5' [in gen_lemmas]
gen_post3' [in gen_lemmas]
gen_post1' [in gen_lemmas]
gen_post5 [in gen_lemmas]
gen_post3 [in gen_lemmas]
gen_tmp2 [in gen_lemmas]
gen_tmp [in gen_lemmas]
gen_MutexPostPIRdyTable2 [in gen_lemmas]
gen_MutexPostPart10 [in gen_lemmas]
gen_MutexPostPart3133 [in gen_lemmas]
gen_MutexPostPart1 [in gen_lemmas]
gen_mutex_pend_pip_is_not_hold_right_to_cur [in gen_lemmas]
gen_mutex_pend_cur_prio_eql_mprio_right_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_not_rdy_right_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_idle_err_right_to_cur [in gen_lemmas]
gen_mutex_pend_pip_is_not_hold_left_to_cur [in gen_lemmas]
gen_mutex_pend_cur_prio_eql_mprio_left_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_not_rdy_left_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_idle_err_left_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_cur_err [in gen_lemmas]
gen_mutex_pend_part_0 [in gen_lemmas]
gen_mutex_pend_can_not_lift_right_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_right_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_right_to_cur' [in gen_lemmas]
gen_mutex_pend_can_not_lift_left_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_left_to_cur [in gen_lemmas]
gen_mutex_pend_ptcb_is_rdy_left_to_cur' [in gen_lemmas]
gen_OSQPostProofPart2 [in gen_lemmas]
gen_OSQPostProofPart1 [in gen_lemmas]
gen_OSQPendRightPart2 [in gen_lemmas]
gen_sempost_part_0 [in gen_lemmas]
gen_sempost_part_6 [in gen_lemmas]
gen_sempost_part_5 [in gen_lemmas]
gen_sempost_part_4 [in gen_lemmas]
gen_sempost_part_3 [in gen_lemmas]
gen_sempost_part_2 [in gen_lemmas]
gen_sempost_part_1 [in gen_lemmas]
gen_sempend_part1 [in gen_lemmas]
gen_mbox_post_part0 [in gen_lemmas]
gen_mbox_post_part6 [in gen_lemmas]
gen_mbox_post_part5 [in gen_lemmas]
gen_mbox_post_part4 [in gen_lemmas]
gen_mbox_post_part3 [in gen_lemmas]
gen_mbox_post_part2 [in gen_lemmas]
gen_mbox_post_part1 [in gen_lemmas]
gen_mbox_pend_part0 [in gen_lemmas]
getabsop [in assertion]
getabst [in assertion]
getaddr [in opsem]
getaddrlist [in opsem]
getcs [in assertion]
getfunrettype [in opsem]
getgenv [in assertion]
GetHPrio [in absop]
GetHWait [in absop]
getie [in assertion]
getis [in assertion]
getisr [in assertion]
getlenv [in assertion]
getlenvdom [in simulation]
getmem [in assertion]
getmsg [in absop]
getmsgapi [in absop]
getmsg_succ [in absop]
getoff [in opsem]
getSG [in etraceref]
getsmem [in assertion]
gets_m [in opsem]
gets_g [in opsem]
gettaskst [in assertion]
gettopis [in assertion]
get_last [in OSEventRemovePure]
get_is_s [in assertion]
get_isr_s [in assertion]
get_mem [in opsem]
get_lenv [in opsem]
get_genv [in opsem]
get_env [in opsem]
GET_OP [in PIF_def]
get_smem [in language]
get_afun [in lemmasfortoptheo]
get_ifun [in lemmasfortoptheo]
get_lint [in lemmasfortoptheo]
get_els_len [in absop]
get_tls_len [in absop]
get_eid_list [in common]
get_eid_list' [in common]
get_last_tcb_ptr [in InternalFunSpec]
get_highest_tcb [in InternalFunSpec]
get_highest_prio [in InternalFunSpec]
get_last_ptr [in InternalFunSpec]
get_eidls [in InternalFunSpec]
get_eid_ecbls [in InternalFunSpec]
get_last_ecb_ptr [in OSTimeTickPure]
get_ectr [in OSTimeTickPure]
get_option_value [in mathlib]
GlobalVariables [in os_ucos_h]
GoodAcc [in PIF_aux]
GoodClient [in etraceref]
goodcode_h [in PIF_aux]
GoodCre [in PIF_aux]
GoodDel [in PIF_aux]
goodeval_h [in PIF_aux]
GoodFrame [in assertion]
GoodFrm [in inferules]
GoodFunAsrt [in assertion]
GoodI [in inferules]
GoodInvAsrt [in assertion]
goodks [in auxdef]
goodks_h [in PIF_aux]
GoodPend [in PIF_aux]
GoodPost [in PIF_aux]
GoodSched [in inferules]
GoodStmt [in etraceref]
goodstmt_h [in PIF_aux]
GoodStmt_h [in PIF_aux]
GoodStmt' [in inferules]
goodtasks_h [in PIF_aux]
GoodTick [in PIF_aux]
GoodToy [in PIF_aux]
good_cli_pu [in toptheorem]
Good_Clt_Stmt [in toptheorem]
good_os_pu [in toptheorem]
good_call [in toptheorem]
good_dl_le [in auxdef]
good_is_S [in auxdef]
good_is [in auxdef]
good_clt [in auxdef]
good_clt_scont [in auxdef]
good_clt_cureval [in auxdef]
good_clt_stmt [in auxdef]
good_t_ks [in auxdef]
good_env_decllist [in loststepLib]
good_client_code [in PIF_aux]
good_api_stmt [in PIF_aux]
GOOD_API_CODE [in PIF_aux]
GOOD_ST [in PIF_aux]
good_decllist [in simulation]
gvarlist1 [in os_ucos_h]
gvarlist2 [in os_ucos_h]
gvarlist3 [in os_ucos_h]


H

hid [in language]
higherint [in language]
HighestRdy [in PIF_def]
highest_rdy [in oscore_common]
highpri [in language]
highpri' [in language]
hprog [in language]
hworld [in language]


