blob: 5bc20c5e5b52944f23d2f572b6fbfe3680b6a2da (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
This proof demonstrates the memory safety of the TaskSwitchContext function.
We assume task ready lists to be initialized and filled with one element each,
and `pxCurrentTCB` to be the highest priority task. We also set
`uxSchedulerSuspended` to a nondeterministic value.
This proof is a work-in-progress. Proof assumptions are described in
the harness. The proof also assumes the following functions are
memory safe and have no side effects relevant to the memory safety of
this function:
* prvTraceGetCurrentTaskHandle
* prvTraceGetTaskNumber
* prvTraceStoreTaskswitch
* ulGetRunTimeCounterValue
|
