nico and md model

[lttv.git] / trunk / verif / md / model_03_write_commit_sum.spin.ltl

diff --git a/trunk/verif/md/model_03_write_commit_sum.spin.ltl b/trunk/verif/md/model_03_write_commit_sum.spin.ltl
new file mode 100644 (file)
index 0000000..b43d292
--- /dev/null
+++ b/trunk/verif/md/model_03_write_commit_sum.spin.ltl
@@ -0,0 +1,6 @@
+// The sum of all subbuffer commit counts must always be lower or equal
+// to the writer head, because space must be reserved before it is
+// written to and then committed.
+// assert(write_off - _commit_sum >= 0 && write_off - _commit_sum < HALF_UCHAR);
+
+[] (wcsum1 && wcsum2)