I

i [in os_code_defs]
I [in inv_prop]
ident [in memdata]
identspec.A [in memory]
identspec.beq [in memory]
identspec.blt [in memory]
id_nth [in BaseAsrtDef]
id_nth' [in BaseAsrtDef]
id_addrval [in BaseAsrtDef]
id_addrval' [in OSQInvDef]
ie [in language]
ifun [in os_cpu_a]
II [in assertion]
InitAsrt [in etraceref]
InitTaskAsrt [in assertion]
InitTasks [in etraceref]
InitTaskSt [in auxdef]
init_mem [in lmachLib]
init_st [in PIF_def]
init_asrt [in toptheorem]
inj_pointer [in memdata]
inj_bytes [in memdata]
InOS [in opsem]
int [in IntBool]
intbound [in PIF_aux]
intcont [in opsem]
internal_fun_list [in os_program]
interrupt_list [in os_program]
intunit [in language]
int_code [in language]
int_spec [in os_spec]
int_spec_list [in os_spec]
Int64.hiword [in Integers]
Int64.iwordsize' [in Integers]
Int64.loword [in Integers]
Int64.mul' [in Integers]
Int64.ofwords [in Integers]
Int64.shl' [in Integers]
Int64.shru' [in Integers]
Int64.shr' [in Integers]
INUM [in language]
INV [in assertion]
Inv [in assertion]
invlth_isr [in assertion]
invlth_noisr [in assertion]
invlth_noisr' [in derivedrules]
invlth_isr' [in InternalFunSpec]
inv_ieoff [in assertion]
inv_ieon [in assertion]
inv_prop [in assertion]
inv_isr_prop [in assertion]
INV_PROP [in PIF_aux]
in_decllist [in simulation]
ipreasrt [in auxdef]
ipreasrt' [in auxdef]
iretasrt [in auxdef]
iretasrt' [in auxdef]
iret_ieoff [in assertion]
iret_ieon [in assertion]
IRINV [in assertion]
is [in language]
isalloc [in ruleLib]
isallocate [in loststepLib]
isarray_type [in symbolic_execution]
isched [in absop]
IsEnd [in opsem]
IsFcall [in opsem]
isfree [in ruleLib]
IsIRet [in opsem]
isptr [in BaseAsrtDef]
isptr_list [in OSQInvDef]
isr [in language]
isrclr [in assertion]
isrdy [in os_code_defs]
isrdy [in language]
isrdy [in absop]
IsRet [in opsem]
IsRetE [in opsem]
isrupd [in language]
isr_inv [in assertion]
isr_is_prop [in OSQInvDef]
IsSwitch [in opsem]
istrue [in opsem]
is_length [in opsem]
is_int_type [in opsem]
IS_WAITING_E [in PIF_def]
IS_WAITING [in PIF_def]
IS_OWNER_P [in PIF_def]
IS_OWNER [in PIF_def]
is_nest [in auxdef]


J

joinenvmem [in loststepLib]
joinmem [in assertion]


L

LAarray [in BaseAsrtDef]
leb_nat [in language]
legal [in os_code_defs]
length_dl [in lmachLib]
length_eq [in auxdef]
length_eq_td [in tst_prop]
len_stmtcont [in opsem]
len_exprcont [in opsem]
lift [in simulation]
listliftn [in seplog_tactics]
listliftn [in tacticsforseplog]
listliftn' [in seplog_tactics]
listliftn' [in tacticsforseplog]
listlowern [in seplog_tactics]
listlowern [in tacticsforseplog]
listsimpl [in seplog_tactics]
listsimplA [in seplog_tactics]
listsimplB [in seplog_tactics]
list_addempR [in seplog_tactics]
list_dropn [in seplog_tactics]
list_getl [in seplog_tactics]
list_getn [in seplog_tactics]
list_insert [in seplog_tactics]
list_to_asrtTree_simpl [in seplog_tactics]
list_to_asrtTree [in seplog_tactics]
list_repeat [in Coqlib]
list_drop [in Coqlib]
list_equiv [in Coqlib]
list_disjoint [in Coqlib]
list_fold_right [in Coqlib]
list_fold_left [in Coqlib]
list_nth_z [in Coqlib]
list_length_z [in Coqlib]
list_length_z_aux [in Coqlib]
list_addempR [in tacticsforseplog]
list_dropn [in tacticsforseplog]
list_getl [in tacticsforseplog]
list_getn [in tacticsforseplog]
list_insert [in tacticsforseplog]
list2asrtTree [in tacticsforseplog]
list2asrtTree_noClearEmp [in tacticsforseplog]
load [in opsem]
loadbytes [in memory]
loadm [in memory]
localst [in language]
LocalStSpec.B [in language]
losallocstep [in loststepLib]
loststepabt [in opsem]
low_level_os_code [in os_program]
lprog [in language]
ltac_something [in LibTactics]
ltac_to_generalize [in LibTactics]
ltac_tag_subst [in LibTactics]
ltac_nat_from_int [in LibTactics]
ltac_database [in LibTactics]
ltaskstset [in language]
lval [in assertion]
lworld [in language]


