Skip to main content

Terminated

Struct Terminated 

Source
pub struct Terminated<A, B, BVal, const CHECK: bool = false> {
    pub a: A,
    pub b: B,
    pub b_val: BVal,
}
Expand description

Parsing semantics: like (A, B), but discards the value parsed by B and returns only the value parsed by A.

Serialization semantics: serializes A and then reuses b_val as the serialized witness for B.

When CHECK is false, parsing is malleable in the discarded suffix unless B admits a unique consistent value. When CHECK is true, parsing additionally checks that the parsed suffix equals b_val.

Fields§

§a: A§b: B§b_val: BVal

Trait Implementations§

Source§

impl<A, B, BVal, T, const CHECK: bool> ByteLen<T> for Terminated<A, B, BVal, CHECK>
where T: DeepView, BVal: DeepView<V = BVal>, A: ByteLen<T>, B: ByteLen<BVal>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.a.exec_inv()
    &&& self.b.exec_inv()
    &&& forall |v: BVal| v.deep_view() == v

}
Source§

exec fn length(&self, v: &T) -> len : usize

Source§

impl<A: Clone, B: Clone, BVal: Clone, const CHECK: bool> Clone for Terminated<A, B, BVal, CHECK>

Source§

exec fn clone(&self) -> cloned : Self

ensures
call_ensures(A::clone, (&self.a,), cloned.a),
call_ensures(B::clone, (&self.b,), cloned.b),
call_ensures(BVal::clone, (&self.b_val,), cloned.b_val),
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl<A, B, const CHECK: bool> Consistency for Terminated<A, B, B::Val, CHECK>
where A: Consistency, B: Consistency,

Source§

open spec fn consistent(&self, v: Self::Val) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.consistent(v)
}
Source§

type Val = <A as Consistency>::Val

The type of values whose consistency is being checked.
Source§

impl<A, B, const CHECK: bool> EquivSerializers for Terminated<A, B, B::SValue, CHECK>

Source§

open spec fn equiv_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.equiv_inv()
}
Source§

proof fn lemma_serialize_equiv_on_empty(&self, v: Self::SVal)

Source§

impl<A, B, const CHECK: bool> EquivSerializersGeneral for Terminated<A, B, B::SValue, CHECK>

Source§

open spec fn equiv_general_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.equiv_general_inv()
}
Source§

proof fn lemma_serialize_equiv(&self, v: Self::SVal, obuf: Seq<u8>)

Source§

impl<A, B, const CHECK: bool> GoodSerializer for Terminated<A, B, B::SVal, CHECK>

Source§

open spec fn serialize_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.serialize_inv()
}
Source§

proof fn lemma_serialize_len(&self, v: Self::SVal)

Source§

impl<A, B, const CHECK: bool> MinMaxByteLen for Terminated<A, B, B::T, CHECK>

Source§

open spec fn min(&self) -> nat

{ terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val).min() }
Source§

open spec fn max(&self) -> nat

{ terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val).max() }
Source§

proof fn lemma_min_max_byte_len(&self, v: Self::T)

Source§

impl<A, B, const CHECK: bool> NoLookAhead for Terminated<A, B, B::PVal, CHECK>
where A: NoLookAhead, B: NoLookAhead,

Source§

open spec fn no_lookahead_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.no_lookahead_inv()
}
Source§

proof fn lemma_no_lookahead(&self, i1: Seq<u8>, i2: Seq<u8>)

Source§

fn corollary_non_extensible(&self, i1: Seq<u8>, i2: Seq<u8>)

Source§

impl<A, B> NonMalleable for Terminated<A, B, B::PVal, false>

Source§

open spec fn nonmal_inv(&self) -> bool

{
    &&& Pair(self.a, self.b).sound_inv()
    &&& Pair(self.a, self.b).nonmal_inv()

}
Source§

proof fn lemma_parse_non_malleable(&self, buf1: Seq<u8>, buf2: Seq<u8>)

