Skip to main content

Choice

Struct Choice 

Source
pub struct Choice<A, B>(pub A, pub B);
Expand description

Ordered choice combinator consuming/producing a sum type.

Parsing semantics: tries A first, wrapping success in Sum::Inl; on failure, tries B, wrapping success in Sum::Inr.

§Consistency

If a value a is consistent with A, then Sum::Inl(a) is consistent with Choice(A, B). If a value b is consistent with B, then Sum::Inr(b) is consistent with Choice(A, B).

§Unambiguity

Requires disjoint_domains(A, B).

Tuple Fields§

§0: A§1: B

Trait Implementations§

Source§

impl<A, B, TA, TB> ByteLen<Sum<TA, TB>> for Choice<A, B>
where TA: DeepView, TB: DeepView, A: ByteLen<TA>, B: ByteLen<TB>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.0.exec_inv()
    &&& self.1.exec_inv()

}
Source§

exec fn length(&self, v: &Sum<TA, TB>) -> len : usize

Source§

impl<A: Clone, B: Clone> Clone for Choice<A, B>

Source§

exec fn clone(&self) -> cloned : Self

ensures
call_ensures(A::clone, (&self.0,), cloned.0),
call_ensures(B::clone, (&self.1,), cloned.1),
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl<A: Consistency, B: Consistency> Consistency for Choice<A, B>

Source§

open spec fn consistent(&self, v: Self::Val) -> bool

{
    match v {
        Sum::Inl(va) => self.0.consistent(va),
        Sum::Inr(vb) => self.1.consistent(vb),
    }
}
Source§

type Val = Sum<<A as Consistency>::Val, <B as Consistency>::Val>

The type of values whose consistency is being checked.
Source§

impl<A, B, TA, TB> DerOrd<Sum<TA, TB>> for Choice<A, B>
where TA: DeepView, TB: DeepView, A: DerOrd<TA>, B: DerOrd<TB>,

Source§

proof fn lemma_der_serialize_len(&self, value: Sum<TA::V, TB::V>)

Source§

open spec fn der_remaining( &self, value: Sum<TA::V, TB::V>, state: ChoiceDerState<A::State, B::State>, ) -> Seq<u8>

{
    match (value, state) {
        (Sum::Inl(value), ChoiceDerState::Left(state)) => {
            self.0.der_remaining(value, state)
        }
        (Sum::Inr(value), ChoiceDerState::Right(state)) => {
            self.1.der_remaining(value, state)
        }
        _ => Seq::empty(),
    }
}
Source§

open spec fn der_state_valid( &self, value: Sum<TA::V, TB::V>, state: ChoiceDerState<A::State, B::State>, ) -> bool

{
    match (value, state) {
        (Sum::Inl(value), ChoiceDerState::Left(state)) => {
            self.0.der_state_valid(value, state)
        }
        (Sum::Inr(value), ChoiceDerState::Right(state)) => {
            self.1.der_state_valid(value, state)
        }
        _ => false,
    }
}
Source§

exec fn der_start(&self, v: &Sum<TA, TB>) -> state : ChoiceDerState<A::State, B::State>

Source§

exec fn der_next( &self, v: &Sum<TA, TB>, state: &mut ChoiceDerState<A::State, B::State>, ) -> next : Option<u8>

Source§

fn der_leq(&self, left: &T, right: &T) -> bool

Source§

impl<A: DerState, B: DerState> DerState for Choice<A, B>

Source§

impl<A, B> EquivSerializers for Choice<A, B>

Source§

open spec fn equiv_inv(&self) -> bool

{
    &&& self.0.equiv_inv()
    &&& self.1.equiv_inv()

}
Source§

proof fn lemma_serialize_equiv_on_empty(&self, v: Self::SVal)

Source§

impl<A, B> EquivSerializersGeneral for Choice<A, B>

Source§

open spec fn equiv_general_inv(&self) -> bool

{
    &&& self.0.equiv_general_inv()
    &&& self.1.equiv_general_inv()

}
Source§

proof fn lemma_serialize_equiv(&self, v: Self::SVal, obuf: Seq<u8>)

Source§

impl<A: GoodSerializer, B: GoodSerializer> GoodSerializer for Choice<A, B>

Source§

open spec fn serialize_inv(&self) -> bool

{
    &&& self.0.serialize_inv()
    &&& self.1.serialize_inv()

}
Source§

proof fn lemma_serialize_len(&self, v: Self::SVal)

Source§

impl<Left: HasAsn1Start, Right: HasAsn1Start> HasAsn1Start for Choice<Left, Right>

A structural choice accepts the union of the starts accepted by either branch.

