no_shm_selinux/Enrich2.thy
author chunhan
Wed, 01 Jan 2014 23:00:24 +0800
changeset 88 e832378a2ff2
parent 87 8d18cfc845dd
child 89 ded3f83f6cb9
permissions -rw-r--r--
update
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
88
chunhan
parents: 87
diff changeset
     1
theory Enrich2
82
chunhan
parents:
diff changeset
     2
imports Main Flask Static Init_prop Valid_prop Tainted_prop Delete_prop Co2sobj_prop S2ss_prop S2ss_prop2
83
chunhan
parents: 82
diff changeset
     3
 Temp Enrich Proc_fd_of_file_prop
82
chunhan
parents:
diff changeset
     4
begin
chunhan
parents:
diff changeset
     5
chunhan
parents:
diff changeset
     6
context tainting_s begin
chunhan
parents:
diff changeset
     7
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
     8
fun enrich_msgq :: "t_state \<Rightarrow> t_msgq \<Rightarrow> t_msgq \<Rightarrow> t_state"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
     9
where
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    10
  "enrich_msgq [] tq dq = []"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    11
| "enrich_msgq (CreateMsgq p q # s) tq dq = 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    12
    (if (tq = q) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    13
     then (CreateMsgq p dq # CreateMsgq p q # s)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    14
     else CreateMsgq p q # (enrich_msgq s tq dq))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    15
| "enrich_msgq (SendMsg p q m # s) tq dq = 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    16
    (if (tq = q) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    17
     then (SendMsg p dq m # SendMsg p q m # (enrich_msgq s tq dq))
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    18
     else SendMsg p q m # (enrich_msgq s tq dq))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    19
| "enrich_msgq (RecvMsg p q m # s) tq dq = 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    20
    (if (tq = q) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    21
     then (RecvMsg p dq m # RecvMsg p q m # (enrich_msgq s tq dq))
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    22
     else RecvMsg p q m # (enrich_msgq s tq dq))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    23
| "enrich_msgq (e # s) tq dq = e # (enrich_msgq s tq dq)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    24
88
chunhan
parents: 87
diff changeset
    25
lemma enrich_msgq_duq_in:
chunhan
parents: 87
diff changeset
    26
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    27
   \<Longrightarrow> q' \<in> current_msgqs (enrich_msgq s q q')"
chunhan
parents: 87
diff changeset
    28
apply (induct s, simp)
chunhan
parents: 87
diff changeset
    29
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
    30
apply auto
chunhan
parents: 87
diff changeset
    31
done
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
    32
88
chunhan
parents: 87
diff changeset
    33
lemma enrich_msgq_duq_sms:
chunhan
parents: 87
diff changeset
    34
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    35
   \<Longrightarrow> msgs_of_queue (enrich_msgq s q q') q' = msgs_of_queue s q"
chunhan
parents: 87
diff changeset
    36
apply (induct s, simp)
chunhan
parents: 87
diff changeset
    37
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
    38
apply auto
chunhan
parents: 87
diff changeset
    39
done
chunhan
parents: 87
diff changeset
    40
chunhan
parents: 87
diff changeset
    41
lemma enrich_msgq_cur_inof:
chunhan
parents: 87
diff changeset
    42
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    43
   \<Longrightarrow> inum_of_file (enrich_msgq s q q') f = inum_of_file s f"
chunhan
parents: 87
diff changeset
    44
apply (induct s arbitrary:f, simp)
chunhan
parents: 87
diff changeset
    45
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
    46
apply (auto split:option.splits)
chunhan
parents: 87
diff changeset
    47
done
chunhan
parents: 87
diff changeset
    48
chunhan
parents: 87
diff changeset
    49
lemma enrich_msgq_cur_inos:
chunhan
parents: 87
diff changeset
    50
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    51
   \<Longrightarrow> inum_of_socket (enrich_msgq s q q') = inum_of_socket s"
chunhan
parents: 87
diff changeset
    52
apply (rule ext)
chunhan
parents: 87
diff changeset
    53
apply (induct s, simp)
chunhan
parents: 87
diff changeset
    54
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
    55
apply (auto split:option.splits)
chunhan
parents: 87
diff changeset
    56
done
chunhan
parents: 87
diff changeset
    57
chunhan
parents: 87
diff changeset
    58
lemma enrich_msgq_cur_inos':
chunhan
parents: 87
diff changeset
    59
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    60
   \<Longrightarrow> inum_of_socket (enrich_msgq s q q') sock = inum_of_socket s sock"
chunhan
parents: 87
diff changeset
    61
apply (simp add:enrich_msgq_cur_inos)
chunhan
parents: 87
diff changeset
    62
done
chunhan
parents: 87
diff changeset
    63
chunhan
parents: 87
diff changeset
    64
lemma enrich_msgq_cur_inums:
chunhan
parents: 87
diff changeset
    65
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    66
   \<Longrightarrow> current_inode_nums (enrich_msgq s q q') = current_inode_nums s"
chunhan
parents: 87
diff changeset
    67
apply (auto simp:current_inode_nums_def current_file_inums_def 
chunhan
parents: 87
diff changeset
    68
  current_sock_inums_def enrich_msgq_cur_inof enrich_msgq_cur_inos)
chunhan
parents: 87
diff changeset
    69
done
chunhan
parents: 87
diff changeset
    70
chunhan
parents: 87
diff changeset
    71
lemma enrich_msgq_cur_itag:
chunhan
parents: 87
diff changeset
    72
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    73
   \<Longrightarrow> itag_of_inum (enrich_msgq s q q') = itag_of_inum s"
chunhan
parents: 87
diff changeset
    74
apply (rule ext)
chunhan
parents: 87
diff changeset
    75
apply (induct s, simp)
chunhan
parents: 87
diff changeset
    76
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
    77
apply (auto split:option.splits t_socket_type.splits)
chunhan
parents: 87
diff changeset
    78
done
chunhan
parents: 87
diff changeset
    79
chunhan
parents: 87
diff changeset
    80
lemma enrich_msgq_cur_tcps:
chunhan
parents: 87
diff changeset
    81
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    82
   \<Longrightarrow> is_tcp_sock (enrich_msgq s q q') = is_tcp_sock s"
chunhan
parents: 87
diff changeset
    83
apply (rule ext)
chunhan
parents: 87
diff changeset
    84
apply (auto simp:is_tcp_sock_def enrich_msgq_cur_itag enrich_msgq_cur_inos
chunhan
parents: 87
diff changeset
    85
  split:option.splits t_inode_tag.splits)
chunhan
parents: 87
diff changeset
    86
done
chunhan
parents: 87
diff changeset
    87
chunhan
parents: 87
diff changeset
    88
lemma enrich_msgq_cur_udps:
chunhan
parents: 87
diff changeset
    89
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    90
   \<Longrightarrow> is_udp_sock (enrich_msgq s q q') = is_udp_sock s"
chunhan
parents: 87
diff changeset
    91
apply (rule ext)
chunhan
parents: 87
diff changeset
    92
apply (auto simp:is_udp_sock_def enrich_msgq_cur_itag enrich_msgq_cur_inos
chunhan
parents: 87
diff changeset
    93
  split:option.splits t_inode_tag.splits)
chunhan
parents: 87
diff changeset
    94
done
chunhan
parents: 87
diff changeset
    95
chunhan
parents: 87
diff changeset
    96
lemma enrich_msgq_cur_msgqs:
chunhan
parents: 87
diff changeset
    97
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
    98
   \<Longrightarrow> current_msgqs (enrich_msgq s q q') = current_msgqs s \<union> {q'}"
chunhan
parents: 87
diff changeset
    99
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   100
apply (frule vt_grant_os, frule vd_cons)
chunhan
parents: 87
diff changeset
   101
apply (case_tac a, auto)
chunhan
parents: 87
diff changeset
   102
done
chunhan
parents: 87
diff changeset
   103
chunhan
parents: 87
diff changeset
   104
lemma enrich_msgq_cur_msgs:
chunhan
parents: 87
diff changeset
   105
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   106
   \<Longrightarrow> msgs_of_queue (enrich_msgq s q q') =  (msgs_of_queue s) (q' := msgs_of_queue s q)"
chunhan
parents: 87
diff changeset
   107
apply (rule ext, simp, rule conjI, rule impI)
chunhan
parents: 87
diff changeset
   108
apply (simp add:enrich_msgq_duq_sms)
chunhan
parents: 87
diff changeset
   109
apply (rule impI)
chunhan
parents: 87
diff changeset
   110
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   111
apply (frule vt_grant_os, frule vd_cons)
chunhan
parents: 87
diff changeset
   112
apply (case_tac a, auto)
chunhan
parents: 87
diff changeset
   113
done
chunhan
parents: 87
diff changeset
   114
chunhan
parents: 87
diff changeset
   115
lemma enrich_msgq_cur_procs:
chunhan
parents: 87
diff changeset
   116
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   117
   \<Longrightarrow> current_procs (enrich_msgq s q q') = current_procs s"
chunhan
parents: 87
diff changeset
   118
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   119
apply (frule vt_grant_os, frule vd_cons)
chunhan
parents: 87
diff changeset
   120
apply (case_tac a, auto)
chunhan
parents: 87
diff changeset
   121
done
chunhan
parents: 87
diff changeset
   122
  
chunhan
parents: 87
diff changeset
   123
lemma enrich_msgq_cur_files:
chunhan
parents: 87
diff changeset
   124
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   125
   \<Longrightarrow> current_files (enrich_msgq s q q') = current_files s"
chunhan
parents: 87
diff changeset
   126
apply (auto simp:current_files_def)
chunhan
parents: 87
diff changeset
   127
apply (simp add:enrich_msgq_cur_inof)+
chunhan
parents: 87
diff changeset
   128
done
chunhan
parents: 87
diff changeset
   129
chunhan
parents: 87
diff changeset
   130
lemma enrich_msgq_cur_fds:
chunhan
parents: 87
diff changeset
   131
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   132
   \<Longrightarrow> current_proc_fds (enrich_msgq s q q') = current_proc_fds s"
chunhan
parents: 87
diff changeset
   133
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   134
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
   135
apply auto
chunhan
parents: 87
diff changeset
   136
done
chunhan
parents: 87
diff changeset
   137
chunhan
parents: 87
diff changeset
   138
lemma enrich_msgq_filefd:
chunhan
parents: 87
diff changeset
   139
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   140
   \<Longrightarrow> file_of_proc_fd (enrich_msgq s q q') = file_of_proc_fd s"
chunhan
parents: 87
diff changeset
   141
apply (rule ext, rule ext)
chunhan
parents: 87
diff changeset
   142
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   143
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
   144
apply auto
chunhan
parents: 87
diff changeset
   145
done
chunhan
parents: 87
diff changeset
   146
chunhan
parents: 87
diff changeset
   147
lemma enrich_msgq_flagfd:
chunhan
parents: 87
diff changeset
   148
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   149
   \<Longrightarrow> flags_of_proc_fd (enrich_msgq s q q') = flags_of_proc_fd s"
chunhan
parents: 87
diff changeset
   150
apply (rule ext, rule ext)
chunhan
parents: 87
diff changeset
   151
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   152
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
   153
apply auto
chunhan
parents: 87
diff changeset
   154
done
chunhan
parents: 87
diff changeset
   155
chunhan
parents: 87
diff changeset
   156
lemma enrich_msgq_proc_fds:
chunhan
parents: 87
diff changeset
   157
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   158
   \<Longrightarrow> proc_file_fds (enrich_msgq s q q') = proc_file_fds s"
chunhan
parents: 87
diff changeset
   159
apply (auto simp:proc_file_fds_def enrich_msgq_filefd)
chunhan
parents: 87
diff changeset
   160
done
chunhan
parents: 87
diff changeset
   161
chunhan
parents: 87
diff changeset
   162
lemma enrich_msgq_hungs:
chunhan
parents: 87
diff changeset
   163
  "\<lbrakk>no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   164
   \<Longrightarrow> files_hung_by_del (enrich_msgq s q q') = files_hung_by_del s"
chunhan
parents: 87
diff changeset
   165
apply (induct s, simp)
chunhan
parents: 87
diff changeset
   166
apply (frule vt_grant_os, frule vd_cons, case_tac a)
chunhan
parents: 87
diff changeset
   167
apply (auto simp:files_hung_by_del.simps)
chunhan
parents: 87
diff changeset
   168
done
chunhan
parents: 87
diff changeset
   169
  
chunhan
parents: 87
diff changeset
   170
lemma enrich_msgq_is_file:
chunhan
parents: 87
diff changeset
   171
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   172
   \<Longrightarrow> is_file (enrich_msgq s q q') = is_file s"
chunhan
parents: 87
diff changeset
   173
apply (rule ext)
chunhan
parents: 87
diff changeset
   174
apply (auto simp add:is_file_def enrich_msgq_cur_itag enrich_msgq_cur_inof
chunhan
parents: 87
diff changeset
   175
  split:option.splits t_inode_tag.splits)
chunhan
parents: 87
diff changeset
   176
done
chunhan
parents: 87
diff changeset
   177
chunhan
parents: 87
diff changeset
   178
lemma enrich_msgq_is_dir:
chunhan
parents: 87
diff changeset
   179
  "\<lbrakk>q' \<notin> current_msgqs s; q \<in> current_msgqs s; no_del_event s; valid s\<rbrakk>
chunhan
parents: 87
diff changeset
   180
   \<Longrightarrow> is_dir (enrich_msgq s q q') = is_dir s"
chunhan
parents: 87
diff changeset
   181
apply (rule ext)
chunhan
parents: 87
diff changeset
   182
apply (auto simp add:is_dir_def enrich_msgq_cur_itag enrich_msgq_cur_inof
chunhan
parents: 87
diff changeset
   183
  split:option.splits t_inode_tag.splits)
chunhan
parents: 87
diff changeset
   184
done
chunhan
parents: 87
diff changeset
   185
chunhan
parents: 87
diff changeset
   186
lemma enrich_msgq_alive:
chunhan
parents: 87
diff changeset
   187
  "\<lbrakk>alive s obj; valid s; q \<in> current_msgqs s; q' \<notin> current_msgqs s; no_del_event s\<rbrakk>
chunhan
parents: 87
diff changeset
   188
   \<Longrightarrow> alive (enrich_msgq s q q') obj"
chunhan
parents: 87
diff changeset
   189
apply (case_tac obj)
chunhan
parents: 87
diff changeset
   190
apply (simp_all add:enrich_msgq_is_file enrich_msgq_is_dir enrich_msgq_cur_msgqs 
chunhan
parents: 87
diff changeset
   191
  enrich_msgq_cur_msgs enrich_msgq_cur_procs enrich_msgq_cur_fds
chunhan
parents: 87
diff changeset
   192
  enrich_msgq_cur_tcps enrich_msgq_cur_udps)
chunhan
parents: 87
diff changeset
   193
apply (rule impI, simp)
chunhan
parents: 87
diff changeset
   194
done
chunhan
parents: 87
diff changeset
   195
chunhan
parents: 87
diff changeset
   196
lemma enrich_msgq_alive':
chunhan
parents: 87
diff changeset
   197
  "\<lbrakk>alive (enrich_msgq s q q') obj; valid s; q \<in> current_msgqs s; q' \<notin> current_msgqs s; no_del_event s\<rbrakk>
chunhan
parents: 87
diff changeset
   198
   \<Longrightarrow> alive s obj \<or> obj = O_msgq q' \<or> (\<exists> m. obj = O_msg q' m \<and> alive s (O_msg q m))"
chunhan
parents: 87
diff changeset
   199
apply (case_tac obj)
chunhan
parents: 87
diff changeset
   200
apply (simp_all add:enrich_msgq_is_file enrich_msgq_is_dir enrich_msgq_cur_msgqs 
chunhan
parents: 87
diff changeset
   201
  enrich_msgq_cur_msgs enrich_msgq_cur_procs enrich_msgq_cur_fds
chunhan
parents: 87
diff changeset
   202
  enrich_msgq_cur_tcps enrich_msgq_cur_udps)
chunhan
parents: 87
diff changeset
   203
apply (auto split:if_splits)
chunhan
parents: 87
diff changeset
   204
done
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   205
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   206
(* enrich s target_proc duplicated_pro *)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   207
fun enrich_proc :: "t_state \<Rightarrow> t_process \<Rightarrow> t_process \<Rightarrow> t_state"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   208
where 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   209
  "enrich_proc [] tp dp = []"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   210
| "enrich_proc (Execve p f fds # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   211
     if (tp = p) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   212
     then Execve dp f (fds \<inter> proc_file_fds s p) # Execve p f fds # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   213
     else Execve p f fds # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   214
| "enrich_proc (Clone p p' fds # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   215
     if (tp = p') 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   216
     then Clone p dp (fds \<inter> proc_file_fds s p) # Clone p p' fds # s
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   217
     else Clone p p' fds # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   218
| "enrich_proc (Open p f flags fd opt # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   219
     if (tp = p)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   220
     then Open dp f (remove_create_flag flags) fd None # Open p f flags fd opt # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   221
     else Open p f flags fd opt # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   222
| "enrich_proc (ReadFile p fd # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   223
     if (tp = p) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   224
     then ReadFile dp fd # ReadFile p fd # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   225
     else ReadFile p fd # (enrich_proc s tp dp))"
88
chunhan
parents: 87
diff changeset
   226
| "enrich_proc (RecvMsg p q m # s) tp dp = (
chunhan
parents: 87
diff changeset
   227
     if (tp = p) 
chunhan