Source§

impl<A, B> NonMalleable for Terminated<A, B, B::PVal, true>

Source§

open spec fn nonmal_inv(&self) -> bool

{
    &&& Pair(self.a, self.b).sound_inv()
    &&& Pair(self.a, self.b).nonmal_inv()

}
Source§

proof fn lemma_parse_non_malleable(&self, buf1: Seq<u8>, buf2: Seq<u8>)

Source§

impl<A, B, const CHECK: bool> NonTailFmt for Terminated<A, B, B::SValue, CHECK>
where A: NonTailFmt, B: NonTailFmt,

Source§

open spec fn serialize_dps_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.serialize_dps_inv()
}
Source§

proof fn lemma_serialize_dps_prepend(&self, v: Self::SValue, obuf: Seq<u8>)

Source§

proof fn lemma_serialize_dps_len(&self, v: Self::SValue, obuf: Seq<u8>)

Source§

impl<I, A, B, BVal> Parser<I> for Terminated<A, B, BVal, false>
where I: InputBuf, A: Parser<I> + SafeParser, B: Parser<I, PT = BVal> + SafeParser<PVal = BVal>, BVal: DeepView<V = BVal>,

Source§

open spec fn exec_inv(&self) -> bool

{ Pair(&self.a, &self.b).exec_inv() }
Source§

exec fn parse(&self, ibuf: &I) -> PResult<Self::PT>

Source§

type PT = <A as Parser<I>>::PT

Executable value returned by this parser.
Source§

impl<I, A, B, BVal> Parser<I> for Terminated<A, B, BVal, true>
where I: InputBuf, A: Parser<I> + SafeParser, B: Parser<I, PT = BVal> + SafeParser<PVal = BVal>, BVal: DeepView<V = BVal> + PartialEq + Structural,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& Pair(&self.a, &self.b).exec_inv()
    &&& forall |v: BVal| v.deep_view() == v

}
Source§

exec fn parse(&self, ibuf: &I) -> PResult<Self::PT>

Source§

type PT = <A as Parser<I>>::PT

Executable value returned by this parser.
Source§

impl<A, B, BVal, T, const CHECK: bool> Prepare<T> for Terminated<A, B, BVal, CHECK>
where T: DeepView, BVal: DeepView<V = BVal>, A: Prepare<T>, B: Prepare<BVal>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.a.exec_inv()
    &&& self.b.exec_inv()
    &&& forall |v: BVal| v.deep_view() == v

}
Source§

exec fn prepare(&self, v: &T) -> checked : Result<usize, PreSerializeError>

Source§

impl<A, B> Productive for Terminated<A, B, B::PVal, false>
where A: Productive, B: Productive,

Source§

open spec fn productive_inv(&self) -> bool

{ terminated::<_, _, _, _, false>(self.a, self.b, self.b_val).productive_inv() }
Source§

proof fn lemma_productive(&self, s: Seq<u8>)

Source§

impl<A, B> Productive for Terminated<A, B, B::PVal, true>
where A: Productive, B: Productive,

Source§

open spec fn productive_inv(&self) -> bool

{ terminated::<_, _, _, _, true>(self.a, self.b, self.b_val).productive_inv() }
Source§

proof fn lemma_productive(&self, s: Seq<u8>)

Source§

impl<A, B, const CHECK: bool> SPRoundTripDps for Terminated<A, B, B::SValue, CHECK>

Source§

open spec fn unambiguous(&self) -> bool

{ Pair(self.a, self.b).unambiguous() }
Source§

proof fn theorem_serialize_dps_parse_roundtrip(&self, v: Self::T, obuf: Seq<u8>)

Source§

impl<A, B, const CHECK: bool> SafeParser for Terminated<A, B, B::PVal, CHECK>
where A: SafeParser, B: SafeParser,

Source§

open spec fn safe_inv(&self) -> bool

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.safe_inv()
}
Source§

proof fn lemma_parse_safe(&self, ibuf: Seq<u8>)

