Checking Liveness on Windows

20 views
Skip to first unread message

Amirhossein Sayyadabdi

unread,
Feb 28, 2020, 11:43:48 AM2/28/20
to tla...@googlegroups.com
Hi everyone,

I am using toolbox version 1.6.0 of 10 July on Windows 10 1909.

I have defined my spec to be like this:
MySpec ==
/\ SpecInit
/\ [][SpecNext]_vars
/\ SpecLiveness

The problem is that the model checker does not check liveness at all, unless I remove /\ SpecLiveness from the spec definition above!!!

Why is this happening? Please help me.


Amirhossein

Stephan Merz

unread,
Feb 28, 2020, 11:51:00 AM2/28/20
to tla...@googlegroups.com
Just a wild guess: did you indicate `MySpec' (instead of the default `Spec') as the specification of your system in the TLC pane of the Toolbox?

Stephan

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/CAKxfy0sttw3%3DZvLT2LU4n%3Ddi8zSW633Cs6wvtHk39EhjAqFsGw%40mail.gmail.com.

Amirhossein Sayyadabdi

unread,
Feb 28, 2020, 12:15:39 PM2/28/20
to tla...@googlegroups.com
True exactly, I have set the comobox to "Temporal formula" and I have indicated MySpec.

Amirhossein


To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/8CA751DE-FFA6-4FE9-843D-75D53C28EBA6%40gmail.com.

Hillel Wayne

unread,
Feb 28, 2020, 12:18:57 PM2/28/20
to tla...@googlegroups.com

In that case checking liveness is equivalent to checking the statement

SpecInit /\ [][SpecNext]_vars /\ SpecLiveness => SpecLiveness

Which is vacuously true. What you want is to check SpecInit /\ [][SpecNext]_vars as a your temporal formula and then make SpecLiveness a temporal property in the IDE.

H

Amirhossein Sayyadabdi

unread,
Feb 28, 2020, 12:20:40 PM2/28/20
to tla...@googlegroups.com
Thank you so much for your help.

Amirhossein


Shiyao MA

unread,
Feb 28, 2020, 9:06:12 PM2/28/20
to tlaplus
Hi Hillel,

Is it safe to say, by adding the Temporal inside:

Spec == Init /\ [][Next]_vars /\ Temporal

The behaviors satisfying Spec must conform to the Temporal formula.


In contrast, if we taking out the Temporal from the Spec and write in the following form:
Spec == Init /\ [][Next]_vars

and in some cfg
PROPERTY Temporal


Then those behaviors satisfying Spec will be considered valid behaviors of the Spec, but some of them will be err-ed by the TLC model checker due to violation of the Temporal formula.



On Saturday, 29 February 2020 01:18:57 UTC+8, Hillel Wayne wrote:

In that case checking liveness is equivalent to checking the statement

SpecInit /\ [][SpecNext]_vars /\ SpecLiveness => SpecLiveness

Which is vacuously true. What you want is to check SpecInit /\ [][SpecNext]_vars as a your temporal formula and then make SpecLiveness a temporal property in the IDE.

H

On 2/28/2020 11:15 AM, Amirhossein Sayyadabdi wrote:
True exactly, I have set the comobox to "Temporal formula" and I have indicated MySpec.

Amirhossein


On Fri, Feb 28, 2020 at 8:20 PM Stephan Merz <steph...@gmail.com> wrote:
Just a wild guess: did you indicate `MySpec' (instead of the default `Spec') as the specification of your system in the TLC pane of the Toolbox?

Stephan

On 28 Feb 2020, at 17:43, Amirhossein Sayyadabdi <amir.a...@gmail.com> wrote:

Hi everyone,

I am using toolbox version 1.6.0 of 10 July on Windows 10 1909.

I have defined my spec to be like this:
MySpec ==
/\ SpecInit
/\ [][SpecNext]_vars
/\ SpecLiveness

The problem is that the model checker does not check liveness at all, unless I remove /\ SpecLiveness from the spec definition above!!!

Why is this happening? Please help me.


Amirhossein

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tla...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tla...@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tla...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages