Function Memoization and Unique Object Representation for ACL2 Functions
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Full Functional Verification of Linked Data Structures
Full Functional Verification of Linked Data Structures Karen Zee Viktor Kuncak Martin C. Rinard MIT CSAIL, Cambridge, MA, USA EPFL, I&C, Lausanne, Switzerland MIT CSAIL, Cambridge, MA, USA ∗ [email protected] viktor.kuncak@epfl.ch [email protected] Abstract 1. Introduction We present the first verification of full functional correctness for Linked data structures such as lists, trees, graphs, and hash tables a range of linked data structure implementations, including muta- are pervasive in modern software systems. But because of phenom- ble lists, trees, graphs, and hash tables. Specifically, we present the ena such as aliasing and indirection, it has been a challenge to de- use of the Jahob verification system to verify formal specifications, velop automated reasoning systems that are capable of proving im- written in classical higher-order logic, that completely capture the portant correctness properties of such data structures. desired behavior of the Java data structure implementations (with the exception of properties involving execution time and/or mem- 1.1 Background ory consumption). Given that the desired correctness properties in- In principle, standard specification and verification approaches clude intractable constructs such as quantifiers, transitive closure, should work for linked data structure implementations. But in prac- and lambda abstraction, it is a challenge to successfully prove the tice, many of the desired correctness properties involve logical generated verification conditions. constructs such transitive closure and -
Efficient Immutable Collections
Efcient Immutable Collections Efcient Immutable Collections Michael J. Steindorfer Michael J. Steindorfer Efficient Immutable Collections Efficient Immutable Collections ACADEMISCH PROEFSCHRIFT ter verkrijging van de graad van doctor aan de Universiteit van Amsterdam op gezag van de Rector Magnificus prof. dr. ir. K.I.J. Maex ten overstaan van een door het College voor Promoties ingestelde commissie, in het openbaar te verdedigen in de Agnietenkapel op dinsdag 28 februari 2017, te 14.00 uur door Michael Johannes Steindorfer geboren te Friesach, Oostenrijk Promotiecommissie Promotores: Prof. dr. P. Klint Universiteit van Amsterdam Prof. dr. J.J. Vinju Technische Universiteit Eindhoven Overige leden: Prof. dr. M.L. Kersten Universiteit van Amsterdam Dr. C.U. Grelck Universiteit van Amsterdam Prof. dr. P. van Emde Boas Universiteit van Amsterdam Prof. dr. M. Püschel ETH Zurich Dr. D. Syme Microsoft Research Faculteit der Natuurwetenschappen, Wiskunde en Informatica The work in this thesis has been carried out at Centrum Wiskunde & Informatica (CWI) under the auspices of the research school IPA (Institute for Programming research and Algorithmics). Contents Contents v 1 Introduction 1 1.1 Collection Libraries . 3 1.2 Variability Dimensions of Collections . 5 1.3 Immutable Collections . 8 1.4 Persistent Data Structures . 10 1.5 Platform-Specific Data Locality Challenges . 15 1.6 Contributions . 19 1.7 Software Artifacts . 22 1.8 Further Reading . 23 2 Towards a Software Product Line of Trie-Based Collections 25 2.1 Introduction . 26 2.2 Related Work . 27 2.3 A Stable Data Type Independent Encoding . 29 2.4 Intermediate Generator Abstractions . 31 2.5 Conclusion . 33 3 The CHAMP Encoding 35 3.1 Introduction . -
CSI33 Data Structures
Outline CSI33 Data Structures Department of Mathematics and Computer Science Bronx Community College December 2, 2015 CSI33 Data Structures Outline Outline 1 Chapter 13: Heaps, Balances Trees and Hash Tables Hash Tables CSI33 Data Structures Chapter 13: Heaps, Balances Trees and Hash TablesHash Tables Outline 1 Chapter 13: Heaps, Balances Trees and Hash Tables Hash Tables CSI33 Data Structures Chapter 13: Heaps, Balances Trees and Hash TablesHash Tables Python Dictionaries Various names are given to the abstract data type we know as a dictionary in Python: Hash (The languages Perl and Ruby use this terminology; implementation is a hash table). Map (Microsoft Foundation Classes C/C++ Library; because it maps keys to values). Dictionary (Python, Smalltalk; lets you "look up" a value for a key). Association List (LISP|everything in LISP is a list, but this type is implemented by hash table). Associative Array (This is the technical name for such a structure because it looks like an array whose 'indexes' in square brackets are key values). CSI33 Data Structures Chapter 13: Heaps, Balances Trees and Hash TablesHash Tables Python Dictionaries In Python, a dictionary associates a value (item of data) with a unique key (to identify and access the data). The implementation strategy is the same in any language that uses associative arrays. Representing the relation between key and value is a hash table. CSI33 Data Structures Chapter 13: Heaps, Balances Trees and Hash TablesHash Tables Python Dictionaries The Python implementation uses a hash table since it has the most efficient performance for insertion, deletion, and lookup operations. The running times of all these operations are better than any we have seen so far. -
