A PCC Architecture based on Certified Abstract Interpretation

HAL Id: inria-00000866

https://hal.inria.fr/inria-00000866

Submitted on 28 Nov 2005

HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub-

L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non,

A PCC Architecture based on Certified Abstract Interpretation

Frédéric Besson, Thomas Jensen, David Pichardie

To cite this version:

Frédéric Besson, Thomas Jensen, David Pichardie. A PCC Architecture based on Certified Abstract Interpretation. [Research Report] PI 1764, 2005, pp.35. �inria-00000866�

I ^R

I ^S

A

I^N STIT^U

T ^D E R

E^C HERC^H

E EN IN^F OR^M

AT^IQ UEE^T

SY^ST ÈME^S

ALÉA^TO^IRES

P U B L I C A T I O N I N T E R N E

N^o 1764

A PCC ARCHITECTURE BASED ON CERTIFIED ABSTRACT INTERPRETATION

FRÉDÉRIC BESSON , THOMAS JENSEN , DAVID PICHARDIE

INSTITUT DERECHERCHE EN INFORMATIQUE ETSYSTÈMESALÉATOIRES

Campus de Beaulieu – 35042 Rennes Cedex – France Tél. : (33) 02 99 84 71 00 – Fax : (33) 02 99 84 71 71 http://www.irisa.fr

!#"$%&'

( ) *+,#

-/.103203.146587:93;<;1=?>A@CB/DFE=?GIHJ;LKJ93>;<93>A@J@BNM&HPO!4Q2SR465TE/HJ.<24Q9U@?@?@

VPWYX[Z]\_^a`<XXbWP^)cJdfehghi3jU`

kNl dnm[`_Zpo!qnrtsY`

k jUcuevgxw_qnZbghdfr&gvr3Z]` l rU`,rzy|{n}n~)€‚dTƒ„`_^)c l `,…n†f†3‡,‰ˆ„‡,Šuqf‹f`1X

ŒLŽ<_T‘U’ff“ kNl dPdn” •+q lbl WPgvru‹•AdYsY`–k •• —˜ghX™qLZb`<wšurUghi3jU`›”œd l sYdTrUehd„q„sYghrU‹L^adfcugveh`›w_dPsU`›d„r

q›šUd3X[Z^FqfwšUghrU`™šUghev`,`_rtXžj

l

ghrU‹Z]šuqTZ Zbšu`w#dYsY`,qfsYšU`

l

`1XAZbd›ZbšU`,šUd3X[Z1ŸXXb`<w_j

l

gvZ[WaŠtd„evgxw#W„ /¡¢`£XbšUdT

šudT¤w#`

l

Zbgv¥u`1s¦qnctX[Z

l

q„w§Z)ghr3Zb`

l Š l

`#ZqTZbghdfrIw_qnrIct`juXb`<s¨Zbd8cujUgvexs©q

k

••¤q

l

wšUgªZ]`<w#Zbj

l

`«šU`

l

`ZbšU`

w_dYsY`aŠ l dYsYjtw#` l w_qfr¢Š l dYsYjuw_`aŠ l d„‹ l qn^¬w#` lZ]gª¥tw<qTZ]`<X,qnjYZ]df^FqTZ]ghw<qnehevW„ a•AdYsY`Fw#d„ruXbjU^a` l X˜jtXž`aŠ l dPdn”

wšu`<w­f` l X›sY` l ghƒf`<s®”l d„^¯w#` l Zbgv¥u`1s¨qnruqfevWYXb` l X£Z]d°wšU`1w­¨w#` lZ]gª¥tw<qTZ]`<X<  kl dPdn”™wšU`<w­„` l X)w_q lbl W¢ZbšU`<gl

dTrIw#d l]l `<w§Z]rU`<X]XŠ l dPdn”±X:qnrts¦qfw<w#`<ŠYZbghrU‹¢q¢rU`<¤Š l d3df”pwšU`<w­„` l qn^adfjUr3ZXZ]d8Z[WPŠJ`wšU`1w­PgvrU‹8ZbšU`

wšu`<w­f` l ghr&•AdYiJ ² šu`˜wšU`1w­3ghrU‹df”w#` l Z]gª¥Jw_qTZ]`<XghX qfw<w#`<ev` l qnZb`<s:cPW«q£Z]`<wšUrughi3jU`p”œd l –œŠJd„XžZž³[—´¥UµYŠJdfghr„Z

w_df^aŠ l `<X]Xžghdfr! ² šU` k ••q l wšUgªZ]`<w#Zbj l `¶šuq„XLcJ`_`<r·`_ƒTqnehjuqnZb`<s·`#µYŠt` l gh^a`_r3Z]qfevehW¸dfr·q¦c3W3Z]`¢w#dYsY`

exqnru‹fjuqf‹f` ”œd l šUgxwš«+`pšuq|ƒ„`psY`<Xbgh‹frU`1s«qnr«ghr3Zb` lƒTqne?qnrtqnehWPXbgxXZbšuqnZ qfevehdT‚X/Z]d)‹„`_rU` l qnZb`pw_` l Zbgv¥tw_qnZb`<X

q„Xbw_` l Z]qfgvrUghrU‹›ZbšuqnZrUd«q l]l q|W3³´dfjYZb³Qdf”¹³QcJdfjurusUXq„w_w_`<X]Xž`1XAghehe'dPw<w#j l  

º¼»3½?¾]¿)À TÁŽf“ kl dPdn”•+q l]l W3ghrU‹F•AdPsU`fÂuqfcuX[Zl q„w§Z gvr3Z]` l Š l`_Z]qnZbghdfrzÂYŠ l dPdn”qfX]XžgxX[Zqnr3Z<Âu•AdYi

ÃxÄ'ÅbÆ´Ç<È ÅÉÊhÆ´ËQÌ#Í

ÎϹбÑÓÒ´Ô#Õ]ϹÖ|бÑ×Ô

ÎØΠϹбÑÓÒ´Ô#Õ§Ù'ÚÛÜ

ÎØÎØΠϹбÑÓÒ´Ô#ÕÝtÚܙÙ'ÔÞ´ß|ÔÖ:àxá?бâØã´Ôä§Ö1â]å

A §"

Ž “ oz`! #"$%'& –k •• —`<XžZ)jUrU`FZ]`<wšUrughi3jU`«ŠJdfj l Z(<e)(1wšuq l ‹f` l sYj¨w#dYsY`

Xbj l jurU`£^FqfwšUghrU`£š+*fZb`,Zbd„jYZ‚`_r¶q„XbXbj l qnr3Zi„ju`)w#`w_dPsU`qfsYšU\ l`-,aexqaŠtd„evgxi3jU`sY`)X(<w_j l gªZ.(,sU`)w#`_ZžZb`

^Fq„wšUgvru`f €‚dfjtX^adfr3Z l d„ruXw_df^a^a`_r3ZAeQŸghr3Zb` l Š l (#ZqTZ]gvd„r«qncuXžZ l qngvZb`pw_` l Zbgv¥/(_`pŠt`<jYZ10_Z l `pjYZ]gvehgxX(<`pŠJdfj l

w_dfruXžZ l jUgl `›jUrU`Fq l wšUgvZb`1w§Zbj l ` k •• ŠJdfj l exqfi3jU`<eveh`:ehqŠ l dYsYjuw§Z]gvd„r¢sY`Fw_` l Zbgv¥tw_qnZ™`1X[ZqnjUZbdf^FqnZbgxi„ju`

