19 lines
697 B
Markdown
19 lines
697 B
Markdown
Assuming xQueue and pvItemToQueue are non-null pointers allocated to the right
|
|
size, this harness proves the memory safety of QueueGenericPeek. Some of the
|
|
task pool behavior is abstracted away. Nevertheless, some of the concurrent
|
|
behavior has been modeled to allow full coverage of QueuePeek.
|
|
|
|
This proof is a work-in-progress. Proof assumptions are described in
|
|
the harness. The proof also assumes the following functions are
|
|
memory safe and have no side effects relevant to the memory safety of
|
|
this function:
|
|
|
|
* vPortEnterCritical
|
|
* vPortExitCritical
|
|
* vPortGenerateSimulatedInterrupt
|
|
* vTaskMissedYield
|
|
* vTaskPlaceOnEventList
|
|
* vTaskSuspendAll
|
|
* xTaskRemoveFromEventList
|
|
* xTaskResumeAll
|