Skip to content
Snippets Groups Projects
SimpleFormulaChecker.hs 10.7 KiB
Newer Older
  • Learn to ignore specific revisions
  • module Javawlp.SimpleFormulaChecker where
    
    import Language.Java.Syntax
    import Language.Java.Parser
    import Language.Java.Pretty
    
    import Z3.Monad
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    import Z3.Opts
    
    
    import Javawlp.Engine.Types
    import Javawlp.Engine.HelperFunctions
    import Javawlp.Engine.Verifier
    
    
    import LogicIR.Expr
    import LogicIR.Frontend.Java
    import LogicIR.Backend.Z3
    
    import LogicIR.Backend.Pretty
    
    import LogicIR.Backend.Null
    
    import ModelParser.Model
    
    import Control.Monad.Trans (liftIO)
    
    import Data.Maybe
    import Data.List
    
    import Debug.Trace
    
    import Data.Int
    import qualified Data.Map as M
    
    -- See README.md for a high-level description of this project.
    
    type MethodDef = ([TypeDecl], Stmt, TypeEnv)
    
    -- Takes a java source file and a method name and returns the class declarations,
    -- the method body and the method's formal parameters.
    parseMethod :: (FilePath, String) -> IO MethodDef
    parseMethod (src, name) = do
        -- parse the Java source file:
        compilationnUnit <- parseJava src
        -- get all the class declarations in the Java source file; usually a single file defines only
        -- one class, but it could theoretically have more:
        let decls = getDecls compilationnUnit
        -- get the method's body ; to make it simple, the method's name is assumed to uniquely identify its body
        let mbody = fromJust $ getMethod decls (Ident name)
        -- get the method's formal parameters:
        let env = getMethodTypeEnv decls (Ident name)
        -- return the relevant data
        return (decls, mbody, env)
        where
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
        -- parse a Java source file, and extracts the necessary information from the compilation unit
    
        parseJava :: FilePath -> IO CompilationUnit
        parseJava s = do
            -- Get the source code
            source <- readFile s
            -- Parse the source code
            case parser compilationUnit source of
                Left parseError -> error (show parseError)
                Right compUnit  -> return compUnit
    
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    -- Get a list of all calls to a method of a specific name from a method definition.
    
    getMethodCalls :: MethodDef -> String -> [MethodInvocation]
    getMethodCalls (_, StmtBlock (Block bs), _) name = catMaybes (map extractMethodInv bs)
        where
            extractMethodInv :: BlockStmt -> Maybe MethodInvocation
            extractMethodInv (BlockStmt (ExpStmt (MethodInv i@(MethodCall (Name [Ident n]) _)))) = if n == name then Just i else Nothing
            extractMethodInv _ = Nothing
    
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    -- [pre(a), pre(b), pre(c)] -> (a AND b AND c)
    extractExpr :: [MethodInvocation] -> Exp
    extractExpr call = combineExprs $ map (\(MethodCall (Name [Ident _]) [a]) -> a) call
        where combineExprs :: [Exp] -> Exp
              combineExprs (e:[]) = e
              combineExprs (e:es) = BinOp e CAnd (combineExprs es)
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    -- Check if two Z3 AST's are equivalent
    
    isEquivalent :: Z3 AST -> Z3 AST -> IO (Result, Maybe Model)
    isEquivalent ast1' ast2' = evalZ3 z3
        where
        z3 = do
             ast1 <- ast1'
             ast2 <- ast2'
             astEq <- mkEq ast1 ast2
             astNeq <- mkNot astEq -- negate the question to get a model
             assert astNeq
             r <- solverCheckAndGetModel -- check in documentatie
             solverReset
             return r
    
    
    -- Function that shows a human-readable model and also highlights potential inconsistencies.
    