ŠJdfj l eh`‚Š l dPsUjuw§Z]`_j l sU`pw#dYsY`„  k d„j l ƒ( l gv¥u` l ev`1Xw_` l Zbgv¥tw_qnZ]X<Âfeh`<Xw_dfruXbdf^a^FqTZ]`_j l X/sY`™w#dYsY`‚jYZ]gvehgxXž`<r„Z

eh`<Xƒ( l gv¥tw_qnZb`_j l X£sY`LŠ l `<jUƒf`1X,Š l dPsUjUgªZX2,¼Šuq l Z]gl szŸqfruqnehWYXž`<j l X£XžZ]qnZbgxi3jU`<Xw_` l Zbgv¥/(<X< &oz`<Xƒ( l gv¥tw_qn³

Z]`_j l XpsU`Š l `_jUƒ„`<XpXbdfr3Zp`<jYµP³Q^30<^:`1Xpq„w_w#d„^aŠuqn‹„r+(<XsY`)ev`<j l Š l `<jUƒf`sY`:w#d lbl `<w#Zbghdfr`#Z™q„w_w_`_ŠYZ]` l jur

rudfjUƒ„`<qnjƒ( l gv¥tw<qTZb`<j l Xb` l qf^:\<rU`2,aƒ( lgv¥u` l Xžd„rcJdfr&Z[WPŠuqf‹f`)•AdYit +o!qaƒ'( l gª¥tw<qTZ]gvd„rsY`›w#` lZbgv¥tw<qTZ]X

`1X[Z qfw<w4(_e5(

l

(_`Štq

l

jurU`‚Z]`<wšUrUgxi3jU`˜sU`˜w#d„^aŠ

l

`1XbXbghdfrFsY`›–±Štd3X[Zb³Ø—[Štd„gvr3ZXN¥UµY`1X_ /oNŸq l wšUgvZb`1w§Zbj

l ` k

••©q

(_Z(2(<ƒTqnehj+(_``_µYŠ6(

l

gh^a`_r3Z]qfev`<^:`<r3Z˜Xžj

l

jUr¶exqnru‹„qn‹„`2,6789:&<;<=%&›Štd„j

l

eh`<i3jU`<e!rUd„juXpq|ƒ„dfruXpw#dfr6>#j¼jUrU`

qfruqnehWYXž`s'Ÿghr„Z]`

l

ƒTqnehev`1XNi3jUgu‹'(_rU\

l

`‚sY`1Xw_`

l

Zbgv¥tw_qnZ]XNi3jU`pq„XbXbj

l

`_r3Z/e6ŸqnctXž`<ruw#`‚s'Ÿqfw<w#\1X/šUd

l

XNsY`1XNcJd

l

rU`<X

sU`<X+Z]qfcUeh`<qnjUµ? 

?À 1Ž:’'@ Ž“ kNl dPdn”/•+q lbl WPgvru‹F•AdYsY`„ÂYgvr3Zb` l Š l (_Z]qTZ]gvd„rqfcuXžZ l qngvZb`fÂYq„XbXbghXžZ]qfr3Z sY`£Š l`<jUƒf`„Ât•AdPi

( ›!F#

kl dPdn”N•+q l]l WPghrU‹a•AdYsY`a–k •• —+ghXq›Zb`1wšUrUgxi3jU`™”œd l sYdTrUehd„q„sYgvru‹›^adfcugveh`£w#dYsY`™dfr&q›šud„XžZ+^FqfwšugvrU`

šugveh`F`_ruXbj l gvru‹Z]šuqTZ)ZbšU`«w_dPsU`«qfsYšU` l `1X™Zbd&Z]šU`FšUd„XžZ<ŸXXb`<w_j l gvZ[W¶ŠJdfehghw_Wf L² šu`FcuqfXbghwagxsY`1q&ghX,Z]šuqTZ

Z]šU`)w_dPsU`£Š l dYsYjtw#` l Xž`<rusUX Z]šU`)w#dYsY`£gvZbš¶qaŠ l dPdn”–œghr¶qFXbjUgªZqncUehW&wšUd„Xb`_revd„‹fgxw<—AZ]šuqTZ‚Z]šU`)w_dPsU`£ghX

Xb`<w_j l `f ‚ŠJdfr l `<w_`_ŠYZ]gvd„r«dn”?Zbšu`™w_dPsU`f„ZbšU`™w#dYsY`˜w_dfruXbjU^a` l XžjucU^agªZXNZ]šU`˜Š ldPdn”?Z]d›q£Š l dPdn”!wšU`1w­f` l

”œd l Zbšu`«evd„‹fgxwn L² šPjuX<Âgvr Z]šU`«cuq„Xžgxw k •• q l wšUgvZb`<w#Zbj l `fÂzZbšU`«d„rUehW¢w#d„^aŠtd„rU`_r3Z]X£ZbšuqnZ)šuq|ƒf`:Z]d¶ct`

Z l jtX[Z]`<s q l `aZbšU`LŠ l d„‹ l qn^ ehdf‹„ghwfÂzZ]šU`«Š l dPdn”wšU`<w­„` l dn” Z]šU`«ehdf‹fgxwaqnrus°Z]šU`F”œd l ^FqnehgxXbqnZbghdfr°dn” ZbšU`

Xb`<w_j l gªZ[WŠ l d„Št` l Z[Wghr:ZbšUgxX/ehdf‹„ghwf €p`_gvZbšU` l ZbšU`^ad„cUgveh`‚w#dYsY`rud l Zbšu`‚Š l dfŠJd„Xb`<s:Xž`1w#j l gªZ[W)Š l dPdf”tšuq|ƒ„`

Z]dact`,Z ljuXžZb`1s' 

r¼Z]šU`_g

l

Xb`_^aghruqneAd

l

­?Âu€p`<w_jUehqLqnrus¼o!`_`hy_~UÂy1‡qTµYghdf^FqTZ]ghXb`<XZbšU`›Š

l

d„‹

l

qn^¤jtXžghrU‹Lqpd„q

l

`_³

ehgh­f`pehdf‹„ghwf ud

l

q‹„gvƒ„`_rLXb`<w_j

l

gvZ[W:Štd„evgxw#W„„Z]šUgxXAehdf‹„ghw˜w#d„^:`1X/Z]df‹f`_ZbšU`

l

gvZbšq&41;<9 ;< %!9

" &8 &89˜•A‹f`<r&ZbšuqnZp‹f`<rU` l qTZ]`<Xeh`_^a^FqfXpgvr¢q«XžWPr3Z]qnµP³´sYgl `<w§Z]`<s”±qfXbšUghdfr¼šUgxwš¼Š l dPdn”±Xpq l `XbjY”¹³

¥Jw#gh`_r3Z˜Z]d`<ruXbj l `)ZbšU`:Š l dfŠJ` lZ[Wf Ud l `<qfwš8ev`<^:^FquÂ?q^FqfwšUghrU`_³´wšU`1w­TqncUeh`Š l dPdn”/Zb` l ^ štqfX˜Zbdct`