M

Make.add [in Integers]
Make.add_overflow [in Integers]
Make.add_carry [in Integers]
Make.and [in Integers]
Make.cmp [in Integers]
Make.cmpu [in Integers]
Make.divs [in Integers]
Make.divu [in Integers]
Make.eq [in Integers]
Make.eqm [in Integers]
Make.eqmod [in Integers]
Make.half_modulus [in Integers]
Make.int_of_one_bits [in Integers]
Make.is_true [in Integers]
Make.is_false [in Integers]
Make.is_power2 [in Integers]
Make.iwordsize [in Integers]
Make.lt [in Integers]
Make.ltu [in Integers]
Make.max_signed [in Integers]
Make.max_unsigned [in Integers]
Make.min_signed [in Integers]
Make.mods [in Integers]
Make.modu [in Integers]
Make.modulus [in Integers]
Make.mone [in Integers]
Make.mul [in Integers]
Make.mulhs [in Integers]
Make.mulhu [in Integers]
Make.neg [in Integers]
Make.negative [in Integers]
Make.not [in Integers]
Make.notbool [in Integers]
Make.no_overlap [in Integers]
Make.one [in Integers]
Make.one_bits [in Integers]
Make.or [in Integers]
Make.powerserie [in Integers]
Make.P_mod_two_p [in Integers]
Make.repr [in Integers]
Make.rol [in Integers]
Make.rolm [in Integers]
Make.ror [in Integers]
Make.shl [in Integers]
Make.shr [in Integers]
Make.shru [in Integers]
Make.shrx [in Integers]
Make.shr_carry [in Integers]
Make.signed [in Integers]
Make.sign_ext [in Integers]
Make.size [in Integers]
Make.sub [in Integers]
Make.sub_overflow [in Integers]
Make.sub_borrow [in Integers]
Make.testbit [in Integers]
Make.unsigned [in Integers]
Make.wordsize [in Integers]
Make.xor [in Integers]
Make.zero [in Integers]
Make.zero_ext [in Integers]
Make.Zshiftin [in Integers]
Make.Zsign_ext [in Integers]
Make.Zsize [in Integers]
Make.zwordsize [in Integers]
Make.Zzero_ext [in Integers]
Make.Z_one_bits [in Integers]
Make.Z_mod_modulus [in Integers]
MapFun.A [in Map]
MapFun.app' [in MapLib]
MapFun.B [in Map]
MapFun.beq_A [in Map]
MapFun.compat [in Map]
MapFun.compat [in MapLib]
MapFun.disj [in MapLib]
MapFun.disjoint [in Map]
MapFun.disjUnion [in Map]
MapFun.disjUnion3 [in Map]
MapFun.emp [in Map]
MapFun.emp [in MapLib]
MapFun.emp' [in MapLib]
MapFun.eqDom [in Map]
MapFun.eqdom [in MapLib]
MapFun.get [in MapLib]
MapFun.get' [in MapLib]
MapFun.indom [in MapLib]
MapFun.in_dom [in Map]
MapFun.is_orderset [in MapLib]
MapFun.join [in MapLib]
MapFun.joinsig [in MapLib]
MapFun.join3 [in MapLib]
MapFun.lb [in MapLib]
MapFun.lookup [in MapLib]
MapFun.lst [in MapLib]
MapFun.Map [in Map]
MapFun.map [in MapLib]
MapFun.maps_to [in Map]
MapFun.meq [in MapLib]
MapFun.merge [in Map]
MapFun.merge [in MapLib]
MapFun.minus [in Map]
MapFun.minus [in MapLib]
MapFun.minus' [in MapLib]
MapFun.not_in_dom [in Map]
MapFun.prf [in MapLib]
MapFun.put [in Map]
MapFun.remove [in Map]
MapFun.rlist [in MapLib]
MapFun.set [in MapLib]
MapFun.set' [in MapLib]
MapFun.sgltonM [in Map]
MapFun.sig [in Map]
MapFun.sig [in MapLib]
MapFun.sig' [in MapLib]
MapFun.sub [in MapLib]
MapFun.subseteq [in Map]
MapFun.sub_dom [in Map]
mapstoval [in assertion]
MatchLHMsgLength [in OSQInvDef]
MatchLHMsgList [in OSQInvDef]
MatchLHMsgSize [in OSQInvDef]
MatchMutexSem [in OSQInvDef]
match_tid_prio [in inferules]
maxlen [in language]
MAX_TCB [in absop]
MBOX_PEND_SUCC [in os_code_defs]
MBOX_PEND_TIMEOUT_ERR [in os_code_defs]
MBOX_PEND_NOT_READY_ERR [in os_code_defs]
MBOX_PEND_FROM_IDLE_ERR [in os_code_defs]
MBOX_PEND_WRONG_TYPE_ERR [in os_code_defs]
MBOX_PEND_P_NOT_LEGAL_ERR [in os_code_defs]
MBOX_PEND_NULL_ERR [in os_code_defs]
MBOX_POST_SUCC [in os_code_defs]
MBOX_POST_FULL_ERR [in os_code_defs]
MBOX_POST_TASK_WT_ERR [in os_code_defs]
MBOX_POST_WRONG_TYPE_ERR [in os_code_defs]
MBOX_POST_P_NOT_LEGAL_ERR [in os_code_defs]
MBOX_POST_MSG_NULL_ERR [in os_code_defs]
MBOX_POST_NULL_ERR [in os_code_defs]
MBOX_DEL_SUCC [in os_code_defs]
MBOX_DEL_TASK_WAITING_ERR [in os_code_defs]
MBOX_DEL_WRONG_TYPE_ERR [in os_code_defs]
MBOX_DEL_P_NOT_LEGAL_ERR [in os_code_defs]
MBOX_DEL_NULL_ERR [in os_code_defs]
mbox_pendapi [in absop]
mbox_pend [in absop]
mbox_pend_block_get_succ [in absop]
mbox_pend_timeout_err [in absop]
mbox_pend_block [in absop]
mbox_pend_inst_get_succ [in absop]
mbox_pend_not_ready_err [in absop]
mbox_pend_from_idle_err [in absop]
mbox_pend_wrong_type_err [in absop]
mbox_pend_p_not_legal_err [in absop]
mbox_pend_null_err [in absop]
mbox_postapi [in absop]
mbox_post [in absop]
mbox_post_put_mail_in_succ [in absop]
mbox_post_ex_wt_succ [in absop]
mbox_post_full_err [in absop]
mbox_post_wrong_type_err [in absop]
mbox_post_p_not_legal_err [in absop]
mbox_post_msg_null_err [in absop]
mbox_post_null_err [in absop]
mbox_accapi [in absop]
mbox_acc [in absop]
mbox_acc_succ [in absop]
mbox_acc_err [in absop]
mbox_delapi [in absop]
mbox_del [in absop]
mbox_del_succ [in absop]
mbox_del_task_wt_err [in absop]
mbox_del_wrong_type_err [in absop]
mbox_del_p_not_legal_err [in absop]
mbox_del_null_err [in absop]
mbox_createapi [in absop]
mbox_create [in absop]
mbox_create_succ [in absop]
mbox_create_err [in absop]
mem [in memory]
message [in os_code_defs]
MethSimAsrt [in simulation]
mmapspec.beq_Domain [in auxdef]
mmapspec.domain [in auxdef]
mmapspec.image [in auxdef]
mprio [in os_code_defs]
msg [in language]
msgqueuetbl [in os_code_defs]
MSGQ_OVF_ERR [in absop]
MSGQ_DEL_EX_ERR [in absop]
MSGQ_NULL_ERR [in absop]
MSG_NULL_ERR [in absop]
msk [in os_code_defs]
mul [in val]
mutexacc [in absop]
mutexaccapi [in absop]
mutexacc_succ [in absop]
mutexacc_prio_err [in absop]
mutexacc_no_available [in absop]
mutexacc_no_mutex_err [in absop]
mutexacc_null [in absop]
mutexcre [in absop]
mutexcreapi [in absop]
mutexcre_succ [in absop]
mutexcre_error [in absop]
mutexdel [in absop]
mutexdelapi [in absop]
mutexdel_pr_not_holder_err [in absop]
mutexdel_succ [in absop]
mutexdel_ex_wt_err [in absop]
mutexdel_type_err [in absop]
mutexdel_no_mutex_err [in absop]
mutexdel_null [in absop]
mutexpend [in absop]
mutexpendapi [in absop]
mutexpend_cur_prio_eql_mprio_err [in absop]
mutexpend_ptcb_prio_eql_idle_err [in absop]
mutexpend_pr_not_holder_err [in absop]
mutexpend_block_get [in absop]
mutexpend_to [in absop]
mutexpend_block_no_lift [in absop]
mutexpend_block_lift [in absop]
mutexpend_deadlock_err [in absop]
mutexpend_nest_err [in absop]
mutexpend_get_succ [in absop]
mutexpend_prio_err [in absop]
mutexpend_msg_not_null_err [in absop]
mutexpend_stat_err [in absop]
mutexpend_idle_err [in absop]
mutexpend_type_err [in absop]
mutexpend_no_mutex_err [in absop]
mutexpend_null [in absop]
mutexpost [in absop]
mutexpostapi [in absop]
mutexpost_wl_highest_prio_err [in absop]
mutexpost_prio_err [in absop]
mutexpost_original_not_holder_err [in absop]
mutexpost_exwt_no_return_prio_succ [in absop]
mutexpost_exwt_return_prio_succ [in absop]
mutexpost_nowt_no_return_prio_succ [in absop]
mutexpost_nowt_return_prio_succ [in absop]
mutexpost_no_owner_err [in absop]
mutexpost_type_err [in absop]
mutexpost_no_mutex_err [in absop]
mutexpost_null [in absop]
mvallist [in memdata]
myAconj [in seplog_tactics]
myAconj [in tacticsforseplog]
myAnd [in mathlib]
myAppAsrtTree [in seplog_tactics]
myAppAssnTree [in tacticsforseplog]
myarrow [in tacticsforseplog]
my_nth_val' [in mathlib]