parents: 87
diff changeset
   228
     then let dq = new_msgq (enrich_proc s tp dp) in
chunhan
parents: 87
diff changeset
   229
          RecvMsg dp dq m # RecvMsg p q m # (enrich_msgq (enrich_proc s tp dp) q dq)
chunhan
parents: 87
diff changeset
   230
     else RecvMsg p q m # (enrich_proc s tp dp))"
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   231
(*
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   232
| "enrich_proc (CloseFd p fd # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   233
     if (tp = p \<and> fd \<in> proc_file_fds s p)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   234
     then CloseFd dp fd # CloseFd p fd # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   235
     else CloseFd p fd # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   236
*)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   237
(*
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   238
| "enrich_proc (Attach p h flag # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   239
     if (tp = p)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   240
     then Attach dp h flag # Attach p h flag # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   241
     else Attach p h flag # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   242
| "enrich_proc (Detach p h # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   243
     if (tp = p) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   244
     then Detach dp h # Detach p h # (enrich_proc s tp dp)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   245
     else Detach p h # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   246
*)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   247
(*
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   248
| "enrich_proc (Kill p p' # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   249
     if (tp = p') then Kill p p' # s
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   250
     else Kill p p' # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   251
| "enrich_proc (Exit p # s) tp dp = (
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   252
     if (tp = p) then Exit p # s
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   253
     else Exit p # (enrich_proc s tp dp))"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   254
*)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   255
| "enrich_proc (e # s) tp dp = e # (enrich_proc s tp dp)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   256
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   257
definition is_created_proc:: "t_state \<Rightarrow> t_process \<Rightarrow> bool"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   258
where
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   259
  "is_created_proc s p \<equiv> p \<in> current_procs s \<and> (p \<in> init_procs \<longrightarrow> died (O_proc p) s)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   260
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   261
definition is_created_proc':: "t_state \<Rightarrow> t_process \<Rightarrow> bool"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   262
where
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   263
  "is_created_proc' s p \<equiv> p \<in> current_procs s \<and> p \<notin> init_procs"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   264
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   265
lemma created_proc_clone:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   266
  "valid (Clone p p' fds # s) \<Longrightarrow> 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   267
   is_created_proc (Clone p p' fds # s) tp = (if (tp = p') then True else is_created_proc s tp)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   268
apply (drule vt_grant_os)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   269
apply (auto simp:is_created_proc_def dest:not_all_procs_prop2)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   270
using not_died_init_proc
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   271
by auto
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   272
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   273
lemma created_proc_exit: 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   274
  "is_created_proc (Exit p # s) tp = (if (tp = p) then False else is_created_proc s tp)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   275
by (simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   276
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   277
lemma created_proc_kill:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   278
  "is_created_proc (Kill p p' # s) tp = (if (tp = p') then False else is_created_proc s tp)"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   279
by (simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   280
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   281
lemma created_proc_other:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   282
  "\<lbrakk>\<And> p p' fds. e \<noteq> Clone p p' fds;
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   283
    \<And> p. e \<noteq> Exit p;
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   284
    \<And> p p'. e \<noteq> Kill p p'\<rbrakk> \<Longrightarrow> is_created_proc (e # s) tp = is_created_proc s tp"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   285
by (case_tac e, auto simp:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   286
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   287
lemmas is_created_proc_simps = created_proc_clone created_proc_exit created_proc_kill created_proc_other
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   288
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   289
lemma no_del_died:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   290
  "\<lbrakk>no_del_event s; died obj s\<rbrakk> \<Longrightarrow> (\<exists> p fd. obj = O_fd p fd \<or> obj = O_tcp_sock (p, fd) \<or> obj = O_udp_sock (p, fd))
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   291
  \<or> (\<exists> q m. obj = O_msg q m) "
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   292
apply (induct s)
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   293
apply simp
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   294
apply (case_tac a)
82
chunhan
parents:
diff changeset
   295
apply (auto split:option.splits)
chunhan
parents:
diff changeset
   296
done
chunhan
parents:
diff changeset
   297
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   298
lemma no_del_created_eq:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   299
  "no_del_event s \<Longrightarrow> is_created_proc s p = is_created_proc' s p"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   300
apply (induct s)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   301
apply (simp add:is_created_proc_def is_created_proc'_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   302
apply (case_tac a)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   303
apply (auto simp add:is_created_proc_def is_created_proc'_def dest:no_del_died)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   304
done
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   305
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   306
lemma enrich_proc_dup_in:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   307
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   308
   \<Longrightarrow> p' \<in> current_procs (enrich_proc s p p')"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   309
apply (induct s, simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   310
apply (frule vt_grant_os, frule vd_cons)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   311
apply (case_tac a, auto simp:is_created_proc_def dest:not_all_procs_prop3)
82
chunhan
parents:
diff changeset
   312
done
chunhan
parents:
diff changeset
   313
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   314
lemma enrich_proc_dup_ffd:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   315
  "\<lbrakk>file_of_proc_fd s p fd = Some f; is_created_proc s p; p' \<notin> all_procs s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   316
   \<Longrightarrow> file_of_proc_fd (enrich_proc s p p') p' fd = Some f"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   317
apply (induct s, simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   318
apply (frule vt_grant_os, frule vd_cons)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   319
apply (case_tac a, auto simp:is_created_proc_def proc_file_fds_def
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   320
  dest:not_all_procs_prop3 split:if_splits option.splits)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   321
done 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   322
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   323
lemma enrich_proc_dup_ffd':
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   324
  "\<lbrakk>file_of_proc_fd (enrich_proc s p p') p' fd = Some f; is_created_proc s p; p' \<notin> all_procs s;
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   325
    no_del_event s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   326
   \<Longrightarrow> file_of_proc_fd s p fd = Some f"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   327
apply (induct s, simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   328
apply (frule vt_grant_os, frule vd_cons)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   329
apply (case_tac a, auto simp:is_created_proc_def proc_file_fds_def
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   330
  dest:not_all_procs_prop3 split:if_splits option.splits)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   331
done 
82
chunhan
parents:
diff changeset
   332
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   333
lemma enrich_proc_dup_ffds':
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   334
  "\<lbrakk>fd \<notin> current_proc_fds (enrich_proc s p p') p'; is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   335
   \<Longrightarrow> fd \<notin> proc_file_fds s p \<and> file_of_proc_fd s p fd = None"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   336
apply (auto simp:enrich_proc_dup_ffds_eq_fds)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   337
apply (simp add:proc_file_fds_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   338
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   339
87
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   340
lemma enrich_proc_dup_ffd_eq:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   341
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   342
  \<Longrightarrow> file_of_proc_fd (enrich_proc s p p') p' fd = file_of_proc_fd s p fd"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   343
apply (case_tac "file_of_proc_fd s p fd")
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   344
apply (case_tac[!] "file_of_proc_fd (enrich_proc s p p') p' fd")
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   345
apply (auto dest:enrich_proc_dup_ffd enrich_proc_dup_ffd')
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   346
done
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   347
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   348
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   349
lemma enrich_proc_dup_fflags:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   350
  "\<lbrakk>flags_of_proc_fd s p fd = Some flag; is_created_proc s p; p' \<notin> all_procs s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   351
   \<Longrightarrow> flags_of_proc_fd (enrich_proc s p p') p' fd = Some (remove_create_flag flag) \<or>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   352
       flags_of_proc_fd (enrich_proc s p p') p' fd = Some flag"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   353
apply (induct s arbitrary:p, simp add:is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   354
apply (frule vt_grant_os, frule vd_cons)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   355
apply (case_tac a, auto simp:is_created_proc_def proc_file_fds_def is_creat_flag_def
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   356
  dest:not_all_procs_prop3 split:if_splits option.splits)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   357
done
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   358
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   359
lemma enrich_proc_dup_ffds:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   360
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   361
   \<Longrightarrow> proc_file_fds (enrich_proc s p p') p' = proc_file_fds s p"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   362
apply (auto simp:proc_file_fds_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   363
apply (rule_tac x = f in exI) 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   364
apply (erule enrich_proc_dup_ffd', simp+)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   365
apply (rule_tac x = f in exI)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   366
apply (erule enrich_proc_dup_ffd, simp+)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   367
done
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   368
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   369
lemma enrich_proc_dup_ffds_eq_fds:
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   370
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   371
   \<Longrightarrow> current_proc_fds (enrich_proc s p p') p' = proc_file_fds s p"
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   372
apply (induct s arbitrary:p)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   373
apply (simp add: is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   374
apply (frule not_all_procs_prop3)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   375
apply (frule vd_cons, frule vt_grant_os, case_tac a)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   376
apply (auto split:if_splits option.splits dest:proc_fd_in_fds set_mp not_all_procs_prop3 
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   377
  simp:proc_file_fds_def is_created_proc_def)
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   378
done
8d18cfc845dd remove init message queue
chunhan
parents: 86
diff changeset
   379
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   380
lemma enrich_proc_cur_inof:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   381
  "\<lbrakk>valid s; no_del_event s\<rbrakk> \<Longrightarrow> inum_of_file (enrich_proc s p p') f = inum_of_file s f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   382
apply (induct s arbitrary:f)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   383
apply simp
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   384
apply (frule vd_cons, frule vt_grant_os, frule vt_grant)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   385
apply (case_tac a, auto)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   386
apply (auto split:option.splits simp del:grant.simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   387
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   388
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   389
lemma not_all_procs_sock:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   390
  "\<lbrakk>p' \<notin> all_procs s; valid s\<rbrakk> \<Longrightarrow> inum_of_socket s (p', fd) = None"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   391
apply (frule not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   392
apply (case_tac "inum_of_socket s (p', fd)", simp_all)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   393
apply (drule cn_in_curp', simp+)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   394
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   395
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   396
lemma enrich_proc_cur_inos:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   397
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   398
   \<Longrightarrow> inum_of_socket (enrich_proc s p p') (tp, fd) = inum_of_socket s (tp, fd)"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   399
apply (induct s arbitrary:tp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   400
apply simp
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   401
apply (frule vd_cons, frule vt_grant_os)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   402
apply (case_tac a, auto split:option.splits simp:not_all_procs_sock)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   403
apply (simp add:proc_file_fds_def, erule exE)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   404
apply (case_tac "inum_of_socket s (nat1, fd)", simp_all)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   405
apply (drule filefd_socket_conflict, simp_all add:current_sockets_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   406
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   407
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   408
lemma enrich_proc_cur_inums:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   409
  "\<lbrakk>p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   410
   \<Longrightarrow> current_inode_nums (enrich_proc s p p') = current_inode_nums s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   411
apply (auto simp:current_inode_nums_def current_file_inums_def 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   412
  current_sock_inums_def enrich_proc_cur_inof enrich_proc_cur_inos)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   413
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   414