‹„`_rU` l qnZb`1s8cPW¢ZbšU`Lw_dYsY`«Š l dYsYjuw#` l  Ud l `1qfwš k ••gvrtX[Zqnruw_`fÂZbšU`Š l dPdf”A”œd l ^FqTZgxX)w_juXžZbdf^ag_`1s

gvZbš¨qnµYgvd„^aXF–.&"h”œd l q l gªZ]šU^a`#Zbgxw_X—§ ! ¼d l `_dTƒ„` l Â?ZbšU`Xžd„jUrusYrU`1XbXdn”+ZbšU`«ƒ„` l gª¥Jw_qTZ]gvd„r°w_dfrusUgªZ]gvd„r

‹„`_rU` l qnZbd l gxXNrudnZŠ l dTƒf`1s)cujYZZqn­f`<r:”œd l ‹ l qfr„Z]`<s'Âfšuq|ƒPgvrU‹q„XNw#d„ruXb`<i3jU`_rtw#` ZbštqTZ"[ZbšU` l `+` l `` l]l d l X

ghrZbšuqnZ‚w#dYsY`,ZbštqTZ‚`<X]w_qfŠt`1s«Z]šU`,Zbšud l dfjU‹„š«Zb`1X[Z]gvru‹Fdn”!Z]šU`£ghrY”l q„X[Z l jtw§Zbj l`$#%vy'&´ 

²d l `_^a`<sUW8Z]šU`<Xb`L+`<qf­3ru`<X]Xž`1X_Â(‚ŠUŠJ`_e)Ӆ šuqfX)Š l dfŠJd„Xb`<s°Zbšu`rUdfZbghdfr®df” 4* %'9 *+ .

;< ! " ;<=%&™–, k •• —#  kNl df‹ l qn^ X]qT”œ`#Z[W:gxX+sU`#¥urU`1sLsYgl `<w§Z]evWaghr«Z]` l ^aXAdn”qnr«d„Št` l qnZbghdfruqfetXb`_^FqnrY³

Z]ghw<X_Â3Z]šU`,ƒf` l gv¥tw_qnZbghdfrLw_dfrusYgvZbghdfrtX+q l `˜‹f`<rU` l qTZ]`<sa”l df^ Z]šU`,Š l d„‹ l qn^ Xž`<^Fqnr3Zbgxw_X l qTZbšu` l Zbšuqfr«”l df^

Xbdf^a`:Š l df‹ l qn^¬ehdf‹„ghw:qnrus¶ZbšU`«X]qT”œ`_Z[W¼Š l d3df”gxX£qLŠ l dPdn”NZ]` l ^ dn”AZbšU`ajUrtsY` l evWPghrU‹evd„‹fgxwnÂ'šU` l `Fo-+ 

² šughXghruw l `<q„Xž`1XZbšU`‚w_dfrY¥tsU`_ruw_`gvr›ZbšU`‚w_d l]l`1w§Z]rU`<X]Xdn”JZbšU`‹„`_rU` l qnZb`<s)ƒf` lgv¥tw_qnZbghdfr:w#dfrtsYgªZ]gvd„ruX< ² šU`

sUdTruXžgxsY`df”-

k

••IghXNZbšuqnZZbšu`˜w#d„ruXžZ

l

juw§Z]gvd„r:df”'ZbšU`pŠ

l

dPdf”±XNgxXN^FqfsY`˜Xžgh‹frUgv¥tw<qnr3ZbehW›^ad

l

`‚w_df^aŠUeh`#µ

cJ`<w<qnjuXb`Š

l

dPdf”±X:q

l

`&sYd„rU`sUg

l

`<w#ZbehW®dfrIZbšU`¼Xb`_^Fqnr3Zbgxw_X

l

qTZ]šU`

l

Zbšuqfr¦Z]š

l

dfjU‹„šIXbdf^a`w_juXžZbdf^ag_`1s

ehdf‹„ghwf 

.˜rU` l `<q„Xžd„r«”œd l cujUgvexsYghrU‹aZbšu`) k •• q l wšUgvZb`1w§Zbj l `,sYgl `1w§ZbehWLjuŠtd„rLZ]šU`£dfŠJ` l qTZ]gvd„ruqne'Xb`_^Fqnr3Zbgxw_X

gxX)ZbšuqnZ<ÂAi3jUdfZbghrU‹/(pŠUŠJ`_eQÂ"bw#dfrtX[Z l juw#ZbghrU‹8q¢^a`<wšuqfrUghw<qnehevW3³ØwšU`<w­TqfcUev`«w_d l]l `1w§Z]rU`<X]XŠ l dPdn”‚df”˜q¼”œjUehe

˜•A‹„`_rF+dfjUexsacJ`™qsuqnjUr3ZbghrU‹£ZqfXb­? #² šUgxXAšuqfXrU`_ƒ„` l ZbšU`<ev`1XbXct`<`_rLq„w_w#d„^aŠUevgxXbšU`<sacPWa€‚ghŠU­fdT qnrts

¡ ghexsY^ad„Xb` l …„‡PÂP…n~*'šUduÂ3”œd l q l`1qfXbdfruqfcUev`‚XbjUcuXb`#Z dn”-03q|ƒTq£cPW3Zb`,w#dYsY`fÂPŠ l dTƒf` Z]šU`,Xžd„jUrusYrU`1XbXAdn”!q

1

&<'2&$9- &<;< % !9 w<qnexw#jUehjuXgvZbš l `<XbŠJ`<w§ZZ]dFZbšu`cPW„Z]`)w#dYsY`Xb`_^Fqfr„Z]ghw<X_  ²dFŠ l dTƒ„`,Š l d„‹ l qn^FX<Â

Z]šU`_WFŠ l d„Štd3Xž`™qšPWPc l gxs«qfŠUŠ l d„qfwšaZ]šuqTZ‚qfevehdT‚X/Z]d›juXb`™ctdfZbš«Zl jtX[Z]`<sLqfrus«jur„Z ljtX[Z]`<sLw_df^aŠJdfrU`<r„ZX_ 

(pr¢`_µUqn^aŠUeh`:df”+qLZ l juXžZb`<s°w#d„^aŠtd„rU`_r3Z£ghX™Z]šU`acPW„Z]`Fw#dYsY`aƒf` l gv¥u` l ZbštqTZ43,ev`<gvr qnrts¢€pgvŠU­„dT šuq|ƒ„`

”œd l ^FqfevgxXž`1s®qnrus¦Š l dTƒf`<s®w_d l]l `1w§Z)ghr X]qncJ`_eheh`5hy<†*´ 6‚r3Z l juXžZb`1s¦w#d„^aŠtd„rU`_r3Z]X:q l `«`_µ3Z]` l ruqne XžZ]qTZ]ghw

qfruqnehWYXž` l XZbšuqnZ™XbjU‹f‹„`<XžZpŠtdfZb`<r„Z]ghqfe+–±gvrtsYjuw§Z]gvƒ„`1—‚gvrPƒTq l ghqfr3Z]X< p² šU`<Xb`ghrPƒ|q l gxqnr3ZXpq l `£Z]šU`_r l `_Š l dTƒ„`<s

ghruXbghsU` X]qncJ`_eheh`£gvrd l sY` l Z]dadfcYZqnghrq›Z l qnrtXž^agvZžZ]qfcUeh`£Š l d„‹ l qn^w#` lZ]gª¥Jw_qTZ]`f 

rZbšUgxX+ŠuqnŠJ`

l

ÂY+`˜Š

l

`<Xb`_r3Z q

k

•• gvrU”

