Expand description
Architecture selection and shared memory specifications.
§Verified Properties
CurrentArch selects the target’s implementation of the contracts in model.
The erased valid_frame_paddr predicate requires base-page alignment and an
address below that implementation’s modeled physical-memory bound. Shared
constants are re-exported from the executable architecture and memory modules.
The model’s conversion lemmas establish bounds, round trips, and alignment
within the linear mapping window. Page-table proofs that call
crate::mm::PagingConstsTrait::axiom_current_paging_consts_hardcoded still
trust the current layout; that restriction is not enforced for other configurations.
Re-exports§
pub use crate::mm::MAX_NR_PAGES;pub use crate::mm::MAX_PADDR;pub use model::*;
Modules§
- model
- Architecture contracts for modeled frames and linear address mappings.
Structs§
- X86Arch
- The x86 instance of the architecture-wide specification contract.
Constants§
- NR_
ENTRIES - Number of entries in an x86-64 page-table node.
- NR_
LEVELS - Number of translation levels used by the current x86-64 configuration.
- PAGE_
SIZE - Size of a base page on x86-64.
Functions§
- lemma_
linear_ mapping_ base_ vaddr_ properties - lemma_
max_ paddr_ range - lemma_
meta_ frame_ vaddr_ properties - lemma_
paddr_ to_ vaddr_ properties - lemma_
vaddr_ to_ paddr_ properties - vaddr_
to_ paddr - valid_
frame_ paddr
Type Aliases§
- Current
Arch - The architecture selected by the current verification target.