Selective Memoization∗
Selective Memoization¤ Umut A. Acar Guy E. Blelloch Robert Harper School of Computer Science Carnegie Mellon University Pittsburgh, PA 15213 fumut,blelloch,[email protected] Abstract 1 Introduction We present a framework for applying memoization selectively. The Memoization is a fundamental and powerful technique for result framework provides programmer control over equality, space us- re-use. It dates back a half century [7, 24, 25] and has been used age, and identification of precise dependences so that memoiza- extensively in many areas such as dynamic programming [4, 9, 10, tion can be applied according to the needs of an application. Two 21], incremental computation [11, 37, 12, 39, 18, 1, 40, 22, 15, 16, key properties of the framework are that it is efficient and yields 2], and many others [8, 26, 19, 14, 23, 28, 29, 22]. In fact, lazy programs whose performance can be analyzed using standard tech- evaluation provides a limited form of memoization [20]. niques. Although memoization can dramatically improve performance and We describe the framework in the context of a functional language can require only small changes to the code, no language or library and an implementation as an SML library. The language is based support for memoization has gained broad acceptance. Instead, on a modal type system and allows the programmer to express pro- many successful uses of memoization rely on application-specific grams that reveal their true data dependences when executed. The support code. The underlying reason for this is one of control: since SML implementation cannot support this modal type system stati- memoization is all about performance, the user must be able to con- cally, but instead employs run-time checks to ensure correct usage trol the performance of memoization. -
CIS 120 Midterm I October 13, 2017 Name (Printed): Pennkey (Penn
CIS 120 Midterm I October 13, 2017 Name (printed): PennKey (penn login id): My signature below certifies that I have complied with the University of Pennsylvania’s Code of Academic Integrity in completing this examination. Signature: Date: • Do not begin the exam until you are told it is time to do so. • Make sure that your username (a.k.a. PennKey, e.g. stevez) is written clearly at the bottom of every page. • There are 100 total points. The exam lasts 50 minutes. Do not spend too much time on any one question. • Be sure to recheck all of your answers. • The last page of the exam can be used as scratch space. By default, we will ignore anything you write on this page. If you write something that you want us to grade, make sure you mark it clearly as an answer to a problem and write a clear note on the page with that problem telling us to look at the scratch page. • Good luck! 1 1. Binary Search Trees (16 points total) This problem concerns buggy implementations of the insert and delete functions for bi- nary search trees, the correct versions of which are shown in Appendix A. First: At most one of the lines of code contains a compile-time (i.e. typechecking) error. If there is a compile-time error, explain what the error is and one way to fix it. If there is no compile-time error, say “No Error”. Second: even after the compile-time error (if any) is fixed, the code is still buggy—for some inputs the function works correctly and produces the correct BST, and for other inputs, the function produces an incorrect tree. -
Verifying Linked Data Structure Implementations
Verifying Linked Data Structure Implementations Karen Zee Viktor Kuncak Martin Rinard MIT CSAIL EPFL I&C MIT CSAIL Cambridge, MA Lausanne, Switzerland Cambridge, MA [email protected] viktor.kuncak@epfl.ch [email protected] Abstract equivalent conjunction of properties. By processing each conjunct separately, Jahob can use different provers to es- The Jahob program verification system leverages state of tablish different parts of the proof obligations. This is the art automated theorem provers, shape analysis, and de- possible thanks to formula approximation techniques[10] cision procedures to check that programs conform to their that create equivalent or semantically stronger formulas ac- specifications. By combining a rich specification language cepted by the specialized decision procedures. with a diverse collection of verification technologies, Jahob This paper presents our experience using the Jahob sys- makes it possible to verify complex properties of programs tem to obtain full correctness proofs for a collection of that manipulate linked data structures. We present our re- linked data structure implementations. Unlike systems that sults using Jahob to achieve full functional verification of a are designed to verify partial correctness properties, Jahob collection of linked data structures. verifies the full functional correctness of the data structure implementation. Not only do our results show that such full functional verification is feasible, the verified data struc- 1 Introduction tures and algorithms provide concrete examples that can help developers better understand how to achieve similar results in future efforts. Linked data structures such as lists, trees, graphs, and hash tables are pervasive in modern software systems. But because of phenomena such as aliasing and indirection, it 2 Example has been a challenge to develop automated reasoning sys- tems that are capable of proving important correctness prop- In this section we use a verified association list to demon- erties of such data structures. -
CSCI 2041: Data Types in Ocaml
CSCI 2041: Data Types in OCaml Chris Kauffman Last Updated: Thu Oct 18 22:43:05 CDT 2018 1 Logistics Assignment 3 multimanager Reading I Manage multiple lists I OCaml System Manual: I Records to track lists/undo Ch 1.4, 1.5, 1.7 I option to deal with editing I Practical OCaml: Ch 5 I Higher-order funcs for easy bulk operations Goals I Post tomorrow I Tuples I Due in 2 weeks I Records I Algebraic / Variant Types Next week First-class / Higher Order Functions 2 Overview of Aggregate Data Structures / Types in OCaml I Despite being an older functional language, OCaml has a wealth of aggregate data types I The table below describe some of these with some characteristics I We have discussed Lists and Arrays at some length I We will now discuss the others Elements Typical Access Mutable Example Lists Homoegenous Index/PatMatch No [1;2;3] Array Homoegenous Index Yes [|1;2;3|] Tuples Heterogeneous PatMatch No (1,"two",3.0) Records Heterogeneous Field/PatMatch No/Yes {name="Sam"; age=21} Variant Not Applicable PatMatch No type letter = A | B | C; Note: data types can be nested and combined in any way I Array of Lists, List of Tuples I Record with list and tuple fields I Tuple of list and Record I Variant with List and Record or Array and Tuple 3 Tuples # let int_pair = (1,2);; val int_pair : int * int = (1, 2) I Potentially mixed data # let mixed_triple = (1,"two",3.0);; I Commas separate elements val mixed_triple : int * string * float = (1, "two", 3.) I Tuples: pairs, triples, quadruples, quintuples, etc. -
Alexandria Manual
alexandria Manual draft version Alexandria software and associated documentation are in the public domain: Authors dedicate this work to public domain, for the benefit of the public at large and to the detriment of the authors' heirs and successors. Authors intends this dedication to be an overt act of relinquishment in perpetuity of all present and future rights under copyright law, whether vested or contingent, in the work. Authors understands that such relinquishment of all rights includes the relinquishment of all rights to enforce (by lawsuit or otherwise) those copyrights in the work. Authors recognize that, once placed in the public domain, the work may be freely reproduced, distributed, transmitted, used, modified, built upon, or oth- erwise exploited by anyone for any purpose, commercial or non-commercial, and in any way, including by methods that have not yet been invented or conceived. In those legislations where public domain dedications are not recognized or possible, Alexan- dria is distributed under the following terms and conditions: Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTIC- ULAR PURPOSE AND NONINFRINGEMENT. -
TAL Recognition in O(M(N2)) Time
TAL Recognition in O(M(n2)) Time Sanguthevar Rajasekaran Dept. of CISE, Univ. of Florida raj~cis.ufl.edu Shibu Yooseph Dept. of CIS, Univ. of Pennsylvania [email protected] Abstract time needed to multiply two k x k boolean matri- ces. The best known value for M(k) is O(n 2"3vs) We propose an O(M(n2)) time algorithm (Coppersmith, Winograd, 1990). Though our algo- for the recognition of Tree Adjoining Lan- rithm is similar in flavor to those of Graham, Har- guages (TALs), where n is the size of the rison, & Ruzzo (1976), and Valiant (1975) (which input string and M(k) is the time needed were Mgorithms proposed for recognition of Con- to multiply two k x k boolean matrices. text Pree Languages (CFLs)), there are crucial dif- Tree Adjoining Grammars (TAGs) are for- ferences. As such, the techniques of (Graham, et al., malisms suitable for natural language pro- 1976) and (Valiant, 1975) do not seem to extend to cessing and have received enormous atten- TALs (Satta, 1993). tion in the past among not only natural language processing researchers but also al- gorithms designers. The first polynomial 2 Tree Adjoining Grammars time algorithm for TAL parsing was pro- A Tree Adjoining Grammar (TAG) consists of a posed in 1986 and had a run time of O(n6). quintuple (N, ~ U {~}, I, A, S), where Quite recently, an O(n 3 M(n)) algorithm N is a finite set of has been proposed. The algorithm pre- nonterminal symbols, sented in this paper improves the run time is a finite set of terminal symbols disjoint from of the recent result using an entirely differ- N, ent approach. -