N

natlist_sort [in seplog_tactics]
natlist_insert [in seplog_tactics]
natlist_sort [in tacticsforseplog]
natlist_insert [in tacticsforseplog]
nat_of_Z [in Coqlib]
nci [in ruleLib]
negate_comparison [in Integers]
negint [in val]
new_rtbl.set_rdy [in OSQPostPure]
next [in os_code_defs]
nextblk [in os_code_defs]
nfx [in InternalFunSpec]
nhapi [in PIF_aux]
nilcont [in opsem]
node [in BaseAsrtDef]
NoDeadLock [in pif_theory]
notabort [in simulation]
notabortm [in simulation]
notint [in val]
not_in [in OSEventRemovePure]
not_in [in OSTimeTickPure]
not_in_two_wl [in PIF_aux]
NO_NEST_PENDING_O [in PIF_def]
NO_NEST_PENDING [in PIF_def]
no_api_code [in progtaskstepLib]
no_call_api_os [in auxdef]
no_call_api_ipu [in auxdef]
no_call_api_pu [in auxdef]
no_call_api [in auxdef]
no_call_api_scont [in auxdef]
no_call_api_cureval [in auxdef]
no_call_api_stmt [in auxdef]
no_os [in auxdef]
no_fun_same [in lemmasfortoptheo]
NO_ERR [in absop]
NO_TCB_ERR [in absop]
no_nest_client [in PIF_aux]
no_owner_prio_prop [in PIF_aux]
nsc [in absop]
nth_val' [in BaseAsrtDef]
nth_vallist [in BaseAsrtDef]
nth_id [in BaseAsrtDef]
nth_val [in BaseAsrtDef]
nth_val_vallist [in InternalFunSpec]
n_dym_com_int_cd [in auxdef]
n_dym_com_int_scont [in auxdef]
n_dym_com_ceval [in auxdef]
n_dym_com_s [in auxdef]