    showRelevantModel :: Z3Model -> IO ()
    
    showRelevantModel model = do
      putStrLn $ show $ M.toList modelClean
      mapM_ (putStrLn . prettyModelVal) $ fromKeys (consts ++ arrays)
      where modelMap = M.fromList model
            modelClean = M.filterWithKey (\k _ -> all (\e -> e /= '!') k) $ M.map modelCleanFunc modelMap
            fromKeys = map (\k -> let Just v = M.lookup k modelClean in (k, v))
            -- Pretty print the model value
            prettyModelVal :: (String, ModelVal) -> String
            prettyModelVal (k, BoolVal b) = k ++ " = " ++ if b then "true" else "false"
            prettyModelVal (k, IntVal n) = k ++ " = " ++ show n
    
            prettyModelVal (k, ArrayFunc a) = k ++ " = " ++ final ++ "       " ++ show (aNull, aLength, arrKv, validArr, elseVal)
                where (BoolVal aNull) = M.findWithDefault (BoolVal False) (k ++ "?null") modelClean
                      (IntVal aLength) = M.findWithDefault (IntVal (-1)) (k ++ "?length") modelClean
                      [InstElse elseVal] = filter (not . isInst) a
                      arrKv = sort (map (\(InstInt k v) -> (k, v)) (filter isInst a))
                      isInst (InstInt _ _) = True
                      isInst _ = False
                      validArr = isValidArray 0 arrKv
                      -- TODO: this does not appear to be correct yet
                      final = if aNull
                                 then if (aLength /= -1) || (length arrKv /= 0)
                                         then "1: INVALID"
                                         else "2: null"
                                 else if validArr
                                         then if length arrKv == aLength
                                                 then "3: " ++ show (map snd arrKv)
                                                 else "4: INVALID"
                                         else if aLength /= -1
                                                 then "5: " ++ show (take aLength (repeat elseVal))
                                                 else "6: INVALID"
    
                      isValidArray :: Int -> [(Int, Int)] -> Bool
                      isValidArray n [] = False
                      isValidArray n ((i, _) : xs) = if n == i
                                                        then isValidArray (n + 1) xs
                                                        else False
            prettyModelVal (k, v) = error $ k ++ " = UNIMPLEMENTED " ++ show v
    
            -- Remove all occurrences of ArrayRef and ArrayAsConst for easier processing later, also does type casting
            modelCleanFunc :: ModelVal -> ModelVal
            modelCleanFunc (BoolVal b) = BoolVal b
            modelCleanFunc (IntVal n) = IntVal (cropInt32 n)
            modelCleanFunc (ArrayRef s) = let Just v = M.lookup s modelMap in v
            modelCleanFunc (ArrayAsConst n) = ArrayFunc [InstElse (cropInt32 n)]
            modelCleanFunc (ArrayFunc v) = ArrayFunc (map funcInstClean v)
            funcInstClean :: FuncInst -> FuncInst
            funcInstClean (InstInt k v) = InstInt (cropInt32 k) (cropInt32 v)
            funcInstClean (InstElse v) = InstElse (cropInt32 v)
            -- Crop an Integer to an Int32
            cropInt32 :: Int -> Int
            cropInt32 n = fromIntegral (fromIntegral n :: Int32) :: Int
            -- Names of the array variables
            arrays :: [String]
            arrays = nub $ M.keys (M.filter isArray modelClean) ++ catMaybes (map arrayName (M.keys modelClean))
            -- Names of the constant variables
            consts :: [String]
            consts = filter (\v -> not (isSuffixOf "?length" v || isSuffixOf "?null" v)) $ M.keys (M.filter isConst modelClean)
            -- Returns Just "a" for "a?length" and "a?null"
            arrayName :: String -> Maybe String
            arrayName s
                | isSuffixOf "?length" s = Just $ take (length s - 7) s
                | isSuffixOf "?null" s = Just $ take (length s - 5) s
                | otherwise = Nothing
            -- Whether a ModelVal is an array
            isArray :: ModelVal -> Bool
            isArray (ArrayFunc _) = True
            isArray _ = False
            -- Whether a ModelVal is a constant
            isConst :: ModelVal -> Bool
            isConst v = case v of
                             BoolVal _ -> True
                             IntVal _ -> True
                             _ -> False
    
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    -- Determine the equality of two method's pre/post conditions.
    