l

q„X[Z

l

juw#Zbj

l

`pctqfXb`<s«d„r ;<&891&.% 7$<9';49 ! /9&4 &49 9

~*´ A•A`

l

Zbgv¥u`<sqncuXžZ

l

qfw#Z+ghr3Zb`

lŠ l

`#ZqTZ]gvd„r«ghX q)Zb`1wšUrUgxi„ju`p”œd

l

`_µPZ

l

qfw§Z]gvru‹:q:X[ZqTZ]ghw™qnruqfevWYXb`

l ”l d„^ ZbšU`

w_dfruXžZ

l

juw#Zbghƒf` Š

l

d3df”Jdf”'gªZXXb`_^Fqnr3Zbgxww#d

lbl

`<w#ZbrU`1XbX<ÂTŠ

l

dYsYjuw#ghrU‹qnZNZbšU`˜Xbqf^:` Z]gv^a`pqfrFqnruqfevWYXb`

l

qnrts:q

Š l

dPdn”/d„cYm[`<w#Z™w#`

l

Z]gª”œWPghrU‹«gvZ]X™Xž`<^Fqnr3Zbgxw)w_d

l]l

`1w§Zbru`<X]X_ 7˜XžghrU‹Lw_`

l

Zbgv¥u`<s¶qfcuXžZ

l

qfw§Z˜gvr3Zb`

l Š l

`_Z]qTZ]gvd„r¼šuqfX

Z]šU`,”œdfehehdTgvrU‹›Zbš

l

`<`qfsYƒTqnr3Zqn‹f`1X98

• <sup>ZbšU` k •• ghrY”l qfXžZ l juw§Z]j l</sup> `,šuq„XXž`<^Fqnr3Zbgxw˜”œdfjUrusuqTZbghdfrtXqfXXžZ l dfrU‹aqfX+Z]šUd„Xb`,dn”: k ••˜Â

• ^{w#dYsY`w#` l}Zbgv¥tw<qTZb`1X)w<qnr¨cJ`LcUjugvevZ›”l df^ l `<XbjUeªZX)df”‚jUr3Z l juXžZb`<s¦X[ZqTZbgxw«qfruqnehWYXž` l X£gvZbšudfjYZ:ZbšU`

rU`_`1sdn” l`_³QŠ l dTƒPgvru‹Zbšu`<Xb` l `<XbjUevZ]X ghruXbghsY`q›Z]šU`_d l `<^¤Š l dTƒf` l Â

• ^{Š l d3df”Nw_q l]l W3ghrU‹aŠ l} dPdn”/wšU`<w­„` l X‚w_qfrcJ`)cujUgvevZ˜ghr¶Xbjuwš¶qF q|WFZbšuqnZpZ]šU`)w#dYsY`›w#dfrtXžjU^a` l w_qfr wšU`<w­«ZbšU`<gl w_d l]l`1w§Zbru`<X]X+qfjYZbd„^FqTZbgxw_qfevehWFjuXbgvru‹aZbšU`›•AdYiaZ[WPŠJ`wšU`<w­PghrU‹›^a`1wšuqnrUgxXb^ 

² šu`)Z]šUgl s¢Štd„gvr3Z,dfŠJ`_ruX™jUŠ¢”œd l Zbšu`:ŠJd„X]XbgvcUghehgªZ[W¼df”AXbqn”œ`_ehW¶sYdTrY³´evd3qfsYghrU‹«Š l dPdn”+wšU`<w­„` l X_Â?qfsUsUgvrU‹

t`#µYgvcugvehgªZ[W«ZbdaZbšu` k •• ghrY”l qfXžZ l juw§Z]j l `f 

r8ZbšU`:rU`#µPZ,Xž`1w§Zbghdfr8A`›‹fghƒf`)qfr¶dTƒf` l ƒPgh`_ dn”/Z]šU` k •• q l wšUgªZ]`<w#Zbj l `)cuq„Xž`1s&dfr8w_` l Zbgv¥u`<s¢qncY³

XžZ l qfw#Z‚gvr3Z]` l Š l`_Z]qnZbghdfrz VP`<w#Zbghdfr¶ˆFw_dfr3Z]qfgvruXZbšU`:XžWPr3Z]qnµqnrtsXb`_^Fqfr„Z]ghw<X‚df”/qacPW3Zb`›w#dYsY`exqnrU‹„juqn‹„`

Z]šuqTZ+gvehe?Xž` l ƒ„` Zbd)`_µY`_^aŠUehgª”œWFqnrtsa`#µYŠt` l gh^a`_r3ZZ]šU`˜q l wšugªZ]`<w§Z]j l `f  rVP`<w#ZbghdfruX~›qfrus«‡,+`pdfjUZbehgvrU`

Z]šU`”l qf^:`<Ad l ­°dn”™w#` l Zbgv¥u`1s¦qnctX[Z l q„w§Z›ghr3Zb` l Š l `#ZqTZ]gvd„r¨gvr •AdYi®qnrus¦gvruXžZ]qfr3ZbgxqTZb`1XZ]šUgxX:”œd l q8rU`<

XžZ]qnZbgxwpqfruqnehWYXžgxX/”œd

l

ghr3Zb`

l

ƒTqneJqnruqfevWYXbghXdfr«cPW3Zb`,w#dYsY`˜Š

l

d„‹

l

qn^FX< !² šU`™`_rus

l

`<XbjUevZAgxXAZbšU`£•AdPiaXbgv‹„ruqT³

Z]j

l

`£dn”NqFX[ZqTZ]ghw£qfruqnehWYXž`

l

w#`

l

Zbgv¥u`1sgvZbš

l

`<XbŠJ`<w§ZZ]d«qFXž`1w#j

l

gvZ[WLŠJdfehghw_Wf +VY`<w§Z]gvd„r¶}FsY`<X]w

l

ghct`1XšUdT

Š l dPdn”!w<q

l]l WPghrU‹£Š

l

dPdn”!wšU`1w­f`

l

XNw<qnr«cJ`˜cujUgvevZ+”

l

d„^ w_`

l

Zbgv¥u`<sLX[ZqTZbgxwpqfruqnehWYXž`1X_ ¡°`‚¥

l

X[Z Š

l

`<Xb`_r3ZAqfr

jurUdfŠYZ]gv^agxXž`1s¶Š l dPdn”Awšu`<w­f` l qfrus¼Z]šU`_r sY`_ƒ„`_ehdfŠ°q«Š l dPdn”AwšU`1w­f` l šUgxwš¢w_` l Zbgv¥tw_qnZb`1X˜q l` $+ ! /9

.&.;< 9/;89 99 &:" &$§ ¶VP`<w#ZbghdfrI{`_µPŠuehqfgvruX)šUdT Zbd¶‹„`_rU` l qnZb`F`«w_gv`<r„Z:X[Z l qnZb`_‹„gv`1X,ZbštqTZ)eh`<q„s

Z]dLƒ„` l Ww_df^aŠuqfw#Z˜Š l df‹ l qf^%w_` l Zbgv¥tw_qnZb`<X< £VP`<w#Zbghdfr5&L`#µYŠUexqnghruXpšudT ZbšU`«•AdYiŠ l d„‹ l qn^ `_µPZ l qfw§Z]gvd„r