O

offset [in memdata]
offset_zero [in OSQInvDef]
OLD_PIF_CHAIN [in PIF_aux]
OLD_PIF [in PIF_aux]
option_map [in Coqlib]
option_eq [in Coqlib]
op_p_prop [in PIF_aux]
or [in val]
osabst [in language]
osabstep [in language]
osapi [in language]
osapispec [in language]
oscode [in language]
oscorrect_aux [in lemmasfortoptheo]
OSCtxSwCtr [in os_code_defs]
OSEventCnt [in os_code_defs]
OSEventFreeList [in os_code_defs]
OSEventGrp [in os_code_defs]
OSEventList [in os_code_defs]
OSEventListPtr [in os_code_defs]
OSEventPtr [in os_code_defs]
OSEventTbl [in os_code_defs]
OSEventType [in os_code_defs]
OSIdleCtr [in os_code_defs]
OSIdleCtrMax [in os_code_defs]
OSIdleCtrRun [in os_code_defs]
OSInit [in os_code_defs]
OSInitHookBegin [in os_code_defs]
OSInitHookEnd [in os_code_defs]
OSInit_impl [in os_core]
OSIntEnter [in os_code_defs]
OSIntEnter_impl [in os_core]
OSIntExit [in os_code_defs]
OSIntExitPost [in InternalFunSpec]
OSIntExitPost' [in InternalFunSpec]
OSIntExitPre [in InternalFunSpec]
OSIntExitPre' [in InternalFunSpec]
OSIntExitY [in os_code_defs]
OSIntExit_impl [in os_core]
OSIntExit_spec [in InternalFunSpec]
OSIntNesting [in os_code_defs]
osintspec [in language]
OSIntToyCount [in os_code_defs]
OSInv [in OSQInvDef]
OSLockNesting [in os_code_defs]
OSMapTbl [in os_code_defs]
OSMapVallist [in OSTCBInvDef]
OSMboxAccept [in os_code_defs]
OSMboxAccept_impl [in os_mbox]
OSMboxCreate [in os_code_defs]
OSMboxCreate_impl [in os_mbox]
OSMboxDel [in os_code_defs]
OSMboxDel_impl [in os_mbox]
OSMboxPend [in os_code_defs]
OSMboxPend_impl [in os_mbox]
OSMboxPost [in os_code_defs]
OSMboxPost_impl [in os_mbox]
OSMutexAccept [in os_code_defs]
OSMutexAccept_impl [in os_mutex]
OSMutexCreate [in os_code_defs]
OSMutexCreate_impl [in os_mutex]
OSMutexDel [in os_code_defs]
OSMutexDel_impl [in os_mutex]
OSMutexPend [in os_code_defs]
OSMutexPend_impl [in os_mutex]
OSMutexPost [in os_code_defs]
OSMutexPost_impl [in os_mutex]
OSPlaceHolder [in os_code_defs]
OSPrioCur [in os_code_defs]
OSPrioHighRdy [in os_code_defs]
OSQAccept [in os_code_defs]
OSQAccept_impl [in os_q]
OSQCreate [in os_code_defs]
OSQCreate_impl [in os_q]
OSQDel [in os_code_defs]
OSQDel_impl [in os_q]
OSQEnd [in os_code_defs]
OSQEntries [in os_code_defs]
OSQFreeBlk [in os_code_defs]
OSQFreeBlkTbl [in os_code_defs]
OSQFreeList [in os_code_defs]
OSQGetMsg [in os_code_defs]
OSQGetMsg_impl [in os_q]
OSQIn [in os_code_defs]
OSQOut [in os_code_defs]
OSQPend [in os_code_defs]
OSQPend_impl [in os_q]
OSQPost [in os_code_defs]
OSQPost_impl [in os_q]
OSQPtr [in os_code_defs]
OSQSize [in os_code_defs]
OSQStart [in os_code_defs]
OSQTbl [in os_code_defs]
OSQ_spec [in InternalFunSpec]
osq_spec_list [in InternalFunSpec]
OSRdyGrp [in os_code_defs]
OSRdyTbl [in os_code_defs]
OSRunning [in os_code_defs]
ossched [in language]
OSSemAccept [in os_code_defs]
OSSemAccept_impl [in os_sem]
OSSemCreate [in os_code_defs]
OSSemCreate_impl [in os_sem]
OSSemDel [in os_code_defs]
OSSemDel_impl [in os_sem]
OSSemPend [in os_code_defs]
OSSemPend_impl [in os_sem]
OSSemPost [in os_code_defs]
OSSemPost_impl [in os_sem]
osspec [in language]
OSStart [in os_code_defs]
OSStartHighRdy [in os_code_defs]
OSStart_impl [in os_core]
osstate [in language]
OSStatRdy [in os_code_defs]
OSSTKFreeList [in os_code_defs]
OSSTKTbl [in os_code_defs]
OSTaskCreate [in os_code_defs]
OSTaskCtr [in os_code_defs]
OSTaskDel [in os_code_defs]
OSTCBBitX [in os_code_defs]
OSTCBBitY [in os_code_defs]
OSTCBCur [in opsem]
OSTCBDly [in os_code_defs]
OSTCBEventPtr [in os_code_defs]
OSTCBFreeList [in os_code_defs]
OSTCBHighRdy [in os_code_defs]
OSTCBList [in os_code_defs]
OSTCBMsg [in os_code_defs]
OSTCBMutexOwn [in os_code_defs]
OSTCBNext [in os_code_defs]
OSTCBPrev [in os_code_defs]
OSTCBPrio [in os_code_defs]
OSTCBPrioTbl [in os_code_defs]
OSTCBStat [in os_code_defs]
OSTCBTbl [in os_code_defs]
OSTCBX [in os_code_defs]
OSTCBY [in os_code_defs]
OSTickISR [in os_code_defs]
OSTickISR_impl [in os_cpu_a]
OSTime [in os_code_defs]
ostime [in language]
OSTimeDly [in os_code_defs]
OSTimeDly_impl [in os_time]
OSTimeGet [in os_code_defs]
OSTimeGet_impl [in os_time]
OSTimeTick [in os_code_defs]
OSTimeTickPost [in InternalFunSpec]
OSTimeTickPost' [in InternalFunSpec]
OSTimeTickPre [in InternalFunSpec]
OSTimeTickPre' [in InternalFunSpec]
OSTimeTick_impl [in os_core]
OSTimeTick_spec [in InternalFunSpec]
OSToyISR [in os_code_defs]
OSToyISR_impl [in os_cpu_a]
OSUnMapTbl [in os_code_defs]
OSUnMapVallist [in OSTCBInvDef]
OSVersion [in os_code_defs]
OSVersion_impl [in os_core]
OS_STK_BLK [in os_ucos_h]
OS_STK [in os_ucos_h]
OS_TCB [in os_ucos_h]
OS_Q [in os_ucos_h]
OS_Q_FREEBLK [in os_ucos_h]
OS_EVENT [in os_ucos_h]
OS_PrioChange [in os_code_defs]
OS_MUTEX_AVAILABLE [in os_code_defs]
OS_MUTEX_KEEP_UPPER_8 [in os_code_defs]
OS_MUTEX_KEEP_LOWER_8 [in os_code_defs]
OS_VERSION [in os_code_defs]
OS_ERR_DEL_ISR [in os_code_defs]
OS_NO_MORE_TCB [in os_code_defs]
OS_TASK_DEL_ISR [in os_code_defs]
OS_TASK_DEL_IDLE [in os_code_defs]
OS_TASK_DEL_ERR [in os_code_defs]
OS_SEM_OVF [in os_code_defs]
OS_ERR_MUTEX_IDLE [in os_code_defs]
OS_ERR_MUTEX_DEADLOCK [in os_code_defs]
OS_ERR_NEST [in os_code_defs]
OS_PRIO_INVALID [in os_code_defs]
OS_PRIO_ERR [in os_code_defs]
OS_PRIO_EXIST [in os_code_defs]
OS_ERR_MUTEX_WL_HIGHEST_PRIO [in os_code_defs]
OS_ERR_ORIGINAL_NOT_HOLDER [in os_code_defs]
OS_ERR_MUTEXPR_NOT_HOLDER [in os_code_defs]
OS_ERR_OWN [in os_code_defs]
OS_ERR_STAT [in os_code_defs]
OS_ERR_IDLE [in os_code_defs]
OS_ERR_PEVENT_NO_EX [in os_code_defs]
OS_ERR_MUTEX_PRIO [in os_code_defs]
OS_ERR_NOT_MUTEX_OWNER [in os_code_defs]
OS_STAT_ERR [in os_code_defs]
OS_Q_FULL [in os_code_defs]
OS_TIMEOUT [in os_code_defs]
OS_ERR_TASK_WAITING [in os_code_defs]
OS_ERR_PEVENT_NULL [in os_code_defs]
OS_ERR_POST_NULL_PTR [in os_code_defs]
OS_ERR_PEND_ISR [in os_code_defs]
OS_ERR_EVENT_TYPE [in os_code_defs]
OS_NO_ERR [in os_code_defs]
OS_EVENT_TYPE_MUTEX [in os_code_defs]
OS_EVENT_TYPE_SEM [in os_code_defs]
OS_EVENT_TYPE_Q [in os_code_defs]
OS_EVENT_TYPE_MBOX [in os_code_defs]
OS_EVENT_TYPE_UNUSED [in os_code_defs]
OS_STAT_FLAG [in os_code_defs]
OS_STAT_MUTEX [in os_code_defs]
OS_STAT_SUSPEND [in os_code_defs]
OS_STAT_Q [in os_code_defs]
OS_STAT_MBOX [in os_code_defs]
OS_STAT_SEM [in os_code_defs]
OS_STAT_RDY [in os_code_defs]
OS_RDY_TBL_SIZE [in os_code_defs]
OS_EVENT_TBL_SIZE [in os_code_defs]
OS_IDLE_PRIO [in os_code_defs]
OS_N_SYS_TASKS [in os_code_defs]
OS_PRIO_SELF [in os_code_defs]
OS_LOWEST_PRIO [in os_code_defs]
OS_MAX_TASKS [in os_code_defs]
OS_MAX_Q_SIZE [in os_code_defs]
OS_MAX_SEM [in os_code_defs]
OS_MAX_QS [in os_code_defs]
OS_MAX_EVENTS [in os_code_defs]
os_sem_ptr [in os_code_defs]
os_q_ptr [in os_code_defs]
os_stk_blk [in os_code_defs]
os_tcb [in os_code_defs]
os_q_freeblk [in os_code_defs]
os_q [in os_code_defs]
os_event [in os_code_defs]
OS_EventSearch [in os_code_defs]
OS_EventRemove [in os_code_defs]
OS_TaskIdle [in os_code_defs]
OS_Sched [in os_code_defs]
OS_EventTaskWait [in os_code_defs]
OS_EventTaskRdy [in os_code_defs]
OS_EventTO [in os_code_defs]
OS_EventWaitListInit [in os_code_defs]
OS_TCBInit [in os_code_defs]
OS_InitTaskIdle [in os_code_defs]
OS_SemInit [in os_code_defs]
OS_QInit [in os_code_defs]
OS_InitEventList [in os_code_defs]
OS_InitTCBList [in os_code_defs]
OS_InitSTKList [in os_code_defs]
OS_InitRdyList [in os_code_defs]
OS_InitMisc [in os_code_defs]
os_interrupt [in os_program]
os_api [in os_program]
os_internal [in os_program]
OS_Correctness [in toptheorem]
OS_EventSearch_impl [in os_core]
OS_EventRemove_impl [in os_core]
OS_TCBInit_impl [in os_core]
OS_InitTCBList_impl [in os_core]
OS_InitSTKList_impl [in os_core]
OS_InitTaskIdle_impl [in os_core]
OS_InitRdyList_impl [in os_core]
OS_InitMisc_impl [in os_core]
OS_InitEventList_impl [in os_core]
OS_EventWaitListInit_impl [in os_core]
OS_TaskIdle_impl [in os_core]
OS_Sched_impl [in os_core]
OS_EventTO_impl [in os_core]
OS_EventTaskWait_impl [in os_core]
OS_EventTaskRdy_impl [in os_core]
OS_EventWaitListInit_spec [in InternalFunSpec]
OS_EventTaskWait_spec [in InternalFunSpec]
OS_EventTaskRdy_spec [in InternalFunSpec]
OS_EventRemove_spec [in InternalFunSpec]
OS_EventSearch_spec [in InternalFunSpec]
OS_Sched_spec [in InternalFunSpec]
OS_SchedPost [in InternalFunSpec]
OS_SchedPre [in InternalFunSpec]
OS_SchedPost' [in InternalFunSpec]
OS_SchedPre' [in InternalFunSpec]
OS_EventTaskWaitPost [in InternalFunSpec]
OS_EventTaskWaitPost' [in InternalFunSpec]
OS_EventTaskWaitPre [in InternalFunSpec]
OS_EventTaskWaitPre' [in InternalFunSpec]
OS_EventTaskRdyPost [in InternalFunSpec]
OS_EventTaskRdyPost' [in InternalFunSpec]
OS_EventTaskRdyPost_fold' [in InternalFunSpec]
OS_EventTaskRdyPre [in InternalFunSpec]
OS_EventTaskRdyPre' [in InternalFunSpec]
OS_EventRemovePost [in InternalFunSpec]
OS_EventPtrRemovePost' [in InternalFunSpec]
OS_EventRemovePre [in InternalFunSpec]
OS_EventRemovePre' [in InternalFunSpec]
OS_EventSearchPost [in InternalFunSpec]
OS_EventSearchPost' [in InternalFunSpec]
OS_EventSearchPre [in InternalFunSpec]
OS_EventSearchPre' [in InternalFunSpec]
OS_EventWaitListInitPost [in InternalFunSpec]
OS_EventWaitListInitPost' [in InternalFunSpec]
OS_EventWaitListInitPre [in InternalFunSpec]
OS_EventWaitListInitPre' [in InternalFunSpec]
os_spec' [in PIF_aux]
os_spec [in os_spec]
owner [in language]
owner_prio_prop [in PIF_aux]
O_PIF_CHAIN [in PIF_aux]
O_PI_CHAIN [in PIF_aux]
O_PIF [in PIF_aux]
O_PI [in PIF_aux]