Source§

impl<Output: OutputBuf, A, B, BVal, T, const CHECK: bool> Serializer<Output, T> for Terminated<A, B, BVal, CHECK>
where T: DeepView, BVal: DeepView<V = BVal>, A: Serializer<Output, T>, B: Serializer<Output, BVal>,

Source§

open spec fn exec_inv(&self) -> bool

{
    &&& self.a.exec_inv()
    &&& self.b.exec_inv()
    &&& forall |v: BVal| v.deep_view() == v

}
Source§

exec fn serialize_into(&self, v: &T, obuf: &mut Output)

Source§

impl<A, B> SoundParser for Terminated<A, B, B::PVal, false>

Source§

open spec fn sound_inv(&self) -> bool

{
    &&& Pair(self.a, self.b).sound_inv()
    &&& self.b.consistent(self.b_val)

}
Source§

proof fn lemma_parse_sound_consumption(&self, ibuf: Seq<u8>)

Source§

proof fn lemma_parse_sound_value(&self, ibuf: Seq<u8>)

Source§

impl<A, B> SoundParser for Terminated<A, B, B::PVal, true>
where A: SoundParser, B: SoundParser,

Source§

open spec fn sound_inv(&self) -> bool

{ Pair(self.a, self.b).sound_inv() }
Source§

proof fn lemma_parse_sound_consumption(&self, ibuf: Seq<u8>)

Source§

proof fn lemma_parse_sound_value(&self, ibuf: Seq<u8>)

Source§

impl<A, B, const CHECK: bool> SpecByteLen for Terminated<A, B, B::T, CHECK>
where A: SpecByteLen, B: SpecByteLen,

Source§

open spec fn byte_len(&self, v: Self::T) -> nat

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.byte_len(v)
}
Source§

type T = <A as SpecByteLen>::T

The type of values whose byte length is being computed.
Source§

impl<A, B, const CHECK: bool> SpecParser for Terminated<A, B, B::PVal, CHECK>
where A: SpecParser, B: SpecParser,

Source§

open spec fn spec_parse(&self, ibuf: Seq<u8>) -> Option<(int, Self::PVal)>

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.spec_parse(ibuf)
}
Source§

type PVal = <A as SpecParser>::PVal

The type of parsed values.
Source§

impl<A, B, const CHECK: bool> SpecSerializer for Terminated<A, B, B::SVal, CHECK>

Source§

open spec fn spec_serialize(&self, v: Self::SVal) -> Seq<u8>

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.spec_serialize(v)
}
Source§

type SVal = <A as SpecSerializer>::SVal

The type of values to be serialized.
Source§

impl<A, B, const CHECK: bool> SpecSerializerDps for Terminated<A, B, B::SValue, CHECK>

Source§

open spec fn spec_serialize_dps(&self, v: Self::SValue, obuf: Seq<u8>) -> Seq<u8>

{
    let fmt = terminated::<_, _, _, _, CHECK>(self.a, self.b, self.b_val);
    fmt.spec_serialize_dps(v, obuf)
}
Source§

type SValue = <A as SpecSerializerDps>::SValue

The type of values to be serialized.
Source§

impl<A, B, const CHECK: bool> StaticByteLen for Terminated<A, B, B::T, CHECK>

Source§

open spec fn static_byte_len() -> nat

{ <Pair<A, B> as StaticByteLen>::static_byte_len() }
Source§

proof fn lemma_static_len_matches_byte_len(&self, v: Self::T)

Source§

impl<A, B, const CHECK: bool> ValueByteLen for Terminated<A, B, B::T, CHECK>

Source§

open spec fn value_byte_len(v: Self::T) -> nat

{ A::value_byte_len(v) + B::static_byte_len() }
Source§

proof fn lemma_value_len_matches_byte_len(&self, v: Self::T)

Source§

impl<A: Copy, B: Copy, BVal: Copy, const CHECK: bool> Copy for Terminated<A, B, BVal, CHECK>