Source§

open spec fn asn1_start(&self) -> Asn1StartDomain

{ asn1_start_union(self.0.asn1_start(), self.1.asn1_start()) }
Source§

proof fn lemma_parse_implies_asn1_start(&self, input: Seq<u8>)

Source§

impl<A: MinMaxByteLen, B: MinMaxByteLen> MinMaxByteLen for Choice<A, B>

Source§

open spec fn min(&self) -> nat

{ if self.0.min() <= self.1.min() { self.0.min() } else { self.1.min() } }
Source§

open spec fn max(&self) -> nat

{ if self.0.max() <= self.1.max() { self.1.max() } else { self.0.max() } }
Source§

proof fn lemma_min_max_byte_len(&self, v: Self::T)

Source§

impl<A: NoLookAhead, B: NoLookAhead> NoLookAhead for Choice<A, B>

Source§

open spec fn no_lookahead_inv(&self) -> bool

{
    &&& self.0.no_lookahead_inv()
    &&& self.1.no_lookahead_inv()
    &&& disjoint_domains(self.0, self.1)

}
Source§

proof fn lemma_no_lookahead(&self, i1: Seq<u8>, i2: Seq<u8>)

Source§

fn corollary_non_extensible(&self, i1: Seq<u8>, i2: Seq<u8>)

Source§

impl<A: NonMalleable, B: NonMalleable> NonMalleable for Choice<A, B>

Source§

open spec fn nonmal_inv(&self) -> bool

{
    &&& self.0.nonmal_inv()
    &&& self.1.nonmal_inv()

}
Source§

proof fn lemma_parse_non_malleable(&self, buf1: Seq<u8>, buf2: Seq<u8>)

Source§

impl<A, B> NonTailFmt for Choice<A, B>
where A: NonTailFmt, B: NonTailFmt,

Source§

open spec fn serialize_dps_inv(&self) -> bool

{
    &&& self.0.serialize_dps_inv()
    &&& self.1.serialize_dps_inv()

}
Source§

proof fn lemma_serialize_dps_prepend(&self, v: Self::SValue, obuf: Seq<u8>)

Source§

proof fn lemma_serialize_dps_len(&self, v: Self::SValue, obuf: Seq<u8>)

Source§

impl<I, A, B> Parser<I> for Choice<A, B>
where I: View<V = Seq<u8>>, A: Parser<I>, B: Parser<I>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.0.exec_inv()
    &&& self.1.exec_inv()

}
Source§

exec fn parse(&self, ibuf: &I) -> PResult<Self::PT>

Source§

type PT = Sum<<A as Parser<I>>::PT, <B as Parser<I>>::PT>

Executable value returned by this parser.
Source§

impl<A, B, TA, TB> Prepare<Sum<TA, TB>> for Choice<A, B>
where TA: DeepView, TB: DeepView, A: Prepare<TA>, B: Prepare<TB>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.0.exec_inv()
    &&& self.1.exec_inv()

}
Source§

exec fn prepare(&self, v: &Sum<TA, TB>) -> checked : Result<usize, PreSerializeError>

Source§

impl<A: Productive, B: Productive> Productive for Choice<A, B>

Source§

open spec fn productive_inv(&self) -> bool

{
    &&& self.0.productive_inv()
    &&& self.1.productive_inv()

}
Source§

proof fn lemma_productive(&self, s: Seq<u8>)

Source§

impl<A: SPRoundTripDps, B: SPRoundTripDps> SPRoundTripDps for Choice<A, B>

Source§

open spec fn unambiguous(&self) -> bool

{
    &&& self.0.unambiguous()
    &&& self.1.unambiguous()
    &&& disjoint_domains(self.0, self.1)

}
Source§

proof fn theorem_serialize_dps_parse_roundtrip(&self, v: Self::T, obuf: Seq<u8>)

Source§

impl<A: SafeParser, B: SafeParser> SafeParser for Choice<A, B>

Source§

open spec fn safe_inv(&self) -> bool

{
    &&& self.0.safe_inv()
    &&& self.1.safe_inv()

}
Source§

proof fn lemma_parse_safe(&self, ibuf: Seq<u8>)

Source§

impl<Output: OutputBuf, A, B, TA, TB> Serializer<Output, Sum<TA, TB>> for Choice<A, B>
where TA: DeepView, TB: DeepView, A: Serializer<Output, TA>, B: Serializer<Output, TB>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.0.exec_inv()
    &&& self.1.exec_inv()

}
Source§

exec fn serialize_into(&self, v: &Sum<TA, TB>, obuf: &mut Output)

Source§

impl<A: SoundParser, B: SoundParser> SoundParser for Choice<A, B>

Source§

open spec fn sound_inv(&self) -> bool

{
    &&& self.0.sound_inv()
    &&& self.1.sound_inv()

}
Source§

proof fn lemma_parse_sound_consumption(&self, ibuf: Seq<u8>)

Source§

proof fn lemma_parse_sound_value(&self, ibuf: Seq<u8>)