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   415
lemma enrich_proc_cur_itag:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   416
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   417
   \<Longrightarrow> itag_of_inum (enrich_proc s p p') i = itag_of_inum s i"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   418
apply (induct s)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   419
apply simp
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   420
apply (frule vd_cons, frule vt_grant_os)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   421
apply (case_tac a, auto split:option.splits t_socket_type.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   422
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   423
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   424
lemma enrich_proc_cur_tcps:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   425
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   426
   \<Longrightarrow> is_tcp_sock (enrich_proc s p p') = is_tcp_sock s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   427
apply (rule ext, case_tac x)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   428
apply (auto simp add:is_tcp_sock_def enrich_proc_cur_itag enrich_proc_cur_inos
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   429
  split:option.splits t_inode_tag.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   430
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   431
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   432
lemma enrich_proc_cur_udps:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   433
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   434
   \<Longrightarrow> is_udp_sock (enrich_proc s p p') = is_udp_sock s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   435
apply (rule ext, case_tac x)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   436
apply (auto simp add:is_udp_sock_def enrich_proc_cur_itag enrich_proc_cur_inos
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   437
  split:option.splits t_inode_tag.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   438
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   439
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   440
lemma enrich_proc_cur_msgqs:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   441
  "valid s \<Longrightarrow> current_msgqs (enrich_proc s p p') = current_msgqs s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   442
apply (induct s, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   443
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   444
apply (case_tac a, auto)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   445
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   446
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   447
lemma enrich_proc_cur_msgs:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   448
  "valid s \<Longrightarrow> msgs_of_queue (enrich_proc s p p') q = msgs_of_queue s q "
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   449
apply (induct s, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   450
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   451
apply (case_tac a, auto)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   452
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   453
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   454
lemma enrich_proc_cur_procs:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   455
  "\<lbrakk>p' \<notin> all_procs s; no_del_event s; is_created_proc s p; valid s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   456
   \<Longrightarrow> current_procs (enrich_proc s p p') = current_procs s \<union> {p'}"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   457
apply (induct s, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   458
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   459
apply (case_tac a, auto simp:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   460
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   461
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   462
lemma enrich_proc_cur_files:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   463
  "\<lbrakk>valid s; no_del_event s\<rbrakk> \<Longrightarrow> current_files (enrich_proc s p p') = current_files s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   464
apply (auto simp:current_files_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   465
apply (simp add: enrich_proc_cur_inof)+
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   466
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   467
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   468
lemma enrich_proc_cur_fds1:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   469
  "\<lbrakk>p' \<notin> all_procs s; no_del_event s; is_created_proc s p; valid s; tp \<in> current_procs s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   470
   \<Longrightarrow> current_proc_fds (enrich_proc s p p') tp = current_proc_fds s tp"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   471
apply (induct s, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   472
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   473
apply (frule not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   474
apply (case_tac a)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   475
apply (auto simp:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   476
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   477
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   478
lemma enrich_proc_cur_fds1':
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   479
  "\<lbrakk>p' \<notin> all_procs s; no_del_event s; is_created_proc s p; valid s; tp \<noteq> p'\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   480
   \<Longrightarrow> current_proc_fds (enrich_proc s p p') tp = current_proc_fds s tp"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   481
apply (induct s, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   482
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   483
apply (frule not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   484
apply (case_tac a)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   485
apply (auto simp:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   486
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   487
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   488
lemma enrich_proc_cur_fds:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   489
  "\<lbrakk>p' \<notin> all_procs s; no_del_event s; is_created_proc s p; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   490
   \<Longrightarrow> current_proc_fds (enrich_proc s p p') tp = (if (tp = p') then proc_file_fds s p else current_proc_fds s tp)"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   491
apply (simp add:enrich_proc_cur_fds1' enrich_proc_dup_ffds_eq_fds split:if_splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   492
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   493
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   494
lemma enrich_proc_not_alive:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   495
  "\<lbrakk>enrich_not_alive s (E_proc p') obj; is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   496
  \<Longrightarrow> enrich_not_alive (enrich_proc s p p') (E_proc p') obj"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   497
apply (case_tac obj)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   498
apply (simp_all add:enrich_proc_cur_procs enrich_proc_cur_files enrich_proc_cur_inums 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   499
  enrich_proc_cur_msgqs enrich_proc_cur_msgs enrich_proc_cur_fds)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   500
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   501
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   502
lemma enrich_proc_filefd:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   503
  "\<lbrakk>file_of_proc_fd s tp fd = Some f; is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   504
  \<Longrightarrow> file_of_proc_fd (enrich_proc s p p') tp fd = Some f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   505
apply (induct s arbitrary:tp, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   506
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   507
apply (frule not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   508
apply (case_tac a)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   509
apply (auto simp:is_created_proc_simps dest:proc_fd_in_procs split:if_splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   510
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   511
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   512
lemma enrich_proc_flagfd:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   513
  "\<lbrakk>flags_of_proc_fd s tp fd = Some f; is_created_proc s p; p' \<notin> all_procs s; no_del_event s; valid s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   514
  \<Longrightarrow> flags_of_proc_fd (enrich_proc s p p') tp fd = Some f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   515
apply (induct s arbitrary:tp, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   516
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   517
apply (frule not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   518
apply (case_tac a)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   519
apply (auto simp:is_created_proc_simps dest:proc_fd_in_procs current_fflag_has_ffd split:if_splits option.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   520
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   521
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   522
lemma enrich_proc_hungs:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   523
  "\<lbrakk>valid s; no_del_event s\<rbrakk> \<Longrightarrow> files_hung_by_del (enrich_proc s p p') = files_hung_by_del s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   524
apply (induct s, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   525
apply (frule vt_grant_os, frule vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   526
apply (case_tac a, auto simp:files_hung_by_del.simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   527
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   528
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   529
lemma enrich_proc_is_file:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   530
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   531
   \<Longrightarrow> is_file (enrich_proc s p p') = is_file s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   532
apply (rule ext, case_tac x)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   533
apply (auto simp add:is_file_def enrich_proc_cur_itag enrich_proc_cur_inof
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   534
  split:option.splits t_inode_tag.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   535
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   536
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   537
lemma enrich_proc_is_dir:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   538
  "\<lbrakk>valid s; no_del_event s; p' \<notin> all_procs s\<rbrakk> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   539
   \<Longrightarrow> is_dir (enrich_proc s p p') = is_dir s"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   540
apply (rule ext, case_tac x)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   541
apply (auto simp add:is_dir_def enrich_proc_cur_itag enrich_proc_cur_inof
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   542
  split:option.splits t_inode_tag.splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   543
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   544
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   545
lemma enrich_proc_alive:
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   546
  "\<lbrakk>alive s obj; valid s; is_created_proc s p; p' \<notin> all_procs s; no_del_event s\<rbrakk>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   547
   \<Longrightarrow> alive (enrich_proc s p p') obj"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   548
apply (case_tac obj)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   549
apply (simp_all add:enrich_proc_is_file enrich_proc_is_dir enrich_proc_cur_msgqs 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   550
  enrich_proc_cur_msgs enrich_proc_cur_procs enrich_proc_cur_fds
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   551
  enrich_proc_cur_tcps enrich_proc_cur_udps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   552
apply (rule impI, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   553
apply (drule current_proc_fds_in_curp, simp, simp add:not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   554
done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   555
82
chunhan
parents:
diff changeset
   556
lemma enrich_proc_prop:
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   557
  "\<lbrakk>valid s; is_created_proc s p; p' \<notin> all_procs s; no_del_event s\<rbrakk>
82
chunhan
parents:
diff changeset
   558
   \<Longrightarrow> valid (enrich_proc s p p') \<and> 
chunhan
parents:
diff changeset
   559
       (\<forall> tp. tp \<in> current_procs s \<longrightarrow> cp2sproc (enrich_proc s p p') tp = cp2sproc s tp) \<and>
chunhan
parents:
diff changeset
   560
       (\<forall> f. f \<in> current_files s \<longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f) \<and> 
chunhan
parents:
diff changeset
   561
       (\<forall> q. q \<in> current_msgqs s \<longrightarrow> cq2smsgq (enrich_proc s p p') q = cq2smsgq s q) \<and> 
chunhan
parents:
diff changeset
   562
       (\<forall> tp fd. fd \<in> proc_file_fds s tp \<longrightarrow> cfd2sfd (enrich_proc s p p') tp fd = cfd2sfd s tp fd) \<and>
chunhan
parents:
diff changeset
   563
       (cp2sproc (enrich_proc s p p') p' = cp2sproc s p) \<and>
chunhan
parents:
diff changeset
   564
       (\<forall> fd. fd \<in> proc_file_fds s p \<longrightarrow> cfd2sfd (enrich_proc s p p') p' fd = cfd2sfd s p fd)"
chunhan
parents:
diff changeset
   565
proof (induct s)
chunhan
parents:
diff changeset
   566
  case Nil
chunhan
parents:
diff changeset
   567
  thus ?case by (auto simp:is_created_proc_def)
chunhan
parents:
diff changeset
   568
next
chunhan
parents:
diff changeset
   569
  case (Cons e s)
83
chunhan
parents: 82
diff changeset
   570
  hence vd_cons': "valid (e # s)" and created_cons: "is_created_proc (e # s) p"
82
chunhan
parents:
diff changeset
   571
    and all_procs_cons: "p' \<notin> all_procs (e # s)" and vd: "valid s" 
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   572
    and os: "os_grant s e" and grant: "grant s e" 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   573
    and nodel_cons: "no_del_event (e # s)"
83
chunhan
parents: 82
diff changeset
   574
    by (auto dest:vd_cons' vt_grant_os vt_grant)
82
chunhan
parents:
diff changeset
   575
  from all_procs_cons have all_procs: "p' \<notin> all_procs s" by (case_tac e, auto)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   576
  from nodel_cons have nodel: "no_del_event s" by (case_tac e, auto)
82
chunhan
parents:
diff changeset
   577
  from Cons have pre: "is_created_proc s p \<Longrightarrow> valid (enrich_proc s p p') \<and>
chunhan
parents:
diff changeset
   578
     (\<forall>tp. tp \<in> current_procs s \<longrightarrow> cp2sproc (enrich_proc s p p') tp = cp2sproc s tp) \<and>
chunhan
parents:
diff changeset
   579
     (\<forall>f. f \<in> current_files s \<longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f) \<and>
chunhan
parents:
diff changeset
   580
     (\<forall>q. q \<in> current_msgqs s \<longrightarrow> cq2smsgq (enrich_proc s p p') q = cq2smsgq s q) \<and>
chunhan
parents:
diff changeset
   581
     (\<forall>tp fd. fd \<in> proc_file_fds s tp \<longrightarrow> cfd2sfd (enrich_proc s p p') tp fd = cfd2sfd s tp fd) \<and>     
chunhan
parents:
diff changeset
   582
     (cp2sproc (enrich_proc s p p') p' = cp2sproc s p) \<and>
chunhan
parents:
diff changeset
   583
     (\<forall> fd. fd \<in> proc_file_fds s p \<longrightarrow> cfd2sfd (enrich_proc s p p') p' fd = cfd2sfd s p fd)"
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   584
    using vd all_procs nodel by auto
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   585
  
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   586
  from pre have pre_vd: "is_created_proc s p \<Longrightarrow> valid (enrich_proc s p p')" by simp
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   587
  have vd_enrich:"is_created_proc s p \<Longrightarrow> valid (e # enrich_proc s p p')" 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   588
    apply (frule pre_vd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   589
    apply (erule_tac s = s and obj' = "E_proc p'" in enrich_valid_intro_cons)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   590
    apply (simp_all add: pre nodel_cons all_procs_cons vd_cons')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   591
    apply (clarsimp simp:enrich_proc_alive nodel all_procs vd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   592
    apply (rule allI, rule impI, erule enrich_proc_not_alive)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   593
    apply (simp_all add:nodel all_procs vd enrich_proc_hungs enrich_proc_cur_msgs)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   594
    apply ((rule allI| rule impI)+, erule enrich_proc_filefd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   595
    apply (simp_all add:nodel all_procs vd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   596
    apply ((rule allI| rule impI)+, erule enrich_proc_flagfd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   597
    apply (simp_all add:nodel all_procs vd)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   598
    done  
82
chunhan
parents:
diff changeset
   599
  have vd_enrich_cons: "valid (enrich_proc (e # s) p p')"
chunhan
parents:
diff changeset
   600
  proof-
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   601
    have "\<And>f fds. \<lbrakk>valid (Execve p f fds # enrich_proc s p p'); is_created_proc s p; 
82
chunhan
parents:
diff changeset
   602
      valid (Execve p f fds # s); p' \<notin> all_procs s\<rbrakk>
chunhan
parents:
diff changeset
   603
      \<Longrightarrow> valid (Execve p' f (fds \<inter> proc_file_fds s p) # Execve p f fds # enrich_proc s p p')"
chunhan
parents:
diff changeset
   604
    proof-
chunhan
parents:
diff changeset
   605
      fix f fds
chunhan
parents:
diff changeset
   606
      assume a1: "valid (Execve p f fds # enrich_proc s p p')" and a2: "is_created_proc s p"
chunhan
parents:
diff changeset
   607
        and a3: "valid (Execve p f fds # s)" and a0: "p' \<notin> all_procs s"
chunhan
parents:
diff changeset
   608
      have cp2sp: "\<forall> tp. tp \<in> current_procs s \<longrightarrow> cp2sproc (enrich_proc s p p') tp = cp2sproc s tp"
chunhan
parents:
diff changeset
   609
        and cf2sf: "\<forall> tf. tf \<in> current_files s \<longrightarrow> cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
chunhan
parents:
diff changeset
   610
        and cfd2sfd: "\<forall> tp tfd. tfd \<in> proc_file_fds s tp \<longrightarrow> cfd2sfd (enrich_proc s p p') tp tfd = cfd2sfd s tp tfd"
chunhan
parents:
diff changeset
   611
        and dup_sp: "cp2sproc (enrich_proc s p p') p' = cp2sproc s p"
chunhan
parents:
diff changeset
   612
        and dup_sfd: "\<forall> fd. fd \<in> proc_file_fds s p \<longrightarrow> cfd2sfd (enrich_proc s p p') p' fd = cfd2sfd s p fd"
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   613
        using pre a2
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   614
        by auto
82
chunhan
parents:
diff changeset
   615
      show "valid (Execve p' f (fds \<inter> proc_file_fds s p) # Execve p f fds # enrich_proc s p p')"
chunhan
parents:
diff changeset
   616
      proof-
chunhan
parents:
diff changeset
   617
        from a0 a3 have a0': "p' \<noteq> p" by (auto dest!:vt_grant_os not_all_procs_prop3)
chunhan
parents:
diff changeset
   618
        from a3 have grant: "grant s (Execve p f fds)" and os: "os_grant s (Execve p f fds)"
chunhan
parents:
diff changeset
   619
          by (auto dest:vt_grant_os vt_grant simp del:os_grant.simps)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   620
        have f_in: "is_file (enrich_proc s p p') f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   621
          using vd nodel os all_procs
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   622
          by (auto dest:vt_grant_os simp:enrich_proc_is_file)
82
chunhan
parents:
diff changeset
   623
        moreover have a5: "proc_file_fds s p \<subseteq> proc_file_fds (Execve p f fds # enrich_proc s p p') p'" 
chunhan
parents:
diff changeset
   624
          using a3 a0'
chunhan
parents:
diff changeset
   625
          apply (frule_tac vt_grant_os)
chunhan
parents:
diff changeset
   626
          apply (auto simp:proc_file_fds_def)
chunhan
parents:
diff changeset
   627
          apply (rule_tac x = fa in exI)
chunhan
parents:
diff changeset
   628
          apply (erule enrich_proc_dup_ffd)
chunhan
parents:
diff changeset
   629
          apply (simp_all add:vd all_procs a2)
chunhan
parents:
diff changeset
   630
          done
chunhan
parents:
diff changeset
   631
        ultimately have "os_grant (Execve p f fds # enrich_proc s p p') (Execve p' f (fds \<inter> proc_file_fds s p))"
chunhan
parents:
diff changeset
   632
          apply (auto simp:is_file_simps enrich_proc_dup_in a2 vd all_procs a1 enrich_proc_dup_ffds)
chunhan
parents:
diff changeset
   633
          done
chunhan
parents:
diff changeset
   634
        moreover have "grant (Execve p f fds # enrich_proc s p p') (Execve p' f (fds \<inter> proc_file_fds s p))"
chunhan
parents:
diff changeset
   635
        proof-
chunhan
parents:
diff changeset
   636
          from grant obtain up rp tp uf rf tf 
chunhan
parents:
diff changeset
   637
            where p1: "sectxt_of_obj s (O_proc p) = Some (up, rp, tp)"
chunhan
parents:
diff changeset
   638
            and p2: "sectxt_of_obj s (O_file f) = Some (uf, rf, tf)" 
chunhan
parents:
diff changeset
   639
            by (simp split:option.splits, blast)
chunhan
parents:
diff changeset
   640
          with grant obtain pu nr nt where p3: "npctxt_execve (up, rp, tp) (uf, rf, tf) = Some (pu, nr, nt)"
chunhan
parents:
diff changeset
   641
            by (simp split:option.splits del:npctxt_execve.simps, blast)
chunhan
parents:
diff changeset
   642
          have p1': "sectxt_of_obj (Execve p f fds # enrich_proc s p p') (O_proc p') = Some (up, rp, tp)"
chunhan
parents:
diff changeset
   643
            using p1 dup_sp a1 a0'
chunhan
parents:
diff changeset
   644
            apply (simp add:sectxt_of_obj_simps)
chunhan
parents:
diff changeset
   645
            by (simp add:cp2sproc_def split:option.splits)
chunhan
parents:
diff changeset
   646
          from os have f_in': "is_file s f"  by simp 
chunhan
parents:
diff changeset
   647
          from vd os have "\<exists> sf. cf2sfile s f = Some sf"
chunhan
parents:
diff changeset
   648
            by (auto dest!:is_file_in_current current_file_has_sfile)
chunhan
parents:
diff changeset
   649
          hence p2': "sectxt_of_obj (Execve p f fds # enrich_proc s p p') (O_file f) = Some (uf, rf, tf)" 
chunhan
parents:
diff changeset
   650
            using f_in p2 cf2sf os a1
chunhan
parents:
diff changeset
   651
            apply (erule_tac x = f in allE)
chunhan
parents:
diff changeset
   652
            apply (auto dest:is_file_in_current simp:cf2sfile_def sectxt_of_obj_simps split:option.splits)
chunhan
parents:
diff changeset
   653
            apply (case_tac f, simp)
chunhan
parents:
diff changeset
   654
            apply (drule_tac s = s in root_is_dir', simp add:vd, simp+)
chunhan
parents:
diff changeset
   655
            done 
chunhan
parents:
diff changeset
   656
          from dup_sfd a5 have "\<forall>fd. fd \<in> proc_file_fds s p \<longrightarrow> 
chunhan
parents:
diff changeset
   657
            cfd2sfd (Execve p f fds # enrich_proc s p p') p' fd = cfd2sfd s p fd"
chunhan
parents:
diff changeset
   658
            apply (rule_tac allI)
chunhan
parents:
diff changeset
   659
            apply (erule_tac x = fd in allE, clarsimp)
chunhan
parents:
diff changeset
   660
            apply (drule set_mp, simp)
chunhan
parents:
diff changeset
   661
            apply (auto simp:cfd2sfd_execve proc_file_fds_def a1)
chunhan
parents:
diff changeset
   662
            done
chunhan
parents:
diff changeset
   663
          hence "inherit_fds_check (Execve p f fds # enrich_proc s p p') (up, nr, nt) p' (fds \<inter> proc_file_fds s p)"
chunhan
parents:
diff changeset
   664
            using grant os p1 p2 p3 vd
chunhan
parents:
diff changeset
   665
            apply (clarsimp)
chunhan
parents:
diff changeset
   666
            apply (rule_tac s = s and p = p and fds = fds in enrich_inherit_fds_check_dup)
chunhan
parents:
diff changeset
   667
            apply simp_all
chunhan
parents:
diff changeset
   668
            done
chunhan
parents:
diff changeset
   669
          moreover have "search_check (Execve p f fds # enrich_proc s p p') (up, rp, tp) f"
chunhan
parents:
diff changeset
   670
            using p1 p2 p2' vd cf2sf f_in f_in' grant p3 f_in a1
chunhan
parents:
diff changeset
   671
            apply (rule_tac s = s in enrich_search_check)
chunhan
parents:
diff changeset
   672
            apply (simp_all add:is_file_simps)
chunhan
parents:
diff changeset
   673
            apply (rule allI, rule impI, erule_tac x = fa in allE, simp)
chunhan
parents:
diff changeset
   674
            apply (drule_tac ff = fa in cf2sfile_other')
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   675
            apply (auto simp:a2 enrich_proc_cur_files nodel)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   676
            done
82
chunhan
parents:
diff changeset
   677
          ultimately show ?thesis 
chunhan
parents:
diff changeset
   678
            using p1' p2' p3
chunhan
parents:
diff changeset
   679
            apply (simp split:option.splits)
chunhan
parents:
diff changeset
   680
            using grant p1 p2
chunhan
parents:
diff changeset
   681
            apply simp
chunhan
parents:
diff changeset
   682
            done
chunhan
parents:
diff changeset
   683
        qed
chunhan
parents:
diff changeset
   684
        ultimately show ?thesis using a1
chunhan
parents:
diff changeset
   685
          by (erule_tac valid.intros(2), auto)
chunhan
parents:
diff changeset
   686
      qed
chunhan
parents:
diff changeset
   687
    qed
chunhan
parents:
diff changeset
   688
    moreover have "\<And>tp fds. \<lbrakk>valid (Clone tp p fds # s); p' \<noteq> p; p' \<notin> all_procs s\<rbrakk> \<Longrightarrow> 
chunhan
parents:
diff changeset
   689
      valid (Clone tp p' (fds \<inter> proc_file_fds s tp) # Clone tp p fds # s)"
chunhan
parents:
diff changeset
   690
      apply (frule vt_grant_os, frule vt_grant, drule not_all_procs_prop3)
chunhan
parents:
diff changeset
   691
      apply (rule valid.intros(2))
chunhan
parents:
diff changeset
   692
      apply (simp_all split:option.splits add:sectxt_of_obj_simps)
chunhan
parents:
diff changeset
   693
      apply (auto simp add:proc_file_fds_def)[1]
chunhan
parents:
diff changeset
   694
      apply (auto simp:inherit_fds_check_def sectxt_of_obj_simps sectxts_of_fds_def inherit_fds_check_ctxt_def)
chunhan
parents:
diff changeset
   695
      done
chunhan
parents:
diff changeset
   696
    moreover have "\<And>f flags fd opt. \<lbrakk>valid (Open p f flags fd opt # enrich_proc s p p'); 
chunhan
parents:
diff changeset
   697
      is_created_proc s p; valid (Open p f flags fd opt # s); p' \<notin> all_procs s\<rbrakk>
chunhan
parents:
diff changeset
   698
       \<Longrightarrow> valid (Open p' f (remove_create_flag flags) fd None # Open p f flags fd opt # enrich_proc s p p')"
chunhan
parents:
diff changeset
   699
    proof-
chunhan
parents:
diff changeset
   700
      fix f flags fd opt
chunhan
parents:
diff changeset
   701
      assume a1: "valid (Open p f flags fd opt # enrich_proc s p p')" and a2: "is_created_proc s p"
chunhan
parents:
diff changeset
   702
        and a3: "valid (Open p f flags fd opt # s)" and a4: "p' \<notin> all_procs s"
chunhan
parents:
diff changeset
   703
      have cp2sp: "\<forall> tp. tp \<in> current_procs s \<longrightarrow> cp2sproc (enrich_proc s p p') tp = cp2sproc s tp"
chunhan
parents:
diff changeset
   704
        and cf2sf: "\<forall> tf. tf \<in> current_files s \<longrightarrow> cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
chunhan
parents:
diff changeset
   705
        and cfd2sfd: "\<forall> tp tfd. tfd \<in> proc_file_fds s tp \<longrightarrow> cfd2sfd (enrich_proc s p p') tp tfd = cfd2sfd s tp tfd"
chunhan
parents:
diff changeset
   706
        and dup_sp: "cp2sproc (enrich_proc s p p') p' = cp2sproc s p"
chunhan
parents:
diff changeset
   707
        and dup_sfd: "\<forall> fd. fd \<in> proc_file_fds s p \<longrightarrow> cfd2sfd (enrich_proc s p p') p' fd = cfd2sfd s p fd"
chunhan
parents:
diff changeset
   708
        using pre a2 by auto
chunhan
parents:
diff changeset
   709
      from a4 a3 have a0: "p' \<noteq> p" by (auto dest!:vt_grant_os not_all_procs_prop3 split:option.splits)
chunhan
parents:
diff changeset
   710
      have a5: "p' \<in> current_procs (enrich_proc s p p')" 
chunhan
parents:
diff changeset
   711
        using a2 a3 vd
chunhan
parents:
diff changeset
   712
        apply (erule_tac enrich_proc_dup_in)
chunhan
parents:
diff changeset
   713
        by (simp_all add:vd a4)
chunhan
parents:
diff changeset
   714
      have a6: "is_file (Open p f flags fd opt # enrich_proc s p p') f"
chunhan
parents:
diff changeset
   715
        using a1 a3
chunhan
parents:
diff changeset
   716
        by (auto simp:is_file_open dest:vt_grant_os)
chunhan
parents:
diff changeset
   717
      have a7: "fd \<notin> current_proc_fds (enrich_proc s p p') p'"
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   718
        using a2 a4 vd nodel
82
chunhan
parents:
diff changeset
   719
        apply (simp add:enrich_proc_dup_ffds_eq_fds)
chunhan
parents:
diff changeset
   720
        apply (rule notI)
chunhan
parents:
diff changeset
   721
        apply (drule_tac p = p in file_fds_subset_pfds)
chunhan
parents:
diff changeset
   722
        apply (drule set_mp, simp)
chunhan
parents:
diff changeset
   723
        using a3
chunhan
parents:
diff changeset
   724
        apply (drule_tac vt_grant_os)
chunhan
parents:
diff changeset
   725
        apply (auto split:option.splits)
chunhan
parents:
diff changeset
   726
        done
chunhan
parents:
diff changeset
   727
      from a1 have a8: "valid (enrich_proc s p p')" by (erule_tac valid.cases, auto)
chunhan
parents:
diff changeset
   728
      from a3 have grant: "grant s (Open p f flags fd opt)" and os: "os_grant s (Open p f flags fd opt)"
chunhan
parents:
diff changeset
   729
        by (auto dest:vt_grant_os vt_grant)
chunhan
parents:
diff changeset
   730
      show "valid (Open p' f (remove_create_flag flags) fd None # Open p f flags fd opt # enrich_proc s p p')"
chunhan
parents:
diff changeset
   731
      proof (cases opt)
chunhan
parents:
diff changeset
   732
        case None
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   733
        have f_in: "is_file (enrich_proc s p p') f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   734
          using vd nodel os all_procs None
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   735
          by (auto dest:vt_grant_os simp:enrich_proc_is_file) 
82
chunhan
parents:
diff changeset
   736
        from grant None obtain up rp tp uf rf tf 
chunhan
parents:
diff changeset
   737
          where p1: "sectxt_of_obj s (O_proc p) = Some (up, rp, tp)"
chunhan
parents:
diff changeset
   738
          and p2: "sectxt_of_obj s (O_file f) = Some (uf, rf, tf)" 
chunhan
parents:
diff changeset
   739
          apply (simp split:option.splits)
chunhan
parents:
diff changeset
   740
          by (case_tac a, case_tac aa, blast)
chunhan
parents:
diff changeset
   741
        have p1': "sectxt_of_obj (Open p f flags fd opt # enrich_proc s p p') (O_proc p') = Some (up, rp, tp)"
chunhan
parents:
diff changeset
   742
          using p1 dup_sp a1
chunhan
parents:
diff changeset
   743
          apply (simp add:sectxt_of_obj_simps)
chunhan
parents:
diff changeset
   744
          by (simp add:cp2sproc_def split:option.splits)
chunhan
parents:
diff changeset
   745
        from os None have f_in': "is_file s f" by simp 
chunhan
parents:
diff changeset
   746
        from vd os None have "\<exists> sf. cf2sfile s f = Some sf"
chunhan
parents:
diff changeset
   747
          by (auto dest!:is_file_in_current current_file_has_sfile)
chunhan
parents:
diff changeset
   748
        hence p2': "sectxt_of_obj (Open p f flags fd opt # enrich_proc s p p') (O_file f) = Some (uf, rf, tf)" 
chunhan
parents:
diff changeset
   749
          using p2 cf2sf os a1 None f_in' vd f_in
chunhan
parents:
diff changeset
   750
          apply (erule_tac x = f in allE)
chunhan
parents:
diff changeset
   751
          apply (auto dest:is_file_in_current simp:cf2sfile_def sectxt_of_obj_simps split:option.splits)
chunhan
parents:
diff changeset
   752
          apply (case_tac f, simp)
chunhan
parents:
diff changeset
   753
          apply (drule_tac s = s in root_is_dir', simp add:vd, simp+)
chunhan
parents:
diff changeset
   754
          done 
chunhan
parents:
diff changeset
   755
        have "search_check (Open p f flags fd opt # enrich_proc s p p') (up, rp, tp) f"
chunhan
parents:
diff changeset
   756
          using p1 p2 p2' vd cf2sf f_in f_in' grant f_in a1 None
chunhan
parents:
diff changeset
   757
          apply (rule_tac s = s in enrich_search_check)
chunhan
parents:
diff changeset
   758
          apply (simp_all add:is_file_simps)
chunhan
parents:
diff changeset
   759
          apply (rule allI, rule impI, erule_tac x = fa in allE, simp)
chunhan
parents:
diff changeset
   760
          apply (simp add:cf2sfile_open_none)
chunhan
parents:
diff changeset
   761
          done
chunhan
parents:
diff changeset
   762
        thus ?thesis using a0 a5 a6 a7 None a1
chunhan
parents:
diff changeset
   763
          apply (rule_tac valid.intros(2))
chunhan
parents:
diff changeset
   764
          apply (simp_all add:a1)
chunhan
parents:
diff changeset
   765
          apply (case_tac flags, simp add:is_creat_excl_flag_def)
chunhan
parents:
diff changeset
   766
          using p1' p2'
chunhan
parents:
diff changeset
   767
          apply simp
chunhan
parents:
diff changeset
   768
          using grant p1 p2
chunhan
parents:
diff changeset
   769
          apply (simp add:oflags_check_remove_create)
chunhan
parents:
diff changeset
   770
          done
chunhan
parents:
diff changeset
   771
      next
chunhan
parents:
diff changeset
   772
        case (Some inum)
chunhan
parents:
diff changeset
   773
        with os obtain pf where parent: "parent f = Some pf" by auto
chunhan
parents:
diff changeset
   774
        with grant Some obtain pu rp pt pfu pfr pft where
chunhan
parents:
diff changeset
   775
          p1: "sectxt_of_obj s (O_proc p) = Some (pu, rp, pt)" 
chunhan
parents:
diff changeset
   776
          and p2: "sectxt_of_obj s (O_dir pf) = Some (pfu, pfr, pft)"
chunhan
parents:
diff changeset
   777
          apply (simp split:option.splits)
chunhan
parents:
diff changeset
   778
          apply (case_tac a, case_tac aa, blast)
chunhan
parents:
diff changeset
   779
          done
chunhan
parents:
diff changeset
   780
        from p1 have p1': "sectxt_of_obj (enrich_proc s p p') (O_proc p) = Some (pu, rp, pt)"
chunhan
parents:
diff changeset
   781
          using cp2sp os
chunhan
parents:
diff changeset
   782
          apply (erule_tac x = p in allE)
chunhan
parents:
diff changeset
   783
          apply (auto split:option.splits simp:cp2sproc_def)
chunhan
parents:
diff changeset
   784
          done
chunhan
parents:
diff changeset
   785
        from os parent Some
chunhan
parents:
diff changeset
   786
        have pf_in: "is_dir s pf" by auto
chunhan
parents:
diff changeset
   787
        hence "\<exists> sf. cf2sfile s pf = Some sf" using vd
chunhan
parents:
diff changeset
   788
          by (auto dest!:is_dir_in_current current_file_has_sfile)
chunhan
parents:
diff changeset
   789
        from a1 parent Some have pf_in': "is_dir (enrich_proc s p p') pf" 
chunhan
parents:
diff changeset
   790
          apply (frule_tac vt_grant_os)
chunhan
parents:
diff changeset
   791
          by (clarsimp)
chunhan
parents:
diff changeset
   792
        have p2': "sectxt_of_obj (enrich_proc s p p') (O_dir pf) = Some (pfu, pfr, pft)"
chunhan
parents:
diff changeset
   793
        proof-
chunhan
parents:
diff changeset
   794
          have "cf2sfile (enrich_proc s p p') pf = cf2sfile s pf"
chunhan
parents:
diff changeset
   795
            using cf2sf pf_in
chunhan
parents:
diff changeset
   796
            apply (drule_tac is_dir_in_current)
chunhan
parents:
diff changeset
   797
            apply (erule_tac x = pf in allE)
chunhan
parents:
diff changeset
   798
            by simp
chunhan
parents:
diff changeset
   799
          with pf_in pf_in' p2 vd Some a8
chunhan
parents:
diff changeset
   800
          show ?thesis            
chunhan
parents:
diff changeset
   801
            apply (frule_tac is_dir_not_file)
chunhan
parents:
diff changeset
   802
            apply (frule_tac s = "enrich_proc s p p'" in is_dir_not_file)
chunhan
parents:
diff changeset
   803
            apply (simp add:cf2sfile_def)
chunhan
parents:
diff changeset
   804
            apply (case_tac pf, simp) 
chunhan
parents:
diff changeset
   805
            apply (simp add:sroot_def root_sec_remains)            
chunhan
parents:
diff changeset
   806
            by (auto split:option.splits dest!:current_has_sec' get_pfs_secs_prop' dest:parentf_is_dir_prop1)        
chunhan
parents:
diff changeset
   807
        qed
chunhan
parents:
diff changeset
   808
        from p1 have dup: "sectxt_of_obj (Open p f flags fd (Some inum) # enrich_proc s p p') (O_proc p') 
chunhan
parents:
diff changeset
   809
          = Some (pu, rp, pt)"
chunhan
parents:
diff changeset
   810
          using a1 Some
chunhan
parents:
diff changeset
   811
          apply (simp add:sec_open)
chunhan
parents:
diff changeset
   812
          using dup_sp
chunhan
parents:
diff changeset
   813
          apply (auto split:option.splits if_splits simp:cp2sproc_def)
chunhan
parents:
diff changeset
   814
          done        
chunhan
parents:
diff changeset
   815
        have nsf: "sectxt_of_obj (Open p f flags fd (Some inum) # enrich_proc s p p') (O_file f) 
chunhan
parents:
diff changeset
   816
          = Some (pu, R_object, type_transition pt pft C_file True)"
chunhan
parents:
diff changeset
   817
          using a1 Some p1 p2 parent p2' p1'
chunhan
parents:
diff changeset
   818
          by (simp add:sec_open)
chunhan
parents:
diff changeset
   819
        have "search_check (Open p f flags fd (Some inum) # enrich_proc s p p') (pu, rp, pt) f"
chunhan
parents:
diff changeset
   820
        proof-
chunhan
parents:
diff changeset
   821
          have "search_check (Open p f flags fd (Some inum) # enrich_proc s p p') (pu, rp, pt) pf"
chunhan
parents:
diff changeset
   822
            using grant Some parent p1 p2 vd a1 pf_in pf_in' p2'
chunhan
parents:
diff changeset
   823
            apply simp 
chunhan
parents:
diff changeset
   824
            apply (rule_tac s = s in enrich_search_check') 
chunhan
parents:
diff changeset
   825
            apply (simp_all add:is_dir_simps sectxt_of_obj_simps)
chunhan
parents:
diff changeset
   826
            apply (rule allI, rule impI)
chunhan
parents:
diff changeset
   827
            apply (case_tac "fa = f")
chunhan
parents:
diff changeset
   828
            using os Some
chunhan
parents:
diff changeset
   829
            apply simp
chunhan
parents:
diff changeset
   830
            apply (drule_tac f' = fa in cf2sfile_open)
chunhan
parents:
diff changeset
   831
            apply (simp add:current_files_simps)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   832
            using enrich_proc_cur_files a2 nodel
82
chunhan
parents:
diff changeset
   833
            apply simp
chunhan
parents:
diff changeset
   834
            apply simp
chunhan
parents:
diff changeset
   835
            using cf2sf
chunhan
parents:
diff changeset
   836
            apply simp
chunhan
parents:
diff changeset
   837
            done
chunhan
parents:
diff changeset
   838
          moreover have "is_file (Open p f flags fd (Some inum) # enrich_proc s p p') f"
chunhan
parents:
diff changeset
   839
            using a1 Some
chunhan
parents:
diff changeset
   840
            by (simp add:is_file_open)
chunhan
parents:
diff changeset
   841
          ultimately 
chunhan
parents:
diff changeset
   842
          show ?thesis
chunhan
parents:
diff changeset
   843
            using parent a1 Some nsf
chunhan
parents:
diff changeset
   844
            apply (erule_tac search_check_leveling_f)
chunhan
parents:
diff changeset
   845
            apply (simp_all)
chunhan
parents:
diff changeset
   846
            apply (simp add:search_check_file_def)
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   847
            (* create new file, grant only check pf's SEARCH permission, not newfile itself, so we make assumptions of this case in the locale *)
82
chunhan
parents:
diff changeset
   848
            apply (simp add:permission_check.simps)
chunhan
parents:
diff changeset
   849
            sorry
chunhan
parents:
diff changeset
   850
        qed
chunhan
parents:
diff changeset
   851
        thus ?thesis using a0 a5 a6 a7 a1 Some
chunhan
parents:
diff changeset
   852
          apply (rule_tac valid.intros(2))
chunhan
parents:
diff changeset
   853
          apply (simp add:a1)
chunhan
parents:
diff changeset
   854
          apply simp
chunhan
parents:
diff changeset
   855
          apply (case_tac flags, simp add:is_creat_excl_flag_def)
chunhan
parents:
diff changeset
   856
          using grant p1 p2 parent dup nsf
chunhan
parents:
diff changeset
   857
          apply (simp add:oflags_check_remove_create)
chunhan
parents:
diff changeset
   858
          done
chunhan
parents:
diff changeset
   859
      qed
chunhan
parents:
diff changeset
   860
    qed
chunhan
parents:
diff changeset
   861
    moreover have "\<And>fd. \<lbrakk>valid (CloseFd p fd # enrich_proc s p p'); is_created_proc s p; 
chunhan
parents:
diff changeset
   862
      valid (CloseFd p fd # s); p' \<notin> all_procs s; fd \<in> proc_file_fds s p\<rbrakk>
chunhan
parents:
diff changeset
   863
      \<Longrightarrow> valid (CloseFd p' fd # CloseFd p fd # enrich_proc s p p')"
chunhan
parents:
diff changeset
   864
    proof-
chunhan
parents:
diff changeset
   865
      fix fd
chunhan
parents:
diff changeset
   866
      assume a1: "valid (CloseFd p fd # enrich_proc s p p')" and a2: "is_created_proc s p" 
chunhan
parents:
diff changeset
   867
        and a3: "p' \<notin> all_procs s" and a4: "valid (CloseFd p fd # s)"
chunhan
parents:
diff changeset
   868
        and a5: "fd \<in> proc_file_fds s p"
chunhan
parents:
diff changeset
   869
      from a4 a3 have a0: "p' \<noteq> p" by (auto dest!:vt_grant_os not_all_procs_prop3)
chunhan
parents:
diff changeset
   870
      have "p' \<in> current_procs (enrich_proc s p p')" 
chunhan
parents:
diff changeset
   871
        using a2 a3 vd
chunhan
parents:
diff changeset
   872
        by (auto intro:enrich_proc_dup_in)
chunhan
parents:
diff changeset
   873
      moreover have "fd \<in> current_proc_fds (enrich_proc s p p') p'"      
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   874
        using a5 a2 a3 vd pre_vd nodel
82
chunhan
parents:
diff changeset
   875
        apply (simp)
chunhan
parents:
diff changeset
   876
        apply (drule_tac s = "enrich_proc s p p'" and p = p' in file_fds_subset_pfds)
chunhan
parents:
diff changeset
   877
        apply (erule set_mp)
chunhan
parents:
diff changeset
   878
        apply (simp add:enrich_proc_dup_ffds)
chunhan
parents:
diff changeset
   879
        done
chunhan
parents:
diff changeset
   880
      ultimately show "valid (CloseFd p' fd # CloseFd p fd # enrich_proc s p p')"
chunhan
parents:
diff changeset
   881
        apply (rule_tac valid.intros(2))
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   882
        apply (simp_all add:a1 a0 a2 pre_vd)
82
chunhan
parents:
diff changeset
   883
        done
chunhan
parents:
diff changeset
   884
    qed
chunhan
parents:
diff changeset
   885
    moreover have "\<And> fd. \<lbrakk>valid (ReadFile p fd # enrich_proc s p p');
chunhan
parents:
diff changeset
   886
            is_created_proc s p; valid (ReadFile p fd # s); p' \<notin> all_procs s\<rbrakk>
chunhan
parents:
diff changeset
   887
           \<Longrightarrow> valid (ReadFile p' fd # ReadFile p fd # enrich_proc s p p')"
chunhan
parents:
diff changeset
   888
    proof-
chunhan
parents:
diff changeset
   889
      fix fd
chunhan
parents:
diff changeset
   890
      assume a1: "valid (ReadFile p fd # enrich_proc s p p')" and a2: "is_created_proc s p"
chunhan
parents:
diff changeset
   891
        and a3: "valid (ReadFile p fd # s)" and a4: "p' \<notin> all_procs s"
chunhan
parents:
diff changeset
   892
      from a3 have os: "os_grant s (ReadFile p fd)" and grant: "grant s (ReadFile p fd)"
chunhan
parents:
diff changeset
   893
        by (auto dest:vt_grant_os vt_grant)
chunhan
parents:
diff changeset
   894
      have cp2sp: "\<forall> tp. tp \<in> current_procs s \<longrightarrow> cp2sproc (enrich_proc s p p') tp = cp2sproc s tp"
chunhan
parents:
diff changeset
   895
        and cf2sf: "\<forall> tf. tf \<in> current_files s \<longrightarrow> cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
chunhan
parents:
diff changeset
   896
        and cfd2sfd: "\<forall> tp tfd. tfd \<in> proc_file_fds s tp \<longrightarrow> cfd2sfd (enrich_proc s p p') tp tfd = cfd2sfd s tp tfd"
chunhan
parents:
diff changeset
   897
        and dup_sp: "cp2sproc (enrich_proc s p p') p' = cp2sproc s p"
chunhan
parents:
diff changeset
   898
        and dup_sfd: "\<forall> fd. fd \<in> proc_file_fds s p \<longrightarrow> cfd2sfd (enrich_proc s p p') p' fd = cfd2sfd s p fd"
chunhan
parents:
diff changeset
   899
        using pre a2 by auto
chunhan
parents:
diff changeset
   900
      have vd_enrich: "valid (enrich_proc s p p')" using a1 by (auto dest:valid.cases)
chunhan
parents:
diff changeset
   901
      show "valid (ReadFile p' fd # ReadFile p fd # enrich_proc s p p')"
chunhan
parents:
diff changeset
   902
      proof-
chunhan
parents:
diff changeset
   903
        have "os_grant (ReadFile p fd # enrich_proc s p p') (ReadFile p' fd)"
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   904
          using a1 a2 a4 vd os nodel
82
chunhan
parents:
diff changeset
   905
          apply (clarsimp simp:current_files_simps enrich_proc_dup_in enrich_proc_dup_ffds_eq_fds)
chunhan
parents:
diff changeset
   906
          apply (simp add:proc_file_fds_def)
chunhan
parents:
diff changeset
   907
          apply (rule conjI)
chunhan
parents:
diff changeset
   908
          apply (rule_tac x = f in exI, simp add:enrich_proc_dup_ffd)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   909
          using enrich_proc_cur_files
82
chunhan
parents:
diff changeset
   910
          apply (simp)
chunhan
parents:
diff changeset
   911
          apply (drule enrich_proc_dup_fflags)
chunhan
parents:
diff changeset
   912
          apply simp_all
chunhan
parents:
diff changeset
   913
          apply (erule disjE)
chunhan
parents:
diff changeset
   914
          apply auto
chunhan
parents:
diff changeset
   915
          apply (simp add:is_read_flag_def)
chunhan
parents:
diff changeset
   916
          done
chunhan
parents:
diff changeset
   917
        moreover have "grant (ReadFile p fd # enrich_proc s p p') (ReadFile p' fd)"
chunhan
parents:
diff changeset
   918
        proof-
chunhan
parents:
diff changeset
   919
          from grant obtain f sp sfd sf where p1: "file_of_proc_fd s p fd = Some f"
chunhan
parents:
diff changeset
   920
            and p2: "sectxt_of_obj s (O_proc p) = Some sp" 
chunhan
parents:
diff changeset
   921
            and p3: "sectxt_of_obj s (O_fd p fd) = Some sfd"
chunhan
parents:
diff changeset
   922
            and p4: "sectxt_of_obj s (O_file f) = Some sf"
chunhan
parents:
diff changeset
   923
            by (auto split:option.splits) 
chunhan
parents:
diff changeset
   924
          from os obtain flag where p0: "flags_of_proc_fd s p fd = Some flag"
chunhan
parents:
diff changeset
   925
            by auto
chunhan
parents:
diff changeset
   926
          from os have f_in_s: "f \<in> current_files s" using p1 by simp
chunhan
parents:
diff changeset
   927
          from p1 vd have isfile_s: "is_file s f" by (erule_tac file_of_pfd_is_file, simp)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   928
          hence isfile_s': "is_file (enrich_proc s p p') f"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   929
            using vd nodel all_procs a2
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
   930
            by (auto simp:enrich_proc_is_file) 
82
chunhan
parents:
diff changeset
   931
          from p0 obtain flag' where p0': "flags_of_proc_fd (enrich_proc s p p') p' fd = Some flag'"
chunhan
parents:
diff changeset
   932
            and p0'': "(flag' = flag) \<or> (flag' = remove_create_flag flag)"
chunhan
parents:
diff changeset
   933
            using a2 a4 vd
chunhan
parents:
diff changeset
   934
            apply (drule_tac enrich_proc_dup_fflags)
chunhan
parents:
diff changeset
   935
            apply auto
chunhan
parents:
diff changeset
   936
            apply (case_tac flag, auto)
chunhan
parents:
diff changeset
   937
            apply (case_tac flag, auto)
chunhan
parents:
diff changeset
   938
            done            
chunhan
parents:
diff changeset
   939
          from p1 have p1': "file_of_proc_fd (enrich_proc s p p') p' fd = Some f"
chunhan
parents:
diff changeset
   940
            using a2 a4 vd
chunhan
parents:
diff changeset
   941
            by (simp add:enrich_proc_dup_ffd)
chunhan
parents:
diff changeset
   942
          from p2 have p2': "sectxt_of_obj (enrich_proc s p p') (O_proc p') = Some sp"
chunhan
parents:
diff changeset
   943
            using dup_sp
chunhan
parents:
diff changeset
   944
            by (auto simp:cp2sproc_def split:option.splits)
chunhan
parents:
diff changeset
   945
          from p3 p1 p1' p0 p0' os have p3': "sectxt_of_obj (enrich_proc s p p') (O_fd p' fd) = Some sfd"
chunhan
parents:
diff changeset
   946
            using dup_sfd
chunhan
parents:
diff changeset
   947
            apply (erule_tac x = fd in allE)
chunhan
parents:
diff changeset
   948
            apply (auto simp:proc_file_fds_def cfd2sfd_def split:option.splits)
chunhan
parents:
diff changeset
   949
            apply (drule current_file_has_sfile')
chunhan
parents:
diff changeset
   950
            apply (simp add:vd, simp)
chunhan
parents:
diff changeset
   951
            apply (drule current_file_has_sfile')
chunhan
parents:
diff changeset
   952
            apply (simp add:vd, simp)
chunhan
parents:
diff changeset
   953
            done
chunhan
parents:
diff changeset
   954
          from p4 have p4': "sectxt_of_obj (enrich_proc s p p') (O_file f) = Some sf" 
chunhan
parents:
diff changeset
   955
            using f_in_s cf2sf isfile_s isfile_s' a1 vd_enrich vd
chunhan
parents:
diff changeset
   956
            apply (erule_tac x = f in allE)
chunhan
parents:
diff changeset
   957
            apply (simp)
chunhan
parents:
diff changeset
   958
            apply (auto simp:cf2sfile_def split:option.splits 
chunhan
parents:
diff changeset
   959
              dest!:current_has_sec' get_pfs_secs_prop' dest:parentf_is_dir is_file_in_current)
chunhan
parents:
diff changeset
   960
            apply (case_tac f, simp, drule root_is_dir', simp, simp, simp)
chunhan
parents:
diff changeset
   961
            done
chunhan
parents:
diff changeset
   962
          show ?thesis using p1' p2' p3' p4' a1
chunhan
parents:
diff changeset
   963
            apply (simp add:sectxt_of_obj_simps)
chunhan
parents:
diff changeset
   964
            using grant p1 p2 p3 p4 
chunhan
parents:
diff changeset
   965
            apply simp
chunhan
parents:
diff changeset
   966
            done
chunhan
parents:
diff changeset
   967
        qed
chunhan
parents:
diff changeset
   968
        ultimately show ?thesis
chunhan
parents:
diff changeset
   969