P

p [in os_code_defs]
partM [in auxdef]
pdata [in os_code_defs]
peq [in Coqlib]
pevent [in os_code_defs]
pevent1 [in os_code_defs]
pevent2 [in os_code_defs]
PI [in pif_theory]
PIF [in pif_theory]
PIF [in PIF_def]
PIF_aux [in PIF_aux]
pip [in os_code_defs]
Piteq [in opsem]
PlaceHolder [in os_mutex]
Ple [in Coqlib]
plt [in Coqlib]
Plt [in Coqlib]
plus_decl [in os_ucos_h]
positive_rec [in Coqlib]
pq [in os_code_defs]
pqblk [in os_code_defs]
pqptr [in os_code_defs]
prdytbl [in os_code_defs]
precise [in assertion]
PREEMP [in PIF_def]
Preemptive [in pif_theory]
primstep [in inferules]
prio [in os_code_defs]
PrioLe [in pif_theory]
PrioLift [in pif_theory]
PrioLt [in pif_theory]
priority [in pif_theory]
priority [in language]
PrioWaitInQ [in OSQInvDef]
prio_not_in_tbl [in OSTCBInvDef]
prio_in_tbl [in OSTCBInvDef]
prio_available [in absop]
PRIO_EXIST_ERR [in absop]
PRIO_ERR [in absop]
prio_neq_cur [in common]
Prio_Not_In [in OSTimeTickPure]
prio_neq_cur [in mathlib]
ProgOK [in toptheorem]
progunit [in language]
prog_sim [in etraceref]
projD [in opsem]
projS [in opsem]
proj_sumbool [in Coqlib]
proj_pointer [in memdata]
proj_bytes [in memdata]
ProtectWrapper [in OSMutex_common]
pstk1 [in os_code_defs]
pstk2 [in os_code_defs]
ptbl [in os_code_defs]
ptcb [in os_code_defs]
ptcb1 [in os_code_defs]
ptcb2 [in os_code_defs]
ptomval [in assertion]
ptomvallist [in assertion]
ptr_in_ectrls [in OSEventRemovePure]
ptr_in_ectrls' [in OSEventRemovePure]
ptr_offset_right [in OSQInvDef]
ptr_minus [in OSQInvDef]
pumerge [in opsem]
p1 [in os_code_defs]
p2 [in os_code_defs]
p3 [in os_code_defs]


Q

qacc [in absop]
qaccapi [in absop]
qacc_succ [in absop]
qacc_no_msg [in absop]
qacc_no_q_err [in absop]
qacc_null [in absop]
qblkf_sll [in OSQInvDef]
qblkf_sllseg [in OSQInvDef]
qcre [in absop]
qcreapi [in absop]
qcre_succ [in absop]
qcre_error [in absop]
qdel [in absop]
qdelapi [in absop]
qdel_succ [in absop]
qdel_ex_wt_err [in absop]
qdel_q_type_err [in absop]
qdel_no_q_err [in absop]
qdel_null [in absop]
qend_right [in OSQInvDef]
qeventptr [in os_code_defs]
qfreeblk [in os_code_defs]
qpend [in absop]
qpendapi [in absop]
qpend_block_get [in absop]
qpend_to [in absop]
qpend_block [in absop]
qpend_get_succ [in absop]
qpend_stat_err [in absop]
qpend_idle_err [in absop]
qpend_no_q_err [in absop]
qpend_null [in absop]
qpost [in absop]
qpostapi [in absop]
qpost_exwt_succ [in absop]
qpost_nowt_succ [in absop]
qpost_ovf_err [in absop]
qpost_q_no_err [in absop]
qpost_msg_null [in absop]
qpost_null [in absop]
Q_SIZE [in absop]