    determineFormulaEq :: MethodDef -> MethodDef -> String -> IO ()
    determineFormulaEq m1@(decls1, mbody1, env1) m2@(decls2, mbody2, env2) name = do
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
        -- get pre/post condition
    
        let (e1, e2) = (extractCond m1 name, extractCond m2 name)
    
        let (lexpr1', lexpr2') = (javaExpToLExpr e1 env1 decls1, javaExpToLExpr e2 env2 decls2)
        -- preprocess "a == null" to "isNull(a)"
        let (lexpr1, lexpr2) = (lExprPreprocessNull lexpr1', lExprPreprocessNull lexpr2')
    
        let (ast1, ast2) = (lExprToZ3Ast lexpr1, lExprToZ3Ast lexpr2)
    
        putStrLn $ "e1:\n" ++ prettyPrint e1 ++ "\n\ne2:\n" ++ prettyPrint e2 ++ "\n"
    
        putStrLn $ "LogicIR.Expr 1:\n" ++ show lexpr1 ++ "\n\nLogicIR.Expr 2:\n" ++ show lexpr2 ++ "\n"
        putStrLn $ "LogicIR.Pretty 1:\n" ++ prettyLExpr lexpr1 ++ "\n\nLogicIR.Pretty 2:\n" ++ prettyLExpr lexpr2 ++ "\n"
        ast1s <- showZ3AST ast1
        putStrLn $ "Z3 AST 1:\n" ++ ast1s ++ "\n"
        ast2s <- showZ3AST ast2
        putStrLn $ "Z3 AST 2:\n" ++ ast2s ++ "\n"
        putStrLn "Z3 Result:"
    
        -- Check if the formula is satisfiable. If it is, print the instantiation of its free
        -- variables that would make it true:
    
        (result, model) <- isEquivalent ast1 ast2
    
        case result of
    
           Unsat -> putStrLn "formulas are equivalent!"
    
           Undef -> putStrLn "unable to decide the satisfiablity (TODO: use QuickCheck)"
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
           Sat   -> do
    
                    putStrLn "formulas are NOT equivalent, model:"
    
                    case model of
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
                      Just m -> do s <- evalZ3 (modelToString m)
    
                                   putStrLn $ "Raw model:\n" ++ s
                                   showRelevantModel $ parseModel s
    
                      _      -> return ()
    
        where
            extractCond :: MethodDef -> String -> Exp
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
            extractCond m n = extractExpr (getMethodCalls m n)
            showZ3AST :: Z3 AST -> IO String
            showZ3AST ast' = evalZ3 $ ast' >>= astToString
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    -- Function that compares both the pre and the post condition for two methods.
    -- It is assumed that both methods have the same environment (parameter names, class member names, etc).
    
    compareSpec :: (FilePath, String) -> (FilePath, String) -> IO ()
    
    compareSpec method1@(_, name1) method2@(_, name2) = do
    
        -- load the methods
        m1@(decls1, mbody1, env1) <- parseMethod method1
        m2@(decls2, mbody2, env2) <- parseMethod method2
        if env1 /= env2 then fail "inconsistent method parameters" else return ()
        if decls1 /= decls2 then fail "inconsistent class declarations (TODO)" else return ()
    
        putStrLn $ "----PRE---- (" ++ name1 ++ " vs " ++ name2 ++ ")"
    
        determineFormulaEq m1 m2 "pre"
        putStrLn "\n----POST---"
        determineFormulaEq m1 m2 "post"
    
    -- Examples, call these from GHCi to see the output.
    
    edslSrc = "javawlp_edsl/src/nl/uu/javawlp_edsl/Main.java"
    testEq = compareSpec (edslSrc, "swap_spec1") (edslSrc, "swap_spec1")
    
    testNeq = compareSpec (edslSrc, "swap_spec1") (edslSrc, "swap_spec2")
    
    blub = compareSpec (edslSrc, "getMax_spec1") (edslSrc, "getMax_spec2")
    
    blub2 = compareSpec (edslSrc, "test1") (edslSrc, "test2")
    
    blub2_ = compareSpec (edslSrc, "test1_") (edslSrc, "test2")
    
    Ogilvie, D.H. (Duncan)'s avatar
    Ogilvie, D.H. (Duncan) committed
    blob = compareSpec (edslSrc, "blob1") (edslSrc, "blob1")
    
    nullTest1 = compareSpec (edslSrc, "null1") (edslSrc, "null2")
    nullTest2 = compareSpec (edslSrc, "swap_spec1") (edslSrc, "swap_spec3")
    
    nullTest3 = compareSpec (edslSrc, "swap_spec1") (edslSrc, "swap_spec4")
    nullTest4 = compareSpec (edslSrc, "null3") (edslSrc, "test2")