^a`1wšuqnrUgxXb^gxXNjuXb`<s:Z]d£gv^aŠUeh`_^a`_r3Z+`«w#gh`_r3ZŠ l dPdn”'wšU`<w­„` l X/qnrusFsU`<X]w l gvcJ`<XNqfra`#µYŠt` l gh^a`_r3Z]qfeu`<ƒ|qfeª³

jtqTZbghdfr¼df”ZbšU`ghrY”l qfXžZ l juw§Z]j l `£gvr¼šUgxwš8qFw_dfehev`1w§Zbghdfr¼df”Nq l]l q|W3³´gvr3Zb`<ruXbgvƒ„`˜qneh‹fd l gvZbšu^aXpq l `w#` l Zbgv¥u`1s

Z]da‹fjuq l qfr„Z]`_`˜ZbšuqnZZbšU`w_dYsY`,gvehezrUdfZ ^Fqf­f`£q l]l q|WFq„w_w#`1XbXb`<XAZ]šuqTZpq l `,dfjUZ df”cJdfjurus' 

£ ¤ S*F"!¸ $#

² šu`«Š l d3df” wšu`<w­f` l ghXZbšU`w#d l rU` l XžZbd„rU`adn”‚q k •• ghrY”l q„X[Z l jtw§Zbj l `„  kNl `_ƒPghdfjuX”l qf^:`<Ad l­YX™šuq|ƒ„`

q„sYƒfdYw<qTZb`1sLXb^Fqnehe6ÂU+`_ehev³´XžZbjusUgv`1s'Â%u`#µYghcUeh`£Š l dPdf”wšU`1w­f` l X'&3ghr&Šuq l Zbgxw#juehq l ZbšU`£Š l dPdn”¹³ØwšU`<w­„` l dn”ZbšU`

( ." ;<*+% 3&

1

>2™–6o-/—§ n² šu` o &Š l d3df”twšU`1w­f` l ghXXb^Fqnehe3gvZbšaXbdfjUrusZbšU`<d l `#Z]ghw<qne„”œdfjUrusuqTZbghdfrtXØ

Z]šUgxX‚ghruw l `<q„Xž`1Xw#dfrU¥tsY`_rtw#`£ghr¼gªZX‚w#d lbl `<w#ZbrU`1XbX< ² šU`t`#µYgvcugvehgªZ[Wdn”No-I^a`<qfruX ZbštqTZ˜qfr3WLŠuq l Zbgxw#jUexq l

k •• ghruXžZ]qfruw#`«w<qnr ct`w_qfXžZghr„Z]d&ZbšU`«”l qf^:`<Ad l ­?  pdTA`<ƒf` l Âzghr ZbšughX›Xž`_ZžZbghrU‹tÂcUjugvexsYghrU‹¶q¼Š l dPdn”

–6qnr®o-·Zb` l ^«—™gxX£qTZcJ`<XžZrUdfrY³QZ l ghƒ3gxqne‚–6qfX£ghr®€‚`1w#jUexqUŸX,cuqfXbgxw k •• ”l qn^a`<Ad l ­U—˜qnrus°Xžd„^a`#Zbgh^a`<X

ghrY”œ`1qfXbgvcUeh`f 

(+ZZ]šU`LdfZbšU` l `_rts dn”+ZbšU` k ••XžŠJ`<w#Z l jU^&Â!Z]šU` 03q|ƒ|q&cPW3Zb`«w_dYsY`«ƒf` lgv¥u` l juXž`1s gvr Z]šU` 3)

Ӆnˆ* l `<evgh`<Xdfr®q¼XžŠtq l Xž`:Z[WPŠt`qnrUrUdfZ]qnZbghdfr°Zbd¶q„XbXb`<X]X™Z[WPŠt`_³´X]qT”œ`_Z[Wf ² šughX£Š l dPdn”wšU`1w­f` l štqfX£cJ`_`<r

sU`<Xbgv‹„rU`<s)”œd

l

Z]šU`XžŠJ`<w_gª¥tw+ZqfXb­dn”JcPW„Z]`‚w#dYsY`wšU`1w­3ghrU‹tÂTšUghwš:^a`<qfruXZbšuqnZNgªZNgxX”±qfXžZqnrts)juXb`Xž^Fqfeve

w_`

l

Zbgv¥tw_qnZb`1X_ 

rq„sUsYgvZbghdfrzÂPZ]šU`£XžŠJ`<w_ghqfevgxXb`<sFruqnZbj

l

`™dn”XbjuwšsY`<sYgxw_qnZb`1s«Š

l

dPdn”wšU`1w­f`

l

XA^a`<qnrtXZ]šuqTZ

Z]šU`_Wq

l

`˜df”¹Zb`<r`1qfXbgv`

l

Zbd«sY`1Xžgh‹fr&qnrusw#d„ruXb`<i3jU`_r3Z]evW«Š

l

dTƒ„`™w_d

l]l

`1w§Z< 

r8ZbšU`)”œdfehevdTghrU‹uÂJ+`)Š l dfŠJd„Xb`)qnr8`#µPZb`<ruXžghcUeh` k •• ”l qf^:`<Ad l ­LZbšuqnZ™qfevehdT‚XZ]dsYdTrUehd„q„s %

/;™Š ldPdn”¹³ØwšU`1w­f` l XX]qT”œ`_ehWf  ZX,q l wšUgªZ]`<w#Zbj l `)gxX˜XbjU^a^Fq l ghXb`<s¶gvr gv‹„j l `yn ² šU`aq l wšUgvZb`<w#Zbj l `)ghrY³

sUjuw#`1X)qZ[+dn³ØX[Z]`_Š Š l dnZbdYw_dfeNcJ`#Z[+`_`<r¢Z]šU`LŠ l dYsYjuw_` l qfrus¢ZbšU`w#d„ruXžju^:` l   r Zbšu`F¥ l X[Z›XžZb`<ŠzÂZbšU`

Š ldYsYjuw_` l i3jU` l gh`<X+Z]šU`›w_dfruXbjU^a` l Z]d«­PrUdT šU`#Z]šU` l gªZpdTrtX ZbšU` l `<ev`<ƒ|qfr3Z‚Š l dPdf”¹³´wšU`1w­f` l   ”/rUdfZ<Â

Z]šU`)Š ldYsYjuw_` l Xž`<rusUXpZbšU`awšU`<w­„` l Z]df‹„`#Zbšu` l gvZbš¢gªZX˜XbdfjurusYrU`1XbXpŠ l dPdf”[ ˜² šUgxX˜XbdfjurusYrU`1XbX˜Š l d3df”/ghX

Z]šU`_r¦ƒf` l gv¥u`<s°cPW°q¶‹f`_ru` l qneNŠUj l ŠJd„Xb`«Š l dPdn”¹³ØwšU`<w­„` l cPW8Z]šU`w_dfruXbjU^a` l šUduÂgv”ZbšU`«ƒ„` l gª¥Jw_qTZ]gvd„r

!"# $%&$'%($

)

!"# $%

* )$

+ *,%

*.-/

0

-2134 $'%%4

5 5

56)$

7+ 89'5;:

+

8.4 <$

0 +

=89#=-$%$

#=-$

)$ >

-213@?