Appendix a Answers to Some of the Exercises
Appendix A Answers to Some of the Exercises Answers for Chapter 2 2. Let f (x) be the number of a 's minus the number of b 's in string x. A string is in the language defined by the grammar just when • f(x) = 1 and • for every proper prefix u of x, f( u) < 1. 3. Let the string be given as array X [O .. N -1] oflength N. We use the notation X ! i, (pronounced: X drop i) for 0:::; i :::; N, to denote the tail of length N - i of array X, that is, the sequence from index ion. (Or: X from which the first i elements have been dropped.) We write L for the language denoted by the grammar. Lk is the language consisting of the catenation of k strings from L. We are asked to write a program for computing the boolean value X E L. This may be written as X ! 0 E L1. The invariant that we choose is obtained by generalizing constants 0 and 1 to variables i and k: P : (X E L = X ! i ELk) /\ 0:::; i :::; N /\ 0:::; k We use the following properties: (0) if Xli] = a, i < N, k > 0 then X ! i E Lk = X ! i + 1 E Lk-1 (1) if Xli] = b, i < N, k ~ 0 then X ! i E Lk = X ! i + 1 E Lk+1 (2) X ! N E Lk = (k = 0) because X ! N = 10 and 10 E Lk for k = 0 only (3) X ! i E LO = (i = N) because (X ! i = 10) = (i = N) and LO = {€} The program is {N ~ O} k := Ij i:= OJ {P} *[ k =1= 0/\ i =1= N -+ [ Xli] = a -+ k := k - 1 404 Appendix A. -
Specification Patterns and Proofs for Recursion Through the Store
Specification patterns and proofs for recursion through the store Nathaniel Charlton and Bernhard Reus University of Sussex, Brighton Abstract. Higher-order store means that code can be stored on the mutable heap that programs manipulate, and is the basis of flexible soft- ware that can be changed or re-configured at runtime. Specifying such programs is challenging because of recursion through the store, where new (mutual) recursions between code are set up on the fly. This paper presents a series of formal specification patterns that capture increas- ingly complex uses of recursion through the store. To express the neces- sary specifications we extend the separation logic for higher-order store given by Schwinghammer et al. (CSL, 2009), adding parameter passing, and certain recursively defined families of assertions. Finally, we apply our specification patterns and rules to an example program that exploits many of the possibilities offered by higher-order store; this is the first larger case study conducted with logical techniques based on work by Schwinghammer et al. (CSL, 2009), and shows that they are practical. 1 Introduction and motivation Popular \classic" languages like ML, Java and C provide facilities for manipulat- ing code stored on the heap at runtime. With ML one can store newly generated function values in heap cells; with Java one can load new classes at runtime and create objects of those classes on the heap. Even for C, where the code of the program is usually assumed to be immutable, programs can dynamically load and unload libraries at runtime, and use function pointers to invoke their code. -
Type-Safe Modular Hash-Consing
Type-Safe Modular Hash-Consing Jean-Christophe Filliˆatre Sylvain Conchon LRI LRI Universit´eParis Sud 91405 Orsay France Universit´eParis Sud 91405 Orsay France fi[email protected] [email protected] Abstract context dependent and we will not discuss its choice in this paper— Hash-consing is a technique to share values that are structurally anyway, choosing a prime number is always a good idea. equal. Beyond the obvious advantage of saving memory blocks, As a running example of a datatype on which to perform hash- hash-consing may also be used to speed up fundamental operations consing, we choose the following type term for λ-terms with de and data structures by several orders of magnitude when sharing Bruijn indices: is maximal. This paper introduces an OCAML hash-consing library type term = that encapsulates hash-consed terms in an abstract datatype, thus | Var of int safely ensuring maximal sharing. This library is also parameterized | Lam of term by an equality that allows the user to identify terms according to an | App of term × term arbitrary equivalence relation. Instantiated on this type, the hashcons function has the following Categories and Subject Descriptors D.2.3 [Software engineer- signature: ing]: Coding Tools and Techniques val hashcons : term → term General Terms Design, Performance If we want to get maximal sharing—the property that two values Keywords Hash-consing, sharing, data structures are indeed shared as soon as they are structurally equal—we need to systematically apply hashcons each time we build a new term. 1. Introduction Therefore it is a good idea to introduce smart constructors perform- ing hash-consing: Hash-consing is a technique to share purely functional data that are structurally equal [8, 9].