          using a1
chunhan
parents:
diff changeset
   970
          by (erule_tac valid.intros(2), simp+)
chunhan
parents:
diff changeset
   971
      qed
chunhan
parents:
diff changeset
   972
    qed
chunhan
parents:
diff changeset
   973
    ultimately show ?thesis 
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   974
      using vd_enrich created_cons vd_cons' all_procs_cons
82
chunhan
parents:
diff changeset
   975
      apply (case_tac e)
chunhan
parents:
diff changeset
   976
      apply (auto simp:is_created_proc_simps split:if_splits)
chunhan
parents:
diff changeset
   977
      done
chunhan
parents:
diff changeset
   978
  qed
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   979
  have sec_proc:
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   980
    "\<And> tp. \<lbrakk>tp \<in> current_procs s; is_created_proc s p\<rbrakk> 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   981
    \<Longrightarrow> sectxt_of_obj (enrich_proc s p p') (O_proc tp) = sectxt_of_obj s (O_proc tp)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   982
    using pre 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   983
    apply (clarsimp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   984
    apply (erule_tac x = tp in allE, auto simp:cp2sproc_def split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   985
    done
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   986
  have sf_cons:
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   987
    "\<forall>f. f \<in> current_files (e # s) \<longrightarrow> cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   988
  proof clarify
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   989
    fix f 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   990
    assume a1: "f \<in> current_files (e # s)"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   991
    from pre have pre_sf: "\<And> f. \<lbrakk>f \<in> current_files s; is_created_proc s p\<rbrakk>
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   992
      \<Longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   993
      by auto
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   994
    from a1 have a1': "f \<in> current_files (enrich_proc (e # s) p p')"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   995
      using vd_cons' nodel_cons
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
   996
      by (simp add:enrich_proc_cur_files)
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   997
    from a1 have a1'': "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   998
      using vd_cons' nodel_cons os vd vd_enrich created_cons
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
   999
      apply (case_tac e)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1000
      apply (auto simp:enrich_proc_cur_files current_files_simps is_created_proc_simps
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1001
        dest:is_file_in_current is_dir_in_current split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1002
      done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1003
    
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1004
    have sec_dir:
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1005
      "\<And> tf. \<lbrakk>is_dir s tf; is_created_proc s p\<rbrakk>
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1006
      \<Longrightarrow> sectxt_of_obj (enrich_proc s p p') (O_dir tf) = sectxt_of_obj s (O_dir tf)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1007
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1008
      fix tf 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1009
      assume a1: "is_dir s tf" and a2: "is_created_proc s p"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1010
      from a2 pre
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1011
      have pre': "\<And>f. f \<in> current_files s \<Longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1012
        and vd_enrich: "valid (enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1013
        by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1014
      hence csf: "cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1015
        using a1 by (auto simp:is_dir_in_current)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1016
      from a1 obtain sf where csf_some: "cf2sfile s tf = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1017
        apply (case_tac "cf2sfile s tf")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1018
        apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1019
        apply (simp add:vd, simp add:is_dir_in_current, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1020
        done      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1021
      from a1 have a1': "is_dir (enrich_proc s p p') tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1022
        using enrich_proc_is_dir vd nodel all_procs by simp
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1023
      from a1 have a3: "\<not> is_file s tf" using vd by (simp add:is_dir_not_file)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1024
      from a1' vd have a3': "\<not> is_file (enrich_proc s p p') tf" by (simp add:is_dir_not_file)  
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1025
      show "sectxt_of_obj (enrich_proc s p p') (O_dir tf) = sectxt_of_obj s (O_dir tf)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1026
        using csf csf_some a3 a3' vd_enrich vd
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1027
        apply (auto simp:cf2sfile_def split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1028
        apply (case_tac tf)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1029
        apply (simp add:root_sec_remains, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1030
        done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1031
    qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1032
    have sec_file:
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1033
      "\<And> tf. \<lbrakk>is_file s tf; is_created_proc s p\<rbrakk>
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1034
      \<Longrightarrow> sectxt_of_obj (enrich_proc s p p') (O_file tf) = sectxt_of_obj s (O_file tf)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1035
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1036
      fix tf 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1037
      assume a1: "is_file s tf" and a2: "is_created_proc s p"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1038
      from a2 pre
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1039
      have pre': "\<And>f. f \<in> current_files s \<Longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1040
        and vd_enrich: "valid (enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1041
        by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1042
      hence csf: "cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1043
        using a1 by (auto simp:is_file_in_current)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1044
      from a1 obtain sf where csf_some: "cf2sfile s tf = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1045
        apply (case_tac "cf2sfile s tf")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1046
        apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1047
        apply (simp add:vd, simp add:is_file_in_current, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1048
        done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1049
      from a1 have a1': "is_file (enrich_proc s p p') tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1050
        using vd nodel all_procs by (simp add:enrich_proc_is_file)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1051
      show "sectxt_of_obj (enrich_proc s p p') (O_file tf) = sectxt_of_obj s (O_file tf)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1052
        using csf csf_some vd_enrich vd a1 a1'
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1053
        apply (auto simp:cf2sfile_def split:option.splits if_splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1054
        apply (case_tac tf, simp_all)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1055
        apply (drule root_is_dir', simp+)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1056
        done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1057
    qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1058
    have secs_dir:
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1059
      "\<And> tf ctxts'. \<lbrakk>is_dir s tf; is_created_proc s p; get_parentfs_ctxts s tf = Some ctxts'\<rbrakk>
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1060
       \<Longrightarrow> \<exists> ctxts. get_parentfs_ctxts (enrich_proc s p p') tf = Some ctxts \<and> set ctxts = set ctxts'"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1061
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1062
      fix tf ctxts'
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1063
      assume a1: "is_dir s tf" and a2: "is_created_proc s p" 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1064
        and a4: "get_parentfs_ctxts s tf = Some ctxts'"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1065
      from a2 pre
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1066
      have pre': "\<And>f. f \<in> current_files s \<Longrightarrow> cf2sfile (enrich_proc s p p') f = cf2sfile s f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1067
        and vd_enrich': "valid (enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1068
        by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1069
      hence csf: "cf2sfile (enrich_proc s p p') tf = cf2sfile s tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1070
        using a1 by (auto simp:is_dir_in_current)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1071
      from a1 obtain sf where csf_some: "cf2sfile s tf = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1072
        apply (case_tac "cf2sfile s tf")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1073
        apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1074
        apply (simp add:vd, simp add:is_dir_in_current, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1075
        done      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1076
      from a1 have a1': "is_dir (enrich_proc s p p') tf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1077
        using enrich_proc_is_dir vd nodel all_procs by simp
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1078
      from a1 have a5: "\<not> is_file s tf" using vd by (simp add:is_dir_not_file)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1079
      from a1' vd have a5': "\<not> is_file (enrich_proc s p p') tf" by (simp add:is_dir_not_file) 
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1080
      
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1081
      from a1' pre_vd a2 obtain ctxts 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1082
        where a3: "get_parentfs_ctxts (enrich_proc s p p') tf = Some ctxts"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1083
        apply (case_tac "get_parentfs_ctxts (enrich_proc s p p') tf")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1084
        apply (drule get_pfs_secs_prop', simp+)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1085
        done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1086
      moreover have "set ctxts = set ctxts'"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1087
      proof (cases tf)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1088
        case Nil          
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1089
        with a3 a4 vd vd_enrich'
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1090
        show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1091
          by (simp add:get_parentfs_ctxts.simps root_sec_remains split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1092
      next
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1093
        case (Cons a ff)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1094
        with csf csf_some a5 a5' vd_enrich' vd a3 a4
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1095
        show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1096
          apply (auto simp:cf2sfile_def split:option.splits if_splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1097
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1098
      qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1099
      ultimately 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1100
      show "\<exists> ctxts. get_parentfs_ctxts (enrich_proc s p p') tf = Some ctxts \<and> set ctxts = set ctxts'"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1101
        by auto        
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1102
    qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1103
    have b1: "\<And> proc f' flags fd' opt. e = Open proc f' flags fd' opt 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1104
      \<Longrightarrow> cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1105
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1106
      fix proc f' flags fd' opt
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1107
      assume ev: "e = Open proc f' flags fd' opt"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1108
      have b1': "cf2sfile (e # enrich_proc s p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1109
      proof (cases opt)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1110
        case None
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1111
        thus ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1112
          using vd_cons' vd_enrich a1 created_cons 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1113
          by (simp add:cf2sfile_open_none ev pre_sf 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1114
            is_created_proc_simps current_files_simps)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1115
      next
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1116
        case (Some inum)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1117
        show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1118
        proof (cases "f' = f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1119
          case True
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1120
          from a1 obtain sf where csf: "cf2sfile (e # s) f = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1121
            apply (case_tac "cf2sfile (e # s) f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1122
            apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1123
            apply (simp add:vd_cons', simp, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1124
            done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1125
          from a1 ev os Some True obtain pf where parent: "parent f = Some pf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1126
            and pdir: "is_dir s pf" and proc_in: "proc \<in> current_procs s" by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1127
          have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1128
            using ev True Some
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1129
            by (simp add:current_files_open)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1130
          thus ?thesis using ev Some csf vd_enrich True created_cons vd_cons' a1 parent pdir proc_in
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1131
            apply (simp add:is_created_proc_simps cf2sfile_open)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1132
            apply (simp add:sectxt_of_obj_simps sec_dir sec_proc split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1133
            apply (drule_tac tf = pf in secs_dir, simp+) 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1134
            apply (erule exE, erule conjE, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1135
            apply (case_tac aa, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1136
            done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1137
        next
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1138
          case False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1139
          have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1140
            using ev False Some vd_enrich a1 created_cons nodel vd
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1141
            by (simp add:current_files_open is_created_proc_simps enrich_proc_cur_files)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1142
          with ev Some a1 vd_enrich vd_cons' created_cons False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1143
          show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1144
            apply (simp add:is_created_proc_simps cf2sfile_open)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1145
            apply (simp add:current_files_simps pre_sf)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1146
            done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1147
        qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1148
      qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1149
      show "cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f" 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1150
        using ev vd_enrich_cons