!"# $%

$A-$*

B-2

7C$DFEG)H

13$*.-2I:

gh‹fj

l

`ay 8 k

•• q l wšUgªZ]`<w#Zbj

l `

Xbjuw<w#`_`1sUX<Â'gvruXžZ]qfevexX˜ZbšU`arUdT w_` l Zbgv¥u`<s°wšU`1w­f` l   r8Z]šUgxX,+q|WZbšu`aq l wšugªZ]`<w§Z]j l `›w#d„^)cUghrU`1XpZ]šU`FqfsP³

ƒTqfr„Zqn‹„`<X dn”cJdnZbš¼q:Z l juXžZ[+d l ZbšPWLw#d l `,Š l dPdn”/wšU`<w­„` l qnrts t`#µYgvcuev`'% /;‚Š l d3df”wšu`<w­f` l X<  .˜ruw#`

Z]šU`™Š l dPdf”!wšU`<w­„` l štqfX+ct`<`_rgvruXžZ]qfeveh`<sz„Z]šU`,w#dfrtXžjU^a` l gxX l `1qfsYW:Zbd:sYdTrUehd„q„saZbšU`™Š l df‹ l qf^ df”zZbšU`

Š ldYsYjuw_` l  4(pX,gvZ£ghX,w#jtX[Z]df^Fq l WfÂJZbšu`:Š l dYsYjuw_` l Xž`<rusUX™Z]šU`›Š l d„‹ l qn^¬Šuqfw­Tqf‹f`<s¶gªZ]š°qw#` l Z]gª¥tw<qTZ]`

Z]d)cJ`™wšu`<w­f`1sacPW›Z]šU`™Š l `<ƒPgvd„juXžehWasYdTrUehd„qfsU`<saŠ l dPdn”zwšU`<w­„` l  ²d)cJdPdnZX[Zl qfŠaZbšU`™gvrU”l q„X[Z l juw#Zbj l `fÂ

Z]šU`˜w_dfruXbjU^a` l dfrUehWašuqfXNZbdghruXžZ]qnehe?q£‹f`<rU` l qneUŠuj l ŠJd„Xb`‚Š l dPdn”zwšU`1w­f` l &fd„j l ”l qn^a`<Ad l ­›ghXcuqfXb`<sad„r

Z]šU`›•AdYiFŠ l dPdn”q„XbXbgxX[Zqnr3Z }UÂUˆ Q 

"!$#"%&'

² šu`AŠ l dYsYjuw_` l qnrus:w#d„ruXbjU^a` l šuq|ƒf`AZbd,qn‹ l`<`dfr:q˜”œd l ^aqfe„^a`1qnrUghrU‹™dn”uZ]šU`X[ZqTZ]`_^a`_r3Z"($(IŠ l df‹ l qn^

k XbqnZbgxX[¥u`1Xq¶Xb`<w_j l gvZ[W8Š ld„Št` l Z[W V k (T ¶² šughX)ghX›sYdfrU`Lc3W¢Š l dTƒ3gxsYghrU‹¶q¢•AdYi°XžŠJ`<w_gª¥tw<qTZ]gvd„r°df”ZbšU`

Xb`_^Fqfr„Z]ghw<XA–±šU` l `fÂTq™Xž^Fqfevev³´XžZb`<ŠdfŠJ` l qTZ]gvd„ruqne3Xž`<^Fqnr3Zbgxw_X—'df”UZbšU`+Š l df‹ l qf^Â|qnrts£Š l dTƒ3gxsY`+qpXb`_^Fqnr3Zbgxw_X

ghr3Zb` l Š l `#ZqTZ]gvd„r¶dn”NZ]šU`aXž`1w#j l gªZ[W¼Š l d„Št` lZ[W„ ™¡°` l `1X[Z lgxw§Z,dfj l qTZbZb`<r„Z]gvd„r¶Z]dX]qT”œ`_Z[W¼Š l d„Št` l Z]gv`1X‚Z]šuqTZ

^›juXžZšUd„ehs·”œd

l

qnehe™ZbšU`

l

`1qfwšuqfcUeh`8`#µY`1w#jYZ]gvd„r X[ZqTZ]`<X<  ¼d

l

`8Š

l

`<w_ghXb`_ehWf‚ZbšU`¦•AdYi¸XžŠJ`<w_gª¥tw<qTZ]gvd„r

Š l dTƒPgxsY`<X8

• ZbšU`,Z[WPŠJ`£dn”Š l df‹ l qn^FX

Pgm^Â

• qaXž`<^aqfr3Zbgxw™sUdf^Fqnghr”œd

l

XžZ]qTZ]`<X

State^Â

• qaXž`_Z‚dn”gvrUgvZbgxqnezXb`_^Fqfr„Z]ghw,XžZ]qnZb`<X)8

S0⊂State

• qaXž`<^aqfr3ZbgxwpZ l qfruXbgªZ]gvd„r l `_exqTZ]gvd„rghrusY`_µP`1sc3WLŠ l d„‹ l qn^FX

→p⊆State×State^Â

• ZbšU`aXb`_^Fqnr3Zbgxw£ghr3Zb`

l Š l

`#ZqTZbghdfr¼df”NXž`1w#j

l

gªZ[WŠJdfehghw_gv`1X 8q«Š

l

`1sYghw<qTZ]`dfr8XžZ]qnZb`1X

Safep⊆State^Â

Šuq

l

qn^a`_Zb`

l

gxXž`1s«cPW«Š

l

df‹

l

qf^ 

(˜XjuXžjtqneQÂnA`+rUdfZb`

→^∗_p^{Z]šU` l `} u`#µYghƒf`NZ l qfruXbgªZ]gvƒ„`+w_evd3Xžj l `df”uZ]šU`Z l qfruXbgªZ]gvd„r l `_exqTZbghdfr›dn”UZ]šU` Š l df‹ l qn^

p ›² šU`Fw_dfehev`1w§ZbghrU‹&Xž`<^Fqnr3Zbgxw_X™dn” qLŠ l d„‹ l qn^

p gxX£sY`#¥trU`<s°qfX˜Zbšu`aXb`#Z£df”+qnehe l`1qfwšuqfcUeh`›XžZ]qTZ]`<X™cPW

→p

ÂuX[Zq l ZbghrU‹:”l d„^ qnr`_eh`_^a`<r„Z‚df”

S0

)»'*,+,-



-±À.+0/2143

JpK={s∈State | ∃s0∈ S0, s0→^∗_P s }

)»'*,+,-



-±À.+0/215/

." ›Xbqn”œ` 2*++!9,-&<';/79+)& <9 9&$2 &444&

JpK⊆Safep

–[y1—

6™ghƒf`<r¢qŠ l d„‹ l qn^

pÂJZbšu`aw_dYsY`›Š l dYsYjuw_` l šuqfXpZbšu`_r¢ZbdLŠ l dTƒPgxsY`›q^FqfwšUghrU`#³ØwšU`1w­f`<s&Š l dPdn”Ndf”

–žy1—#  pdTA`<ƒf` l Â+•AdYi Š l dPdn”±XFq l `‹fdPdYs¨`#µUqf^:Šuev`dn”™^aq„wšUghrU`#³ØwšU`<w­„`<s®Š ldPdn”[ÂAcUjYZLw_dfruXžZ l juw§Z]gvru‹

