ALICe documentation

Model synergy_bad

«  Model subway   ::   Contents   ::   Model terminate  »

Model synergy_bad

Cited in: [GulavaniHKNR06] fig. 9 p. 9.

Tag: termination.

Figure

../_images/synergy_bad.png

Source code

model gulavani_henzinger_kannan_nori_rajamani_sigsoft06_09 {

  var x, y;

  states q;

  transition t := {
    from   := q;
    to     := q;
    guard  := y >= 0;
    action := y' = y + x;
  };

}

strategy gulavani_henzinger_kannan_nori_rajamani_sigsoft06_09_s {

  Region init := {state = q && x = 0 && y = 0};

}

Expected invariant

{ q[0, 0] }

Results

  • With Aspic: { q[0, 0] } (0.22s), OK.
  • With ISL: { q[0, y__1] : y__1 >= 0; q[0, 0] } (0.01s), failed.

«  Model subway   ::   Contents   ::   Model terminate  »