Comment Feed for Channel 9 - The Verification Corner - Loop Termination

Re: The Verification Corner - Loop Termination

deskin — Mon, 29 Mar 2010 18:20:08 GMT

Minor nitpick: Around 2:35 the argument is made that one needs to ensure a minimum decrease for the loop termination expression; however this is not the case. Rather, it is sufficient and necessary that the sequence of values either diverges, or converges to a value less than zero. For instance, both these loops will provably terminate, for any positive values of x and n:

/* decreases x - 1 */
while (x > 1)
{
  x = x / 2;
}

/* decreases x */
while (x > 0)
{
  x = x - (1 / n);
  n = n + 1;
}

posted by deskin

Re: The Verification Corner - Loop Termination

arcnet — Wed, 31 Mar 2010 01:08:54 GMT

while (x > 0) may terminate in theory but wont do that in any other case .

int x = 1, n = 100000; 
while (x > 0) { 
   x = x - (1 / n); 
   n = n + 1; 
} 
n = 0x7ffffffe, x = 1 
n = 0x7ffffff, ... 
n = 0x8000000, ..., 
n = -1, x = 2 
n = 0 -> div by zero

posted by arcnet

Re: The Verification Corner - Loop Termination

leino — Fri, 02 Apr 2010 06:45:17 GMT

In your particular examples, there is minimum decrease. In the first example (with x = x/2), every iteration decreases x by at least 0.5 (since the loop body is entered only if x>1). In the second example, there is not a single constant that will work for every run of the program. However, the minimum decrease can be computed from the values that x and n have just before the loop begins. For example, let X denote the initial value of x and suppose the initial value of n is 1; then, it will take about e^X iterations before the 1/n terms add up to X, where e is the base of the natural logarithm and I'm using ^ to denote exponentiation; so, each iteration will decrease x by at least 1 / e^X.

What you are getting at, though, is correct, namely that what is necessary and sufficient for the loop to terminate is that the successive iterations can be mapped to strictly decreasing values in some well-founded order.

posted by leino

Re: The Verification Corner - Loop Termination

iman.saleh — Tue, 17 Aug 2010 02:42:39 GMT

I downloaded Boogie and dafny verifiers and wanted to know if the Dafny editor used in the demo available for download. I couldn't locate it anywhere.

Thanks!

Iman

posted by iman.saleh

Re: The Verification Corner - Loop Termination

leino — Wed, 06 Oct 2010 01:12:42 GMT

@iman.saleh: We just recently released the Visual Studio 2010 mode for Dafny, see http://boogie.codeplex.com, click "How to install and build the sources" and then scroll down to "Visual Studio integration".

Rustan

posted by leino