R

RdyChange [in auxdef]
RDYINV [in assertion]
RdyTCBblk [in OSTCBInvDef]
rdy_ectr [in InternalFunSpec]
rdy_notin_wl [in PIF_aux]
reltaskpred [in simulation]
reltaskst [in assertion]
rel_st_els [in OSTimeTickPure]
remove_nth_vallist_op [in BaseAsrtDef]
remove_nth_vallist [in BaseAsrtDef]
remove_nth_val_op [in BaseAsrtDef]
remove_nth_val [in BaseAsrtDef]
remove_array_struct [in type_val_match]
remove_tid [in absop]
retasrt [in assertion]
retfalse [in auxdef]
retpost [in inferules]
revlcons [in opsem]
RHL_TCB_Status_Wait_P [in OSTCBInvDef]
RHL_WaitMS_P [in OSTCBInvDef]
RHL_WaitMB_P [in OSTCBInvDef]
RHL_WaitQ_P [in OSTCBInvDef]
RHL_WaitS_P [in OSTCBInvDef]
RHL_Wait_P [in OSTCBInvDef]
RHL_RdyI_P [in OSTCBInvDef]
RHL_ECB_ETbl_P [in OSQInvDef]
RHL_ECB_ETbl_MUTEX_P [in OSQInvDef]
RHL_ECB_ETbl_MBOX_P [in OSQInvDef]
RHL_ECB_ETbl_SEM_P [in OSQInvDef]
RHL_ECB_ETbl_Q_P [in OSQInvDef]
RH_CurTCB [in OSTCBInvDef]
RH_TCBList_ECBList_P [in OSQInvDef]
RH_TCBList_ECBList_MUTEX_P [in OSQInvDef]
RH_TCBList_ECBList_MUTEX_OWNER [in OSQInvDef]
RH_TCBList_ECBList_MBOX_P [in OSQInvDef]
RH_TCBList_ECBList_SEM_P [in OSQInvDef]
RH_TCBList_ECBList_Q_P [in OSQInvDef]
RH_ECB_P [in OSQInvDef]
RLH_TCB_Status_Wait_P [in OSTCBInvDef]
RLH_WaitMS_P [in OSTCBInvDef]
RLH_WaitMB_P [in OSTCBInvDef]
RLH_WaitQ_P [in OSTCBInvDef]
RLH_WaitS_P [in OSTCBInvDef]
RLH_Wait_P [in OSTCBInvDef]
RLH_RdyI_P [in OSTCBInvDef]
RLH_ECB_ETbl_P [in OSQInvDef]
RLH_ECB_ETbl_MUTEX_P [in OSQInvDef]
RLH_ECB_ETbl_MBOX_P [in OSQInvDef]
RLH_ECB_ETbl_SEM_P [in OSQInvDef]
RLH_ECB_ETbl_Q_P [in OSQInvDef]
RLH_ECBData_P [in OSQInvDef]
RL_Tbl_Grp_P [in OSTCBInvDef]
RL_RTbl_PrioTbl_P [in OSTCBInvDef]
RL_TCBblk_P [in OSTCBInvDef]
RL_TCBListblk_P [in common]
RL_PrioTbl_P [in common]
RL_TCBblk_P_List [in OSTimeTickPure]
rm [in LibTactics]
RstateOP [in assertion]
RuleSem [in simulation]
rule_type_val_match [in inferules]
rule_type_val_match_list [in type_val_match]
rval [in assertion]
R_PrioTbl_P [in OSTCBInvDef]
R_Prio_No_Dup [in OSTCBInvDef]
R_TCB_Status_P [in OSTCBInvDef]
R_Prio_No_Dup_L [in OSTimeTickPure]
R_Prio_No_Dup_L' [in OSTimeTickPure]
R_ECB_ETbl_P [in OSQInvDef]


S

sat [in assertion]
sc [in absop]
scheck [in derivedrules]
self [in os_code_defs]
SELF [in absop]
semacc [in absop]
semaccapi [in absop]
semacc_succ [in absop]
semacc_no_source [in absop]
semacc_no_sem_err [in absop]
semacc_null [in absop]
semcre [in absop]
semcreapi [in absop]
semcre_RL_Tbl_init_prop [in sem_common]
semcre_succ [in absop]
semcre_no_free [in absop]
semdel [in absop]
semdelapi [in absop]
semdel_succ [in absop]
semdel_ex_wt_err [in absop]
semdel_sem_type_err [in absop]
semdel_no_sem_err [in absop]
semdel_null [in absop]
sem_pendapi [in absop]
sem_pend [in absop]
sem_pend_block_get_succ [in absop]
sem_pend_timeout_err [in absop]
sem_pend_block [in absop]
sem_pend_msg_not_null_err [in absop]
sem_pend_inst_get_succ [in absop]
sem_pend_not_ready_err [in absop]
sem_pend_from_idle_err [in absop]
sem_pend_wrong_type_err [in absop]
sem_pend_p_not_legal_err [in absop]
sem_pend_null_err [in absop]
sem_postapi [in absop]
sem_post [in absop]
sem_post_put_sem_in_succ [in absop]
sem_post_ex_wt_succ [in absop]
sem_post_ovf_err [in absop]
sem_post_wrong_type_err [in absop]
sem_post_p_not_legal_err [in absop]
sem_post_null_err [in absop]
SEM_DEL_EX_ERR [in absop]
SEM_NULL_ERR [in absop]
set_isisr_s [in assertion]
set_is_s [in assertion]
set_isr_s [in assertion]
set_rdy [in InternalFunSpec]
set_rdy_tbl [in InternalFunSpec]
set_rdy_grp [in InternalFunSpec]
set_tcb_next [in OSTimeTickPure]
set_nth [in OSTimeTickPure]
shl [in val]
shr [in val]
side_condition [in toptheorem]
side_condition' [in lemmasfortoptheo]
size [in os_code_defs]
sll [in BaseAsrtDef]
sll [in OSQInvDef]
sllseg [in BaseAsrtDef]
smem [in language]
Snewt [in opsem]
SOME_P_NOT_LEGAL_ERR [in os_code_defs]
Spec [in ucos_correctaux]
starinv_noisr [in assertion]
starinv_isr [in assertion]
start [in os_code_defs]
StatProp [in pif_theory]
Steq [in opsem]
store [in memory]
storebytes [in memory]
structmapstovallist [in assertion]
struct_type_vallist_match [in BaseAsrtDef]
struct_type_vallist_match' [in BaseAsrtDef]
struct_atom_val_eq [in inv_prop]
struct_atom_val_eq' [in inv_prop]
sub [in val]
subabsop [in assertion]
substabst [in assertion]
substaskst [in assertion]
substaskstm [in assertion]
substmem [in assertion]
substmo [in assertion]
sub_dom_env [in asrtLib]
sum_left_map [in Coqlib]
swap_comparison [in Integers]
SWINV [in assertion]
SWPRE [in assertion]
SysmemJoinM [in assertion]
szstruct [in memdata]


