Loop Invariants Dr. Mattox Beckman University of Illinois at - - PowerPoint PPT Presentation

▶
loop invariants
SMART_READER_LITE
LIVE PREVIEW

Loop Invariants Dr. Mattox Beckman University of Illinois at - - PowerPoint PPT Presentation

Oct 13, 2023 111 likes •293 views

Introduction Loops Loop Equations Loop Invariants Termination Loop Invariants Dr. Mattox Beckman University of Illinois at Urbana-Champaign Department of Computer Science Introduction Loops Loop Equations Loop Invariants Termination

slide-1
SLIDE 1

Introduction Loops Loop Equations Loop Invariants Termination

Loop Invariants

  • Dr. Mattox Beckman

University of Illinois at Urbana-Champaign Department of Computer Science

slide-2
SLIDE 2

Introduction Loops Loop Equations Loop Invariants Termination

Objectives

You should be able to ...

◮ Explain the concept of well formed induction. ◮ Enumerate the three conditions necessary for a loop to yield the correct answer. ◮ Enumerate the three conditions necessary for a loop to terminate. ◮ Pick a good loop invariant to verify a loop.

slide-3
SLIDE 3

Introduction Loops Loop Equations Loop Invariants Termination

What Is a Loop?

◮ Remember from our discussion of if that it is best to consider the if as one statement rather than two branches. {p ∧ B}S1{q} {p ∧ ¬B}S2{q} {p}if B then S1 else S2 fi {q} ◮ With loops, we have a similar problem. ◮ … p and q are the same thing, though!

slide-4
SLIDE 4

Introduction Loops Loop Equations Loop Invariants Termination

Loop Proof

◮ A loop proof outline looks like this: {q} Si {inv : p} {bd : t} while B do {p ∧ B} S {p}

  • d

{p ∧ ¬B} {r}

slide-5
SLIDE 5

Introduction Loops Loop Equations Loop Invariants Termination

Loop Equations

◮ We need to solve fjve equations. {q} Si {inv : p} {bd : t} while B do {p ∧ B} S {p}

  • d

{p ∧ ¬B} {r}

  • 1. {q}Si{p}
  • 2. {p ∧ B}S{p}
  • 3. p ∧ ¬B → r
  • 4. p → t ≥ 0
  • 5. {p ∧ B ∧ t = z}S{t < z}
slide-6
SLIDE 6

Introduction Loops Loop Equations Loop Invariants Termination

Example 1 – Partial Correctness

Example 1

s := 0; i := 0; while (i < |A|) do s := s + A[i]; i := i + 1

  • d

What are these equations? ◮ {q}Si{p} ◮ {p ∧ B}S{p} ◮ p ∧ ¬B → r Solutions: ◮ {true }s := 0; i := 0{i ≤ |A| ∧ s = Σi−1 A[i]} ◮ {i ≤ |A|∧s = Σi−1 A[i]∧i < |A|}S{i ≤ |A|∧s = Σi−1 A[i]} ◮ i ≤ |A| ∧ s = Σi−1 A[i] ∧ i ≥ |A| → s = Σ|A|−1 A[i]

slide-7
SLIDE 7

Introduction Loops Loop Equations Loop Invariants Termination

Example 2 – Partial Correctness

Example 2

while (a > 0) do a, b := b mod a, a

  • d

What are these equations? ◮ {q}Si{p} ◮ {p ∧ B}S{p} ◮ p ∧ ¬B → r Solutions: ◮ No initialization! ◮ {gcd(a, b) = gcd(a′, b′)∧a > 0}S{gcd(a, b) = gcd(a′, b′)} ◮ gcd(a, b) = gcd(a′, b′) ∧ a = 0 → b = gcd(a′, b′)

slide-8
SLIDE 8

Introduction Loops Loop Equations Loop Invariants Termination

How to Pick a Loop Invariant

◮ The loop invariant is a weaker version of the postcondition. ◮ p ∧ ¬B → r ◮ The loop’s job is to incrementally make B false. ◮ So, to pick a loop invariant, you need to weaken the postcondition.

Ways to Weaken

◮ Replace a constant with a range. ◮ Add a disjunct. ◮ Remove a conjunct.

slide-9
SLIDE 9

Introduction Loops Loop Equations Loop Invariants Termination

Example 1

s = Π|A|−1

j=0

A[j]

slide-10
SLIDE 10

Introduction Loops Loop Equations Loop Invariants Termination

Example 1

s = Π|A|−1

j=0

A[j] Replace a constant with a range: 0 ≤ n ≤ |A| ∧ r = Πn−1

j=0 A[j]

slide-11
SLIDE 11

Introduction Loops Loop Equations Loop Invariants Termination

Example 2

a = 0 ∧ b = gcd(a′, b′);

slide-12
SLIDE 12

Introduction Loops Loop Equations Loop Invariants Termination

Example 2

a = 0 ∧ b = gcd(a′, b′); Add a disjunct: a > 0 ∧ gcd(a, b) = gcd(a′, b′) ∨ a = 0 ∧ b = gcd(a′, b′);

slide-13
SLIDE 13

Introduction Loops Loop Equations Loop Invariants Termination

Example 3

|f(x)| < ε ∧ δ < ε

slide-14
SLIDE 14

Introduction Loops Loop Equations Loop Invariants Termination

Example 3

|f(x)| < ε ∧ δ < ε |f(x)| < ε

slide-15
SLIDE 15

Introduction Loops Loop Equations Loop Invariants Termination

Making Progress

◮ What does it mean to “make progress toward termination?” ◮ Consider a function on integers ... ◮ A function on lists ... ◮ A function on Hydras ...

slide-16
SLIDE 16

Introduction Loops Loop Equations Loop Invariants Termination

The Total Correctness Formulas

◮ p → t ≥ 0 ◮ {p ∧ B ∧ t = z}S{t < z}

slide-17
SLIDE 17

Introduction Loops Loop Equations Loop Invariants Termination

Example 1 – Total Correctness

Example 1

s := 0; i := 0; while (i < |A|) do s := s + A[i]; i := i + 1

  • d

What are these equations? ◮ p → t ≥ 0 ◮ {p ∧ B ∧ t = z}S{t < z} Solution: ◮ i ≤ |A| ∧ s = Σi−1 A[i] → t ≥ 0 ◮ {i ≤ |A| ∧ s = Σi−1 A[i] ∧ i < |A| ∧ t = z}S{t < z} ◮ Let t = |A| − i.

slide-18
SLIDE 18

Introduction Loops Loop Equations Loop Invariants Termination

Example 2 – Total Correctness

Example 2

while (a > 0) do a, b := b mod a, a

  • d

What are these equations? ◮ p → t ≥ 0 ◮ {p ∧ B ∧ t = z}S{t < z} Solutions: ◮ a > 0 → t ≥ 0 ◮ (Too big to fjt. But notice a always decreases!)