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1151
        apply simp
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1152
        apply (rule conjI, rule impI)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1153
        apply (simp add:cf2sfile_open_none)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1154
        using b1' apply (auto dest:vd_cons)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1155
        done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1156
    qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1157
    have b2: "\<And> proc f' inum. e = Mkdir proc f' inum
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1158
      \<Longrightarrow> cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1159
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1160
      fix proc f' inum
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1161
      assume ev: "e = Mkdir proc f' inum"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1162
      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1163
      show "cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1164
      proof (cases "f' = f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1165
        case True
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1166
        from a1 obtain sf where csf: "cf2sfile (e # s) f = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1167
          apply (case_tac "cf2sfile (e # s) f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1168
          apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1169
          apply (simp add:vd_cons', simp, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1170
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1171
        from a1 ev os True obtain pf where parent: "parent f = Some pf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1172
          and pdir: "is_dir s pf" and proc_in: "proc \<in> current_procs s" by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1173
        have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1174
          using ev True
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1175
          by (simp add:current_files_mkdir)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1176
        thus ?thesis using ev csf vd_enrich True created_cons vd_cons' a1 parent pdir proc_in
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1177
          apply (simp add:is_created_proc_simps cf2sfile_mkdir)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1178
          apply (simp add:sectxt_of_obj_simps sec_dir sec_proc split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1179
          apply (drule_tac tf = pf in secs_dir, simp+) 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1180
          apply (erule exE, erule conjE, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1181
          apply (case_tac aa, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1182
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1183
      next
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1184
        case False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1185
        have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1186
          using ev False vd_enrich a1 created_cons nodel vd
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1187
          by (simp add:current_files_mkdir is_created_proc_simps enrich_proc_cur_files)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1188
        with ev a1 vd_enrich vd_cons' created_cons False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1189
        show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1190
          apply (simp add:is_created_proc_simps cf2sfile_mkdir)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1191
          apply (simp add:current_files_simps pre_sf)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1192
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1193
      qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1194
    qed
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1195
    have b3: "\<And> proc f' f''. e = LinkHard proc f' f''
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1196
      \<Longrightarrow> cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1197
    proof-
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1198
      fix proc f' f'' 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1199
      assume ev: "e = LinkHard proc f' f''"      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1200
      show "cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1201
      proof (cases "f'' = f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1202
        case True
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1203
        from a1 obtain sf where csf: "cf2sfile (e # s) f = Some sf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1204
          apply (case_tac "cf2sfile (e # s) f")
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1205
          apply (drule current_file_has_sfile')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1206
          apply (simp add:vd_cons', simp, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1207
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1208
        from a1 ev os True obtain pf where parent: "parent f'' = Some pf"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1209
          and pdir: "is_dir s pf" and proc_in: "proc \<in> current_procs s" by auto
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1210
        have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1211
          using ev True vd_enrich created_cons
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1212
          by (simp add:current_files_simps is_created_proc_simps)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1213
        thus ?thesis using ev csf vd_enrich True created_cons vd_cons' a1 parent pdir proc_in
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1214
          apply (simp add:is_created_proc_simps cf2sfile_linkhard)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1215
          apply (simp add:sectxt_of_obj_simps sec_dir sec_proc split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1216
          apply (drule_tac tf = pf in secs_dir, simp+) 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1217
          apply (erule exE, erule conjE, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1218
          apply (case_tac aa, simp)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1219
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1220
      next
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1221
        case False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1222
        have f_in: "f \<in> current_files (e # enrich_proc s p p')"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1223
          using ev False vd_enrich a1 created_cons nodel vd vd_cons'
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1224
          by (simp add:current_files_linkhard is_created_proc_simps enrich_proc_cur_files)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1225
        with ev a1 vd_enrich vd_cons' created_cons False
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1226
        show ?thesis
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1227
          apply (simp add:is_created_proc_simps cf2sfile_linkhard)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1228
          apply (simp add:current_files_simps pre_sf)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1229
          done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1230
      qed      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1231
    qed
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1232
    show "cf2sfile (enrich_proc (e # s) p p') f = cf2sfile (e # s) f"
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1233
      apply (case_tac e) 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1234
      prefer 6 apply (erule b1)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1235
      prefer 11 apply (erule b2)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1236
      prefer 11 apply (erule b3)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1237
      using vd created_cons nodel_cons vd_enrich_cons vd_cons' a1 a1'
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1238
      apply (auto intro!:pre_sf simp:cf2sfile_simps is_created_proc_simps current_files_simps
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1239
        split:if_splits dest:vd_cons cf2sfile_other')
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1240
      done
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1241
  qed
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1242
  moreover have "\<forall>tp fd. fd \<in> proc_file_fds (e # s) tp \<longrightarrow> 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1243
    cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
83
chunhan
parents: 82
diff changeset
  1244
  proof clarify
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1245
    fix tp fd 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1246
    assume a1: "fd \<in> proc_file_fds (e # s) tp"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1247
    from a1 obtain f where a1': "file_of_proc_fd (e # s) tp fd = Some f" 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1248
      by (auto simp:proc_file_fds_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1249
    from pre have pre_sfd: "\<And> tp fd. \<lbrakk>fd \<in> proc_file_fds s tp; is_created_proc s p\<rbrakk> \<Longrightarrow>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1250
      cfd2sfd (enrich_proc s p p') tp fd = cfd2sfd s tp fd" by auto
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1251
    hence pre_sfd': "\<And> tp fd f. \<lbrakk>file_of_proc_fd s tp fd = Some f; is_created_proc s p\<rbrakk> \<Longrightarrow>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1252
      cfd2sfd (enrich_proc s p p') tp fd = cfd2sfd s tp fd" by (auto simp:proc_file_fds_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1253
    hence pre_sfd'': "\<And> tp fd f proc. \<lbrakk>file_of_proc_fd s tp fd = Some f; is_created_proc s p; p = proc\<rbrakk> \<Longrightarrow>
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1254
      cfd2sfd (enrich_proc s proc p') tp fd = cfd2sfd s tp fd" by (auto simp:proc_file_fds_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1255
    from a1' all_procs_cons vd_cons' have a2: "tp \<noteq> p'"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1256
      apply (drule_tac not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1257
      apply (drule proc_fd_in_procs, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1258
      by (rule notI, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1259
    have a3: "p' \<noteq> p" using all_procs_cons created_cons
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1260
      apply (drule_tac not_all_procs_prop3)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1261
      apply (rule notI, simp add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1262
      done      
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1263
    have a4: "file_of_proc_fd (enrich_proc (e # s) p p') tp fd = Some f" 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1264
      using a1' nodel_cons all_procs_cons a1' created_cons vd_cons'
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1265
      apply (frule_tac enrich_proc_filefd, simp_all)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1266
      done
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1267
    have sec_proc:
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1268
      "\<And> tp. \<lbrakk>tp \<in> current_procs s; is_created_proc s p\<rbrakk> 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1269
       \<Longrightarrow> sectxt_of_obj (enrich_proc s p p') (O_proc tp) = sectxt_of_obj s (O_proc tp)"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1270
      using pre 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1271
      apply (clarsimp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1272
      apply (erule_tac x = tp in allE, auto simp:cp2sproc_def split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1273
      done
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1274
    have sec_proc':
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1275
      "\<And> tp. \<lbrakk>tp \<in> current_procs s; is_created_proc s p; p = tp\<rbrakk> 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1276
       \<Longrightarrow> sectxt_of_obj (enrich_proc s tp p') (O_proc tp) = sectxt_of_obj s (O_proc tp)"
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1277
      apply (drule_tac sec_proc, simp+)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1278
      done
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1279
    show "cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1280
    proof-
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1281
      have b1: "\<And> proc f' fds. e = Execve proc f' fds
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1282
        \<Longrightarrow> cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1283
        using a4 vd_enrich_cons a1' vd_cons' created_cons
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1284
        apply (simp split:if_splits del:file_of_proc_fd.simps add:a2) 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1285
        apply (simp only:cfd2sfd_execve)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1286
        apply (drule_tac s = "Execve proc f' fds # enrich_proc s proc p'" in vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1287
        apply (simp split:if_splits add:a2)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1288
        apply (drule_tac p' = proc and fd' = fd and s = "enrich_proc s proc p'" in cfd2sfd_execve, simp+)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1289
        apply (erule_tac pre_sfd'', simp add:is_created_proc_simps, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1290
        apply (drule_tac p' = tp and fd' = fd in cfd2sfd_execve, simp+)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1291
        apply (erule_tac pre_sfd'', simp add:is_created_proc_simps, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1292
        apply (simp only:cfd2sfd_execve)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1293
        apply (rule_tac pre_sfd')
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1294
        apply (auto split:if_splits simp:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1295
        done 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1296
      have b2: "\<And> proc proc' fds. e = Clone proc proc' fds
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1297
       \<Longrightarrow> cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1298
        using a4 vd_enrich_cons a1' vd_cons' created_cons
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1299
        apply (simp split:if_splits del:file_of_proc_fd.simps) 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1300
        apply (simp add:cfd2sfd_clone add:a2)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1301
        apply (simp add:cfd2sfd_clone split:if_splits)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1302
        apply (erule pre_sfd'', simp add:is_created_proc_simps, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1303
        apply (erule pre_sfd', simp add:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1304
        done 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1305
      have b3: "\<And> proc f' flags fd' opt. e = Open proc f' flags fd' opt 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1306
         \<Longrightarrow> cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1307
        using a4 a1' vd_enrich_cons vd_cons' created_cons 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1308
        apply (simp split:if_splits del:file_of_proc_fd.simps) 
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1309
        
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1310
        apply (simp add:cfd2sfd_open sec_open is_created_proc_simps a2 del:file_of_proc_fd.simps)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1311
        apply (tactic {*my_clarify_tac 1*})
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1312
        apply (drule vd_cons)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1313
        apply (simp add:cfd2sfd_open sec_open a3 a2 split:if_splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1314
        apply (case_tac "proc \<in> current_procs s")
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1315
        apply (simp add:sec_proc')
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1316
        apply (case_tac "sectxt_of_obj s (O_proc proc)", simp+)        
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1317
        apply (case_tac "f \<in> current_files (e # s)")
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1318
        apply (drule sf_cons[rule_format], simp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1319
        using vd_enrich_cons
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1320
        apply (simp add:cf2sfile_open_none)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1321
        using os
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1322
        apply (simp add:current_files_simps is_file_in_current split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1323
        using os