Auto Trait Implementations§

§

impl<A, B, BVal, const CHECK: bool> Freeze for Terminated<A, B, BVal, CHECK>
where A: Freeze, B: Freeze, BVal: Freeze,

§

impl<A, B, BVal, const CHECK: bool> RefUnwindSafe for Terminated<A, B, BVal, CHECK>

§

impl<A, B, BVal, const CHECK: bool> Send for Terminated<A, B, BVal, CHECK>
where A: Send, B: Send, BVal: Send,

§

impl<A, B, BVal, const CHECK: bool> Sync for Terminated<A, B, BVal, CHECK>
where A: Sync, B: Sync, BVal: Sync,

§

impl<A, B, BVal, const CHECK: bool> Unpin for Terminated<A, B, BVal, CHECK>
where A: Unpin, B: Unpin, BVal: Unpin,

§

impl<A, B, BVal, const CHECK: bool> UnsafeUnpin for Terminated<A, B, BVal, CHECK>
where A: UnsafeUnpin, B: UnsafeUnpin, BVal: UnsafeUnpin,

§

impl<A, B, BVal, const CHECK: bool> UnwindSafe for Terminated<A, B, BVal, CHECK>
where A: UnwindSafe, B: UnwindSafe, BVal: UnwindSafe,

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> VERUS_SPEC__A

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> T

§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> U

Source§

impl<C> NonAmbiguous for C
where C: SPRoundTrip,

Source§

open spec fn nonamb_inv(&self) -> bool

{ self.sp_roundtrip_inv() }
Source§

proof fn lemma_serialize_injective( &self, v1: <C as Consistency>::Val, v2: <C as Consistency>::Val, )

Source§

fn corollary_serialize_injective_contrapositive( &self, v1: Self::Val, v2: Self::Val, )

Source§

impl<C> PSRoundTrip for C

Source§

open spec fn ps_roundtrip_inv(&self) -> bool

{ self.safe_inv() && self.sound_inv() && self.nonmal_inv() && self.sp_roundtrip_inv() }
Source§

proof fn theorem_parse_serialize_roundtrip(&self, ibuf: Seq<u8>)

Source§

fn corollary_parse_non_malleable(&self, buf1: Seq<u8>, buf2: Seq<u8>)

Source§

impl<C> SPRoundTrip for C

Source§

open spec fn sp_roundtrip_inv(&self) -> bool

{ self.serialize_inv() && self.equiv_inv() && self.unambiguous() }
Source§

proof fn theorem_serialize_parse_roundtrip(&self, v: <C as SpecByteLen>::T)

Source§

impl<T, S> SerializerExt<T> for S
where S: SpecByteLen<T = <T as DeepView>::V> + SpecSerializer<SVal = <T as DeepView>::V> + Consistency<Val = <T as DeepView>::V>, T: DeepView + ?Sized,

Source§

fn serialize<'a>(&self, v: &T, obuf: &'a mut [u8])
where Self: Serializer<OutputSlice<'a>, T>,

Source§

fn serialize_with_vec(&self, v: &T, obuf: &mut Vec<u8>)
where Self: Serializer<Vec<u8>, T>,

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

§

fn obeys_try_from_spec() -> bool

§

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>

Source§

impl<T> SpecCombinator for T
where T: SpecParser<PVal = <T as SpecByteLen>::T> + SpecByteLen + SpecSerializer<SVal = <T as SpecByteLen>::T> + Consistency<Val = <T as SpecByteLen>::T> + SpecSerializerDps<SValue = <T as SpecByteLen>::T>,

§

impl<A> SpecEq<&A> for A
where A: ?Sized,

§

impl<A> SpecEq<&mut A> for A
where A: ?Sized,

§

impl<A> SpecEq<A> for A
where A: ?Sized,

§

impl<A> SpecEq<Ghost<A>> for A

§

impl<A> SpecEq<Tracked<A>> for A

Source§

impl<Body> StrictCombinator for Body