160 lines
4.8 KiB
Plaintext
160 lines
4.8 KiB
Plaintext
------------------------- MODULE counterexample -------------------------
|
|
|
|
EXTENDS relay_tests
|
|
|
|
(* Initial state *)
|
|
|
|
State1 ==
|
|
TRUE
|
|
(* Transition 0 to State2 *)
|
|
|
|
State2 ==
|
|
/\ bank = <<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0
|
|
/\ count = 0
|
|
/\ error = FALSE
|
|
/\ handler = ""
|
|
/\ history = 0
|
|
:> [bankAfter |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
bankBefore |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
error |-> FALSE,
|
|
handler |-> "",
|
|
packet |->
|
|
[data |->
|
|
[amount |-> 1,
|
|
denomTrace |->
|
|
[denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
|
receiver |-> "",
|
|
sender |-> ""],
|
|
destChannel |-> "channel-0",
|
|
destPort |-> "transfer",
|
|
sourceChannel |-> "channel-0",
|
|
sourcePort |-> "transfer"]]
|
|
/\ p = [data |->
|
|
[amount |-> 1,
|
|
denomTrace |->
|
|
[denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
|
receiver |-> "",
|
|
sender |-> ""],
|
|
destChannel |-> "channel-0",
|
|
destPort |-> "transfer",
|
|
sourceChannel |-> "channel-0",
|
|
sourcePort |-> "transfer"]
|
|
|
|
(* Transition 0 to State3 *)
|
|
|
|
State3 ==
|
|
/\ bank = <<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0
|
|
/\ count = 1
|
|
/\ error = TRUE
|
|
/\ handler = "SendTransfer"
|
|
/\ history = 0
|
|
:> [bankAfter |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
bankBefore |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
error |-> FALSE,
|
|
handler |-> "",
|
|
packet |->
|
|
[data |->
|
|
[amount |-> 1,
|
|
denomTrace |->
|
|
[denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
|
receiver |-> "",
|
|
sender |-> ""],
|
|
destChannel |-> "channel-0",
|
|
destPort |-> "transfer",
|
|
sourceChannel |-> "channel-0",
|
|
sourcePort |-> "transfer"]]
|
|
@@ 1
|
|
:> [bankAfter |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
bankBefore |->
|
|
<<
|
|
[channel |-> "", id |-> "", port |-> ""], [denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]]
|
|
>>
|
|
:> 0,
|
|
error |-> TRUE,
|
|
handler |-> "SendTransfer",
|
|
packet |->
|
|
[data |->
|
|
[amount |-> 1,
|
|
denomTrace |->
|
|
[denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
|
receiver |-> "",
|
|
sender |-> ""],
|
|
destChannel |-> "channel-0",
|
|
destPort |-> "transfer",
|
|
sourceChannel |-> "channel-0",
|
|
sourcePort |-> "transfer"]]
|
|
/\ p = [data |->
|
|
[amount |-> 0,
|
|
denomTrace |->
|
|
[denom |-> "",
|
|
prefix0 |-> [channel |-> "", port |-> ""],
|
|
prefix1 |-> [channel |-> "", port |-> ""]],
|
|
receiver |-> "",
|
|
sender |-> ""],
|
|
destChannel |-> "",
|
|
destPort |-> "",
|
|
sourceChannel |-> "",
|
|
sourcePort |-> ""]
|
|
|
|
(* The following formula holds true in the last state and violates the invariant *)
|
|
|
|
InvariantViolation ==
|
|
BMC!Skolem((\E s$2 \in DOMAIN history:
|
|
history[s$2]["handler"] = "SendTransfer"
|
|
/\ history[s$2]["error"] = TRUE
|
|
/\ history[s$2]["packet"]["data"]["amount"] > 0))
|
|
|
|
================================================================================
|
|
\* Created by Apalache on Thu Dec 10 11:00:34 CET 2020
|
|
\* https://github.com/informalsystems/apalache
|