Š ldPdn”±X ! 69:&8;89 &9+ajuXbgvrU‹Z]šU`L•AdPi¶Š l dPdf”+qfX]XbghXžZ]qfr„Z£i3jUgxw­3ehW¶cJ`<w_df^a`<X,jUrU”œ`<qfXbghcUev`:”œd l evdT eh`_ƒ„`_e

exqnru‹fjuqf‹f`<X<  rtX[Z]`<qfszÂYA`,Š l dfŠJd„Xb`‚Z]d:jtXž`,qncuXžZ l qfw#Z+ghr3Zb` l Š l `#ZqTZ]gvd„r«ZbdFqfjYZbd„^aqnZb`˜ZbšU`£w_dfruXžZ l juw§Z]gvd„r

df”JŠ l d„‹ l qn^ w#` lZ]gª¥Jw_qTZ]`<X<  raZ]šUgxXNXž`_ZžZ]gvrU‹t„Š l d„‹ l qn^FXq l ` qfjYZbd„^FqTZbgxw_qfevehW)qfrUrUdnZqTZ]`<s:gªZ]šFŠ l df‹ l qn^

Š ld„Št` l Z]gv`1X›–±`_eh`_^a`_r3Z]X™df”AqncuXžZ l qfw#Z,sUdf^FqnghruX— Zbd„‹f`_ZbšU` l gvZbš°qnr l `1w#dfrtX[Z l juw#Zbghdfr8XžZ l qTZ]`_‹„Wf  kNl d3df”

wšu`<w­Pgvru‹£rUdT·qn^adfjur„ZX/Z]d)`#µY`1w#jYZ]gvrU‹ZbšU` l`1w#dfrtX[Z l juw#Zbghdfr«XžZ l qTZ]`_‹fW„Âfƒ„` l gª”œWPghrU‹£ZbštqTZAgvZAeh`<q„sUX/Z]d›qfr

qfcuXžZ

l

qfw§Z ghr3ƒTq

l

gxqnr3Z ZbšuqnZgv^aŠUehgv`1X Zbšu`Xž`1w#j

l

gªZ[WLŠtd„evgxw#W„ 

4 ! "%," "

² šu`w#` l Zbgv¥u`1swšu`<w­f` l XA^)jtX[Z‚gh^aŠUev`<^a`_r3Z‚Zbšu`Xžgh‹fruqnZbj l `,`#µYŠ l `<X]Xž`1sLcPWFZ]šU`:•AdYiF^adYsYjUeh`

ghr gv‹„j l `8…Y  ² šU`¼”œjUrtw§Zbghdfr Zqn­f`1XaZ[+d¨q l ‹fjU^a`_r3ZX988q¨Š l d„‹ l qn^®qnrts q®w_qnrtsYghsuqTZb`

w_` l Zbgv¥tw_qnZb`F‹f`<rU` l qTZ]`<s&cPWqfr¶jUr3Z l juXžZb`1s¼`#µPZb` l rtqne!Š l dTƒ„` l   ”ZbšU` a”œjuruw§Z]gvd„r l `#Zbj lruX

PÂ/Zbšu`&w_df^aŠuqfrUgvd„r¨Z]šU`_d

l

`<^ °`<ruXžj

l

`1X)Z]šuqTZ:Zbšu`Š

l

d„‹

l

qn^ ghXaX]qT”œ`„ÂqfXasY`_¥urU`<sIghr

!

`#¥trUgªZ]gvd„r&…U …Y ² šPjuX<ÂPZ[WPŠt`,wšU`1w­3ghrU‹)ZbšU`,Š

l

dfŠJd„Xb`<s«wšu`<w­f`

l

cPWaZ]šU`£w#dYsY`,w#dfrtXžjU^a`

l Š l

dTƒf`1XNZ]šuqTZ

Z]šU`£wšU`<w­„`

l

ghX w_d

l]l

`1w§Z< 

r¼VP`<w#Zbghdfr}›+`,XžšUdT šUdT Zbd:gh^:Šuev`<^:`<r3ZpXžjuwšw#`

l

Z]gª¥u`1swšu`<w­f`

l

XjuXbgvrU‹

"

$#$&%')('*,+-., /-0'21

-3435&'-'''/6,706$3'498:$$;1

-3435&'-'< 0-/'=8>+--'?435

→

$/6,7/64$3'4

→ ^@

''%;1

-3435&'-'A /-/-AB8

∀

C,$D

///')C,$'FEG',-

→J

K ⊆^H

:$3$7)JIK1

L$M

#F$ /-/N1

gh‹fj l `… 8 r3Zb` l ”±q„w#`™”œd l w_` l Zbgv¥u`<sŠ l dPdn”wšu`<w­f` l X

w_` l Zbgv¥u`<sXžZ]qTZ]ghw£qfruqnehWYXž`1X_ 

O PRQ

+F #)TSSU Q

›9V )$!;W ›#+

² šu` k •• q l wšUgvZb`<w#Zbj l `)ghr/gh‹fj l `y›gxX™Š l d„‹ l qn^a^agvru‹«ehqfrU‹fjtqn‹f`)gvrusU`_ŠJ`_rusY`<r3Z,cujYZ,Zbd^aqf­f`›ZbšU`

Š l `1Xž`<r„ZqTZ]gvd„r¼^:d l `:w#d„ruw l `#Z]`)+`)ghevejuXb`:qLŠuq l Zbgxw#juehq l exqnrU‹„juqn‹„`£ZbdgvehehjuX[Z l qnZb`›ZbšU`:Š l gvrtw#ghŠUev`1Xpdf”

d„j l qnŠuŠ l d3qfwšz  .˜j l `#µUqn^aŠUeh`£Š l df‹ l qf^:^aghrU‹:ehqfrU‹fjuqf‹f`,gxX‚qnr&gh^:ŠJ` l qTZ]gvƒ„`,”l qf‹f^a`_r3Z‚df”03q|ƒTq›cPW3Zb`

w_dYsY` ZbšuqnZdfŠJ` l qTZ]`<Xd„raq,ƒPgl Z]juqneY^Fq„wšUgvru`gªZ]š«qnradfŠJ` l qnrusaXžZ]q„w­J„q£Xž`_ZNdn”?evdYw_qfeUƒTq l ghqfcUeh`<X/qnrts:q

šu`<qnŠadf”'q

lbl

q|WYX_  ( Š l df‹

l

qn^ghXNq£Xb`<i3jU`<ruw#`pdn”JZ

l

gvŠUeh`<X

(p1,instr, p2)^a`1qnrUghrU‹,ZbštqTZAw_dfr3Z

l

dfeYŠuq„XbXb`<X

”l df^ Š l

d„‹

l

qn^ ŠJdfghr„Z

p1

Zbd

p2

šugveh`£`#µY`<w_jYZbghrU‹

instr 

² šU`FghruXžZ

l

juw§Z]gvd„r®Xž`_Z)w#dfr3ZqnghruX,dfŠJ`

l

qTZ]d

l

Xp”œd

l

XžZ]qfw­8^aqfrUghŠUjUexqTZbghdfrtX_Âgvr3Zb`<‹f`

l q l

gªZ]šU^a`#ZbgxwFqnrts

”œd l/l `1qfsYghrU‹tÂfX[Z]d l gvru‹,qfrus:gvrtw l `_^a`_r3ZbghrU‹£ehdYw_qneYƒTq l gxqncUeh`<X< VYŠt`1w#gv¥twghruX[Zl jtw§ZbghdfrtX”œd l q lbl q|W£^FqnrUghŠUjY³

exqTZ]gvd„ruXŠJ` l ^:gvZNZ]dw l `<qTZ]`f„dfcYZqnghr)Z]šU`pXbg<`dn”[ÂfghrusY`_µaqfrus:jUŠ?sUqTZ]`‚q l]l q|WYX< !² šU` udTIdn”'w#d„r„Zl d„eUw_qfr

cJ`a^adPsUgª¥u`1s¶jUrtw#dfrtsYgªZ]gvd„ruqnehehW¨–œgvZbš 6™dnZ]d3—˜qnrus¢w#dfrtsYgªZ]gvd„ruqnehehW¼gªZ]š8Z]šU`:”±qn^agvehW¼dn”AgvruXžZ l juw#ZbghdfruX