Source§

impl<A, B> SpecByteLen for Choice<A, B>
where A: SpecByteLen, B: SpecByteLen,

Source§

open spec fn byte_len(&self, v: Self::T) -> nat

{
    match v {
        Sum::Inl(va) => self.0.byte_len(va),
        Sum::Inr(vb) => self.1.byte_len(vb),
    }
}
Source§

type T = Sum<<A as SpecByteLen>::T, <B as SpecByteLen>::T>

The type of values whose byte length is being computed.
Source§

impl<A: SpecParser, B: SpecParser> SpecParser for Choice<A, B>

Source§

open spec fn spec_parse(&self, ibuf: Seq<u8>) -> Option<(int, Self::PVal)>

{
    match self.0.spec_parse(ibuf) {
        Some((n, va)) => Some((n, Sum::Inl(va))),
        None => {
            match self.1.spec_parse(ibuf) {
                Some((n, vb)) => Some((n, Sum::Inr(vb))),
                None => None,
            }
        }
    }
}
Source§

type PVal = Sum<<A as SpecParser>::PVal, <B as SpecParser>::PVal>

The type of parsed values.
Source§

impl<A, B> SpecSerializer for Choice<A, B>

Source§

open spec fn spec_serialize(&self, v: Self::SVal) -> Seq<u8>

{
    match v {
        Sum::Inl(va) => self.0.spec_serialize(va),
        Sum::Inr(vb) => self.1.spec_serialize(vb),
    }
}
Source§

type SVal = Sum<<A as SpecSerializer>::SVal, <B as SpecSerializer>::SVal>

The type of values to be serialized.
Source§

impl<A, B> SpecSerializerDps for Choice<A, B>

Source§

open spec fn spec_serialize_dps(&self, v: Self::SValue, obuf: Seq<u8>) -> Seq<u8>

{
    match v {
        Sum::Inl(va) => self.0.spec_serialize_dps(va, obuf),
        Sum::Inr(vb) => self.1.spec_serialize_dps(vb, obuf),
    }
}
Source§

type SValue = Sum<<A as SpecSerializerDps>::SValue, <B as SpecSerializerDps>::SValue>

The type of values to be serialized.
Source§

impl<A: ValueByteLen, B: ValueByteLen> ValueByteLen for Choice<A, B>

Source§

open spec fn value_byte_len(v: Self::T) -> nat

{
    match v {
        Sum::Inl(va) => A::value_byte_len(va),
        Sum::Inr(vb) => B::value_byte_len(vb),
    }
}
Source§

proof fn lemma_value_len_matches_byte_len(&self, v: Self::T)

Source§

impl<A: Copy, B: Copy> Copy for Choice<A, B>

Auto Trait Implementations§

§

impl<A, B> Freeze for Choice<A, B>
where A: Freeze, B: Freeze,

§

impl<A, B> RefUnwindSafe for Choice<A, B>

§

impl<A, B> Send for Choice<A, B>
where A: Send, B: Send,

§

impl<A, B> Sync for Choice<A, B>
where A: Sync, B: Sync,

§

impl<A, B> Unpin for Choice<A, B>
where A: Unpin, B: Unpin,

§

impl<A, B> UnsafeUnpin for Choice<A, B>
where A: UnsafeUnpin, B: UnsafeUnpin,

§

impl<A, B> UnwindSafe for Choice<A, B>
where A: UnwindSafe, B: UnwindSafe,

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> VERUS_SPEC__A

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> T

§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> U

Source§

impl<C> NonAmbiguous for C
where C: SPRoundTrip,

Source§

open spec fn nonamb_inv(&self) -> bool

{ self.sp_roundtrip_inv() }
Source§

proof fn lemma_serialize_injective( &self, v1: <C as Consistency>::Val, v2: <C as Consistency>::Val, )

Source§

fn corollary_serialize_injective_contrapositive( &self, v1: Self::Val, v2: Self::Val, )

Source§

impl<C> PSRoundTrip for C

Source§

open spec fn ps_roundtrip_inv(&self) -> bool

{ self.safe_inv() && self.sound_inv() && self.nonmal_inv() && self.sp_roundtrip_inv() }
Source§

proof fn theorem_parse_serialize_roundtrip(&self, ibuf: Seq<u8>)

Source§

fn corollary_parse_non_malleable(&self, buf1: Seq<u8>, buf2: Seq<u8>)

Source§

impl<C> SPRoundTrip for C

Source§

open spec fn sp_roundtrip_inv(&self) -> bool

{ self.serialize_inv() && self.equiv_inv() && self.unambiguous() }
Source§

proof fn theorem_serialize_parse_roundtrip(&self, v: <C as SpecByteLen>::T)

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

§

fn obeys_try_from_spec() -> bool

§

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>

§

impl<A> SpecEq<&A> for A
where A: ?Sized,

§

impl<A> SpecEq<&mut A> for A
where A: ?Sized,

§

impl<A> SpecEq<A> for A
where A: ?Sized,

§

impl<A> SpecEq<Ghost<A>> for A

§

impl<A> SpecEq<Tracked<A>> for A

Source§

impl<Body> StrictCombinator for Body