160 lines
4.8 KiB
Plaintext
160 lines
4.8 KiB
Plaintext
|
------------------------- MODULE counterexample -------------------------
|
||
|
|
||
|
EXTENDS relay_tests
|
||
|
|
||
|
(* Initial state *)
|
||
|
|
||
|
State1 ==
|
||
|
TRUE
|
||
|
(* Transition 0 to State2 *)
|
||
|
|
||
|
State2 ==
|
||
|
/\ bank = <<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0
|
||
|
/\ count = 0
|
||
|
/\ error = FALSE
|
||
|
/\ handler = ""
|
||
|
/\ history = 0
|
||
|
:> [bankAfter |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
bankBefore |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
error |-> FALSE,
|
||
|
handler |-> "",
|
||
|
packet |->
|
||
|
[data |->
|
||
|
[amount |-> 1,
|
||
|
denomTrace |->
|
||
|
[denom |-> "",
|
||
|
prefix0 |-> [channel |-> "channel-0", port |-> "transfer"],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
||
|
receiver |-> "",
|
||
|
sender |-> ""],
|
||
|
destChannel |-> "channel-0",
|
||
|
destPort |-> "transfer",
|
||
|
sourceChannel |-> "channel-0",
|
||
|
sourcePort |-> "transfer"]]
|
||
|
/\ p = [data |->
|
||
|
[amount |-> 1,
|
||
|
denomTrace |->
|
||
|
[denom |-> "",
|
||
|
prefix0 |-> [channel |-> "channel-0", port |-> "transfer"],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
||
|
receiver |-> "",
|
||
|
sender |-> ""],
|
||
|
destChannel |-> "channel-0",
|
||
|
destPort |-> "transfer",
|
||
|
sourceChannel |-> "channel-0",
|
||
|
sourcePort |-> "transfer"]
|
||
|
|
||
|
(* Transition 3 to State3 *)
|
||
|
|
||
|
State3 ==
|
||
|
/\ bank = <<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0
|
||
|
/\ count = 1
|
||
|
/\ error = TRUE
|
||
|
/\ handler = "OnRecvPacket"
|
||
|
/\ history = 0
|
||
|
:> [bankAfter |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
bankBefore |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
error |-> FALSE,
|
||
|
handler |-> "",
|
||
|
packet |->
|
||
|
[data |->
|
||
|
[amount |-> 1,
|
||
|
denomTrace |->
|
||
|
[denom |-> "",
|
||
|
prefix0 |-> [channel |-> "channel-0", port |-> "transfer"],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
||
|
receiver |-> "",
|
||
|
sender |-> ""],
|
||
|
destChannel |-> "channel-0",
|
||
|
destPort |-> "transfer",
|
||
|
sourceChannel |-> "channel-0",
|
||
|
sourcePort |-> "transfer"]]
|
||
|
@@ 1
|
||
|
:> [bankAfter |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
bankBefore |->
|
||
|
<<
|
||
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
||
|
>>
|
||
|
:> 0,
|
||
|
error |-> TRUE,
|
||
|
handler |-> "OnRecvPacket",
|
||
|
packet |->
|
||
|
[data |->
|
||
|
[amount |-> 1,
|
||
|
denomTrace |->
|
||
|
[denom |-> "",
|
||
|
prefix0 |-> [channel |-> "channel-0", port |-> "transfer"],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
||
|
receiver |-> "",
|
||
|
sender |-> ""],
|
||
|
destChannel |-> "channel-0",
|
||
|
destPort |-> "transfer",
|
||
|
sourceChannel |-> "channel-0",
|
||
|
sourcePort |-> "transfer"]]
|
||
|
/\ p = [data |->
|
||
|
[amount |-> 0,
|
||
|
denomTrace |->
|
||
|
[denom |-> "",
|
||
|
prefix0 |-> [channel |-> "", port |-> ""],
|
||
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
||
|
receiver |-> "",
|
||
|
sender |-> ""],
|
||
|
destChannel |-> "",
|
||
|
destPort |-> "",
|
||
|
sourceChannel |-> "",
|
||
|
sourcePort |-> ""]
|
||
|
|
||
|
(* The following formula holds true in the last state and violates the invariant *)
|
||
|
|
||
|
InvariantViolation ==
|
||
|
BMC!Skolem((\E s$2 \in DOMAIN history:
|
||
|
history[s$2]["handler"] = "OnRecvPacket"
|
||
|
/\ history[s$2]["error"] = TRUE
|
||
|
/\ history[s$2]["packet"]["data"]["amount"] > 0))
|
||
|
|
||
|
================================================================================
|
||
|
\* Created by Apalache on Thu Dec 10 11:02:31 CET 2020
|
||
|
\* https://github.com/informalsystems/apalache
|