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1324
        apply (simp split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1325
        apply (rule impI)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1326
        apply (simp add:cfd2sfd_open sec_open a3 a2 split:if_splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1327
        apply (drule vd_cons)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1328
        apply (drule_tac p' = tp and fd' = fd and f' = f and s = "enrich_proc s proc p'" in cfd2sfd_open)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1329
        apply (simp, rule impI, simp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1330
        apply (simp split:if_splits, rule conjI, rule impI, simp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1331
        apply (drule pre_sfd', simp, simp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1332
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1333
        apply (simp add:cfd2sfd_open sec_open is_created_proc_simps a2 del:file_of_proc_fd.simps)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1334
        apply (case_tac "proc \<in> current_procs s")
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1335
        apply (simp add:sec_proc)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1336
        apply (case_tac "f' \<in> current_files (e # s)")
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1337
        apply (drule sf_cons[rule_format], simp)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1338
        apply (simp split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1339
        apply (rule impI|rule conjI)+
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1340
        apply (drule current_has_sec', simp add:vd, simp add:os)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1341
        apply (rule impI, rule impI)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1342
        apply (simp split:if_splits)
85
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1343
        apply (simp add:pre_sfd')
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1344
        using os
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1345
        apply (simp add:current_files_simps is_file_in_current split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1346
        using os
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1347
        apply (simp split:option.splits)
1d1aa5bdd37d add remove_create_flag to sfd
chunhan
parents: 84
diff changeset
  1348
        done
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1349
      have b4: "\<And> proc fd'. e = ReadFile proc fd' 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1350
         \<Longrightarrow> cfd2sfd (enrich_proc (e # s) p p') tp fd = cfd2sfd (e # s) tp fd"
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1351
        using a4 vd_enrich_cons a1' vd_cons' created_cons
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1352
        apply (simp split:if_splits del:file_of_proc_fd.simps) 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1353
        apply (frule_tac s = "ReadFile proc fd' # enrich_proc s proc p'" in vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1354
        apply (simp add:cfd2sfd_other)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1355
        apply (erule pre_sfd'', simp add:is_created_proc_simps, simp)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1356
        apply (simp add:cfd2sfd_other)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1357
        apply (erule pre_sfd', simp add:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1358
        done 
83
chunhan
parents: 82
diff changeset
  1359
      show ?thesis
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1360
        apply (case_tac e)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1361
        apply (erule b1, erule b2) 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1362
        prefer 4 apply (erule b3) prefer 4 apply (erule b4)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1363
        using vd created_cons nodel_cons a1' a4 vd_enrich_cons vd_cons'
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1364
        apply (auto intro!:pre_sfd' simp:cfd2sfd_simps is_created_proc_simps 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1365
          simp del:file_of_proc_fd.simps split:if_splits dest:vd_cons enrich_proc_filefd)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1366
        apply (simp_all)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1367
        done
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1368
    qed
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1369
  qed
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1370
  moreover have "\<forall>q. q \<in> current_msgqs (e # s) \<longrightarrow> cq2smsgq (enrich_proc (e # s) p p') q = cq2smsgq (e # s) q"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1371
  proof clarify
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1372
    fix q
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1373
    assume a1: "q \<in> current_msgqs (e # s)"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1374
    from pre have pre_smsgq: "\<And> q. \<lbrakk>q \<in> current_msgqs s; is_created_proc s p\<rbrakk>
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1375
      \<Longrightarrow> cq2smsgq (enrich_proc s p p') q = cq2smsgq s q"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1376
      by auto 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1377
    show "cq2smsgq (enrich_proc (e # s) p p') q = cq2smsgq (e # s) q"
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1378
      using vd_enrich_cons a1 created_cons nodel_cons vd_cons' os
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1379
      apply (case_tac e) 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1380
      apply (auto simp:cq2smsgq_simps cq2smsg_createmsgq is_created_proc_simps sec_proc 
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1381
        dest:cq2smsgq_other intro!:pre_smsgq split:if_splits dest:vd_cons)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1382
      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1383
      apply (simp add:sectxt_of_obj_simps split:option.splits)
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1384
      
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1385
      thm sec_proc
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1386
      thm cq2smsgq_simps
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1387
      thm cq2smsg_createmsgq
82
chunhan
parents:
diff changeset
  1388
    sorry
86
690636b7b6f1 find bug: a created proc can be tainted by a message, which cannot remain and maynot be duplicated
chunhan
parents: 85
diff changeset
  1389
  moreover have "\<forall>tp. tp \<in> current_procs (e # s) \<longrightarrow> cp2sproc (enrich_proc (e # s) p p') tp = cp2sproc (e # s) tp"
82
chunhan
parents:
diff changeset
  1390
    sorry
chunhan
parents:
diff changeset
  1391
  moreover have "cp2sproc (enrich_proc (e # s) p p') p' = cp2sproc (e # s) p"
chunhan
parents:
diff changeset
  1392
  proof-
chunhan
parents:
diff changeset
  1393
    from pre have b0: "is_created_proc s p \<Longrightarrow> cp2sproc (enrich_proc s p p') p' = cp2sproc s p" by simp
chunhan
parents:
diff changeset
  1394
    have b1: "\<And> tp f fds. \<lbrakk>valid (enrich_proc (Execve tp f fds # s) p p'); valid (Execve tp f fds # s);
chunhan
parents:
diff changeset
  1395
      is_created_proc (Execve tp f fds # s) p; p' \<notin> all_procs (Execve tp f fds # s)\<rbrakk>
chunhan
parents:
diff changeset
  1396
      \<Longrightarrow> cp2sproc (enrich_proc (Execve tp f fds # s) p p') p' = cp2sproc (Execve tp f fds # s) p"
chunhan
parents:
diff changeset
  1397
    proof-
chunhan
parents:
diff changeset
  1398
      fix tp f fds
chunhan
parents:
diff changeset
  1399
      assume a1: "valid (enrich_proc (Execve tp f fds # s) p p')"
chunhan
parents:
diff changeset
  1400
      and a2: "valid (Execve tp f fds # s)" and a3: "is_created_proc (Execve tp f fds # s) p"
chunhan
parents:
diff changeset
  1401
      and a4: "p' \<notin> all_procs (Execve tp f fds # s)"
chunhan
parents:
diff changeset
  1402
      show "cp2sproc (enrich_proc (Execve tp f fds # s) p p') p' = cp2sproc (Execve tp f fds # s) p"
chunhan
parents:
diff changeset
  1403
      proof (cases "tp = p")
chunhan
parents:
diff changeset
  1404
        case True
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1405
        show ?thesis using True a1 a2 a3 a4 b0 vd
82
chunhan
parents:
diff changeset
  1406
          thm not_all_procs_prop3
83
chunhan
parents: 82
diff changeset
  1407
          apply (frule_tac not_all_procs_prop2)
chunhan
parents: 82
diff changeset
  1408
          apply (frule not_all_procs_prop3)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1409
          apply (simp add:is_created_proc_simps)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1410
          apply (frule vd_cons) (*
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1411
          apply (frule_tac vt_grant_os) 
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1412
          apply (frule_tac \<tau> = "enrich_proc s p p'" in vt_grant_os) *)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1413
          apply (frule_tac s = "enrich_proc s p p'" in vd_cons)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1414
          apply (frule_tac \<tau> = s in vt_grant_os)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1415
          apply (case_tac "p' = p", simp) (*
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1416
          apply (auto simp add:cp2sproc_execve sectxt_of_obj_simps enrich_proc_dup_in
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1417
            split:option.splits dest!:current_has_sec' dest:vt_grant is_file)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1418
          apply (simp_all add:is_created_proc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1419
          apply (auto simp:cp2sproc_def)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1420
          apply (simp_all add:enrich_proc_dup_in)
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1421
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1422
          
83
chunhan
parents: 82
diff changeset
  1423
          apply (auto simp:sectxt_of_obj_simps split:option.splits dest:valid.cases)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1424
  *)        
82
chunhan
parents:
diff changeset
  1425
          sorry
chunhan
parents:
diff changeset
  1426
      next
chunhan
parents:
diff changeset
  1427
        case False
chunhan
parents:
diff changeset
  1428
        show ?thesis sorry
chunhan
parents:
diff changeset
  1429
      qed
chunhan
parents:
diff changeset
  1430
    qed
chunhan
parents:
diff changeset
  1431
    have b2: "\<And> tp fd. cp2sproc (enrich_proc (ReadFile tp fd # s) p p') p' = cp2sproc (ReadFile tp fd # s) p"
chunhan
parents:
diff changeset
  1432
      sorry
chunhan
parents:
diff changeset
  1433
    have b3: "\<And> tp. cp2sproc (enrich_proc (Exit tp # s) p p') p' = cp2sproc (Exit tp # s) p"
chunhan
parents:
diff changeset
  1434
      sorry
chunhan
parents:
diff changeset
  1435
    have b4: "\<And> tp tp'. cp2sproc (enrich_proc (Kill tp tp' # s) p p') p' = cp2sproc (Kill tp tp' # s) p"
chunhan
parents:
diff changeset
  1436
      sorry
chunhan
parents:
diff changeset
  1437
    have b5: "\<And> tp tp' fds. cp2sproc (enrich_proc (Clone tp tp' fds # s) p p') p' = 
chunhan
parents:
diff changeset
  1438
      cp2sproc (Clone tp tp' fds # s) p"
chunhan
parents:
diff changeset
  1439
      sorry
chunhan
parents:
diff changeset
  1440
    have b6: "\<And> tp f flags fd opt. cp2sproc (enrich_proc (Open tp f flags fd opt # s) p p') p' =
chunhan
parents:
diff changeset
  1441
      cp2sproc (Open tp f flags fd opt # s) p"
chunhan
parents:
diff changeset
  1442
      sorry
chunhan
parents:
diff changeset
  1443
    have b7: "\<And> tp fd. cp2sproc (enrich_proc (CloseFd tp fd # s) p p') p' = cp2sproc (CloseFd tp fd # s) p"
chunhan
parents:
diff changeset
  1444
      sorry
chunhan
parents:
diff changeset
  1445
    show ?thesis using vd_enrich_cons
chunhan
parents:
diff changeset
  1446
      apply (case_tac e)
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1447
      using vd_cons' created_cons all_procs_cons
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1448
      apply (auto intro!:b1 b2 b3 b4 b5 b6 b7 simp del:enrich_proc.simps)
83
chunhan
parents: 82
diff changeset
  1449
      using created_cons vd_enrich_cons vd_cons' b0
82
chunhan
parents:
diff changeset
  1450
      apply (auto simp:cp2sproc_other is_created_proc_def)
chunhan
parents:
diff changeset
  1451
      done
chunhan
parents:
diff changeset
  1452
  qed
chunhan
parents:
diff changeset
  1453
  moreover have "\<forall> fd. fd \<in> proc_file_fds (e # s) p \<longrightarrow> 
chunhan
parents:
diff changeset
  1454
    cfd2sfd (enrich_proc (e # s) p p') p' fd = cfd2sfd (e # s) p fd"
chunhan
parents:
diff changeset
  1455
    sorry
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1456
  ultimately show ?case using vd_enrich_cons
82
chunhan
parents:
diff changeset
  1457
    by simp
chunhan
parents:
diff changeset
  1458
qed
chunhan
parents:
diff changeset
  1459
  
88
chunhan
parents: 87
diff changeset
  1460
lemma enrich_proc_s2ss:
chunhan
parents: 87
diff changeset
  1461
  "\<lbrakk>valid s; is_created_proc s p; p' \<notin> all_procs s\<rbrakk> \<Longrightarrow> s2ss (enrich_proc s p p') = s2ss s"
82
chunhan
parents:
diff changeset
  1462
chunhan
parents:
diff changeset
  1463
lemma enrich_proc_valid:
chunhan
parents:
diff changeset
  1464
  "\<lbrakk>valid s; is_created_proc s p; p' \<notin> all_procs s\<rbrakk> \<Longrightarrow> valid (enrich_proc s p p')"
chunhan
parents:
diff changeset
  1465
by (auto dest:enrich_proc_prop)
chunhan
parents:
diff changeset
  1466
chunhan
parents:
diff changeset
  1467
lemma enrich_proc_valid:
chunhan
parents:
diff changeset
  1468
  "\<lbrakk>valid s; is_created_proc s p; p' \<notin> all_procs s\<rbrakk> \<Longrightarrow> " 
chunhan
parents:
diff changeset
  1469
chunhan
parents:
diff changeset
  1470
lemma enrich_proc_tainted: 
chunhan
parents:
diff changeset
  1471
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; valid s\<rbrakk>
chunhan
parents:
diff changeset
  1472
   \<Longrightarrow> tainted (enrich_proc s p p') = (if (O_proc p \<in> tainted s) 
chunhan
parents:
diff changeset
  1473
         then tainted s \<union> {O_proc p'} else tainted s)"
chunhan
parents:
diff changeset
  1474
apply (induct s)
chunhan
parents:
diff changeset
  1475
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1476
apply (frule vt_grant_os, frule vd_cons, simp)
chunhan
parents:
diff changeset
  1477
apply (frule enrich_proc_dup_in, simp+)
chunhan
parents:
diff changeset
  1478
apply (frule not_all_procs_prop3)
chunhan
parents:
diff changeset
  1479
apply (case_tac a)
chunhan
parents:
diff changeset
  1480
prefer 3
chunhan
parents:
diff changeset
  1481
apply (simp split:if_splits)
chunhan
parents:
diff changeset
  1482
apply (rule impI|rule conjI)+
chunhan
parents:
diff changeset
  1483
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1484
apply (auto simp:is_created_proc_def split:if_splits dest:tainted_in_current)[1]
chunhan
parents:
diff changeset
  1485
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1486
chunhan
parents:
diff changeset
  1487
prefer 4
chunhan
parents:
diff changeset
  1488
apply (simp split:if_splits)
chunhan
parents:
diff changeset
  1489
apply (rule impI|rule conjI)+
chunhan
parents:
diff changeset
  1490
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1491
apply (auto simp:is_created_proc_def split:if_splits dest:tainted_in_current)[1]
chunhan
parents:
diff changeset
  1492
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1493
chunhan
parents:
diff changeset
  1494
prefer 4
chunhan
parents:
diff changeset
  1495
apply (auto simp:is_created_proc_def split:if_splits option.splits dest:tainted_in_current)[1]
chunhan
parents:
diff changeset
  1496
chunhan
parents:
diff changeset
  1497
prefer 4
chunhan
parents:
diff changeset
  1498
apply (auto simp:is_created_proc_def split:if_splits option.splits dest:tainted_in_current enrich_proc_dup_ffd enrich_proc_dup_ffd')[1]
chunhan
parents:
diff changeset
  1499
chunhan
parents:
diff changeset
  1500
chunhan
parents:
diff changeset
  1501
chunhan
parents:
diff changeset
  1502
lemma enrich_proc_dup_tainted:
chunhan
parents:
diff changeset
  1503
  "\<lbrakk>is_created_proc s p; p' \<notin> all_procs s; valid s\<rbrakk>
chunhan
parents:
diff changeset
  1504
   \<Longrightarrow> (O_proc p' \<in> tainted (enrich_proc s p p')) = (O_proc p \<in> tainted s)"
chunhan
parents:
diff changeset
  1505
apply (induct s)
chunhan
parents:
diff changeset
  1506
apply (simp add:is_created_proc_def)
chunhan
parents:
diff changeset
  1507
apply (frule vt_grant_os, frule vd_cons)
chunhan
parents:
diff changeset
  1508
apply (case_tac a)
chunhan
parents:
diff changeset
  1509
apply (auto simp:is_created_proc_def)[1]
chunhan
parents:
diff changeset
  1510
chunhan
parents:
diff changeset
  1511
chunhan
parents:
diff changeset
  1512
lemma enrich_proc_tainted:
84
cebdef333899 cfd2sfd, OF_create flag should not be in the sfd, cause all-duplicated sfd could not have this flag
chunhan
parents: 83
diff changeset
  1513
82
chunhan
parents:
diff changeset
  1514
chunhan
parents:
diff changeset
  1515
chunhan
parents:
diff changeset
  1516
end
chunhan
parents:
diff changeset
  1517
chunhan
parents:
diff changeset
  1518
end