T

task [in os_code_defs]
TaskOK [in toptheorem]
tasks [in language]
TaskSimAsrt [in simulation]
taskst [in language]
taskstk [in os_code_defs]
tasks_waiting [in os_code_defs]
TASK_STK_SIZE [in os_code_defs]
task_stat_prop [in PIF_aux]
TcbBJ [in simulation]
tcbdllseg [in OSTCBInvDef]
TcbJoin [in OSTCBInvDef]
TCBList_P [in OSTCBInvDef]
tcbls_rtbl_timetci_update [in InternalFunSpec]
TCBNode_P [in OSTCBInvDef]
ticks [in os_code_defs]
tickstep [in absop]
tick_rdy_ectr [in InternalFunSpec]
tick_rdy_ectr' [in InternalFunSpec]
tid [in language]
tidsame [in opsem]
tidspec.A [in language]
tidspec.B [in language]
tidspec.beq [in language]
tidspec.blt [in language]
tid_a [in PIF_aux]
timedly_idle [in absop]
timedly_nop [in absop]
timedly_succ [in absop]
timedly_zero [in absop]
timeget [in absop]
timeout [in os_code_defs]
timetick [in absop]
timetick_spec [in absop]
TIME_OUT [in absop]
tlmatch [in opsem]
Tlnewt [in opsem]
tl_vl_match [in opsem]
tmdlycode [in absop]
tmdly_sub_1 [in InternalFunSpec]
tmgetapi [in absop]
tmgetcode [in absop]
TMinit [in auxdef]
TMMap [in auxdef]
toyint [in absop]
toyint_spec [in absop]
TStWoMemEq [in auxdef]
typecheck [in assertion]
typechklist [in assertion]
typelen [in memdata]
typelist [in language]
typematch [in opsem]
type_val_match [in opsem]
type_ind2 [in aux_for_hoare_lemmas]
type_eq [in aux_for_hoare_lemmas]


U

ucos_init [in ucos_correctaux]
unTree [in seplog_tactics]
unTree [in tacticsforseplog]
uop_type [in val]
uop_eval [in val]
update_nth_val_op [in BaseAsrtDef]
update_nth_val [in BaseAsrtDef]
update_nth_ectrls [in InternalFunSpec]
update_ectr [in InternalFunSpec]
update_nth [in InternalFunSpec]
upd_last_ectrls [in InternalFunSpec]
UPIF [in pif_theory]


V

vallist [in language]
vallist_seg [in OSQInvDef]
vallist_pre [in OSQInvDef]
vallist_post [in OSQInvDef]
valspec.B [in memory]
val_beq [in OSEventRemovePure]
val_eq [in val]
val_inj [in symbolic_execution]
var [in memory]
var_notin_dom [in symbolic_execution]
vl_elem_neq [in common]
vtoZ [in opsem]
V_OSTCBMutexOwn [in OSTCBInvDef]
V_OSTCBBitY [in OSTCBInvDef]
V_OSTCBBitX [in OSTCBInvDef]
V_OSTCBY [in OSTCBInvDef]
V_OSTCBX [in OSTCBInvDef]
V_OSTCBPrio [in OSTCBInvDef]
V_OSTCBStat [in OSTCBInvDef]
V_OSTCBDly [in OSTCBInvDef]
V_OSTCBMsg [in OSTCBInvDef]
V_OSTCBEventPtr [in OSTCBInvDef]
V_OSTCBPrev [in OSTCBInvDef]
V_OSTCBNext [in OSTCBInvDef]
V_qeventptr [in OSQInvDef]
V_next [in OSQInvDef]
V_nextblk [in OSQInvDef]
V_qfreeblk [in OSQInvDef]
V_OSQEntries [in OSQInvDef]
V_OSQSize [in OSQInvDef]
V_OSQOut [in OSQInvDef]
V_OSQIn [in OSQInvDef]
V_OSQEnd [in OSQInvDef]
V_OSQStart [in OSQInvDef]
V_OSQPtr [in OSQInvDef]
V_OSEventListPtr [in OSQInvDef]
V_OSEventPtr [in OSQInvDef]
V_OSEventCnt [in OSQInvDef]
V_OSEventGrp [in OSQInvDef]
V_OSEventType [in OSQInvDef]


W

waitset [in language]
WaitTCBblk [in OSTCBInvDef]
WAIT_OWNER [in PIF_def]
wait_prop [in PIF_aux]
WEAK_PIF [in PIF_aux]
WellClient [in etraceref]
WellformedOSQ [in OSQInvDef]
WFAPI [in toptheorem]
WFFuncsSim [in simulation]
WFFuncsSim' [in inferules]
WFFunEnv [in inferules]
WFIFun [in toptheorem]
WFInt [in toptheorem]
Wordsize_64.wordsize [in Integers]
Wordsize_8.wordsize [in Integers]
Wordsize_16.wordsize [in Integers]
Wordsize_32.wordsize [in Integers]


X

x [in os_code_defs]


Y

y [in os_code_defs]


Z

Zdivide_dec [in Coqlib]
zeq [in Coqlib]
zle [in Coqlib]
zlt [in Coqlib]


_

_mathsolver_ext.deref_Vint32_unsafe [in mathsolver]
_mathsolver.nat_has_dist.dist [in mathsolver]
_mathsolver.nat_has_next.next [in mathsolver]
_mathsolver.nat_has_le.le_trans [in mathsolver]
_mathsolver.nat_has_le.le_antisymm [in mathsolver]
_mathsolver.nat_has_le.le_refl [in mathsolver]
_mathsolver.nat_has_le.le [in mathsolver]
_mathsolver.nat_has_le.A [in mathsolver]
_mathsolver.Z_has_dist.dist [in mathsolver]
_mathsolver.Z_has_next.next [in mathsolver]
_mathsolver.Z_has_le.le_trans [in mathsolver]
_mathsolver.Z_has_le.le_antisymm [in mathsolver]
_mathsolver.Z_has_le.le_refl [in mathsolver]
_mathsolver.Z_has_le.le [in mathsolver]
_mathsolver.Z_has_le.A [in mathsolver]
_mathsolver.Range.gen_prop' [in mathsolver]
_mathsolver.Range.gen_prop [in mathsolver]
_mathsolver.Range.range [in mathsolver]
_mathsolver._iter [in mathsolver]


Record Index

F

funasrt [in assertion]


I

invasrt [in assertion]


M

Make.int [in Integers]


Global Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (7134 entries)
Notation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (161 entries)
Module Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (60 entries)
Variable Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (34 entries)
Library Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (179 entries)
Lemma Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (4479 entries)
Axiom Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (41 entries)
Constructor Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (447 entries)
Projection Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (7 entries)
Inductive Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (106 entries)
Section Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (10 entries)
Abbreviation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (24 entries)
Definition Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (1583 entries)
Record Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (3 entries)
This page has been generated by coqdoc