”Xgxw#^aŠ;< %›šUgxwš:w_df^aŠuq l `AZbšU` Z]dfŠa`_eh`_^a`_r3ZXdn”JZbšU` l jUrY³QZbgh^a`‚X[Zqfw­qnrts›c l qfruwš›q„w_w#d l sUgvrU‹˜Zbd

Z]šU`,dfjYZw#d„^:`„ :ghruqfevehWfÂPZ]šU` l `™q l `™ghruX[Z l jtw§ZbghdfrtX+”œd l gvruŠUjYZžZ]gvru‹aqfrus l `_Zbj l rUghrU‹›ƒTqfevjU`1X_ /² šU`£XbWPr„ZqTµ

gxXXbjU^a^aq l gxXb`<sgvrZbšu`,”œdfehevdTghrU‹›Z]qncuev` 8

" 88 –/;3! 9)/;<—

∗

! 9 88 €‚d„Š ŠujuXžš k d„Š ! juŠ

rU`_‹ q„sUs Xžjuc ^›jUevZ

(‚ehd„q„s (pXžZbd l `" ehd„q„s XžZbd l `" gvruw"

€‚`<+q

lbl

q|W (

l]l

q|WPeh`_rU‹fZbš

qnehd„qfs

qfXžZbd

l `

6™dnZ]d /;

”Xghw_^aŠ;< %/;

cond∈ {eq,ne,lt,le,gt,ge}

gvruŠUjYZ Øl `#Z]j l r `_Zbj l r

¡°`«šuq|ƒ„`:eh`#”¹Zd„jYZZ]šU`Fgvr3Z]`

l

³QŠ

l

dYw#`1sYj

l

qne/qnrus°d„cYm[`<w#Zž³´d

l

gv`<r„Z]`<s¢ehq|W„`

l

X™dn”+ZbšU`FexqnrU‹„juqn‹„`f «² šU`

Š l

`1Xž`<r„Z+”

l

qn‹f^a`<r„Z gxXXžj «w_gv`<r„Z]evWL‹f`_ru`

l

qneJ”œd

l

qTZ Z]šU`£Xbqf^:`™Z]gv^a`,gvehehjuX[Z

l

qnZbghrU‹:ZbšU`,rUdTƒ„`_evZbgh`<X+dn”dfj

l

qfŠUŠ l d„q„wš«qnrusŠt` l”œd l^`_µYŠt` lgh^a`_r3Z]X+dfrw#dYsY`,dfcUZ]qnghrU`1sF” l df^¤w#d„^aŠUgvexqTZ]gvd„rLdf”03q|ƒ|q›Xžd„j l w#`˜w_dYsY`f 

(pr `#µPZb`<ruXžghdfr8Zbd&Z]šU`adfcYm[`1w§Zž³´d l gh`_r3Zb`1s¶exq|Wf` l +dfjUexs¢ct`FsYd„rU`F^)juwš°ghr8Z]šU`«Xbqf^a`: q|W¶qfX£q lbl q|WYX

q l `)Zl `<qnZb`<s8šU` l `f 4(w#` l Z]gª¥t`<s8XžZ]qnZbgxw›qfruqnehWYXžgxXp”œd l dfcYm[`1w§Zb³Qd lgh`_r3Zb`1s®–,03q|ƒTq•+q l su—pcPW„Z]`:w_dYsY`› qfX

sU`<X]w l gvcJ`<sgvr ~*´ 

² šU`FcPW3Zb`Fw_dPsU`:exqnru‹fjuqf‹f`:ghX,‹„gvƒ„`_r qnr°dfŠJ` l qTZbghdfrtqne/Xž`<^Fqnr3Zbgxw_X˜ZbštqTZdfŠJ` l qTZ]`<X™gvZbš Š l df‹ l qn^

XžZ]qnZb`1X£dn” Zbšu`«”œd l ^

< pp, h, s, l > ^{šU` l `} pp ^{ghX›q¼Š l df‹ l qf^} Štd„gvr3ZZ]d¶cJ`L`#µY`1w#jYZ]`<s rU`_µ3Z1Â

h ^ghX›q

šu`<qnŠ°”œd l XžZbd l ghrU‹¼qnehevdYw_qnZb`1s°q lbl q|WYX_Â

s gxXqnr®d„Št` l qfrus X[Zqfw­?Âqfrus

l <sup>gxX)qnr `<r3ƒPgl</sup>d„rU^a`_r3Zdn”ehdYw_qne

ƒTq l gxqncUeh`<X<  (pr8q l]l q|WFghXp^:dYsY`<eveh`<s&cPWqFŠuqngl w_dfruXbghXžZbghrU‹Fdf”Z]šU`)Xbg<`dn”Z]šU`)q l]l q|W«qnrus¼q:”œjUrtw§Zbghdfr

Z]šuqTZ”œd l qa‹fghƒf`<rghrusY`_µ l `#Z]j l ruX+ZbšU`)ƒ|qfevju`X[Z]d l `<sqTZ‚Z]šuqTZ‚ghrusY`_µ?  ( XbŠt`1w#gxqnez` lbl d l XžZ]qTZ]` l]l d l ghX

jtXž`1s«Z]dF^:dYsY`<e'`#µY`<w_jYZbghdfr&` lbld l XšughwššU` l `q l gxXž`˜”l d„^¤ghrusY`#µYghrU‹Fqnr¼q l]l q|W:d„jYZ]XbgxsY`,gªZXctd„jUrusUX< 

Val = numn|ref ref n∈Z, ref ∈Location Stack = Val^∗

LocVar = Var→Val

Array = (length :Z)×([0,length−1]→Val) Heap = Location→Array_⊥

State = (Ctrl×Heap×Stack×LocVar) + Error

² šU`¼d„Št` l qnZbghdfruqfe‚Xž`<^Fqnr3Zbgxw_XagxX«sY`_¥urU`<s©ƒPgxq®q8Z l qfruXbgªZ]gvd„r l `_exqTZ]gvd„r

→ ct`_Z[A`<`_r X[ZqTZ]`<Xaghr¸q XžZ]qfrusUq l sL”±qfXbšUghdfr&qnrusghevezrudnZ‚cJ`£`#µYŠUexqnghrU`<sgvr¼sY`_Z]qfgveQ  ( ”œ`_ l jUeh`<X dn”Zbšu`sY`#¥urugªZ]gvd„rdf”

→ ^{q l `}

XbšUdTrct`<evdT£ N² šU`<W«ghevehjuXžZ l qTZb`£sYg?` l `_r3Z‚qfXbŠt`1w§Z]X df”Z]šU`£cPW3Zb`£w#dYsY`,exqnrU‹„juqn‹„`&Pgvr&Šuq l Z]ghw_jUexq l šUdT

q lbl q|Wactd„jUrus&wšU`1w­PX q l `,ŠJ` l ”œd l ^:`1sLšu`_r¼qfw<w#`<X]XbgvrU‹aqnr&q l]l q|Wf