我有一个大约的数据结构(我无法分享完整的源代码,但可以根据要求提供其他信息)如下:
generic
type Item_Type is private;
package Util.Pool is
type Pool is limited new Ada.Finalization.Limited_Controlled with private;
procedure Get_Available (From: in out Pool; Available: out Natural);
overriding procedure Finalize (Object: in out Pool);
private
type Item_Array is array (Positive range <>) of Item_Type;
type Item_Array_Access is access all Item_Array;
Null_Item_Array: constant Item_Array_Access := null;
protected type Protected_Pool is
function Get_Available return Natural;
private
Available: Natural := 0;
Items: Item_Array_Access := Null_Item_Array;
end Protected_Pool;
type Pool is limited new Ada.Finalization.Limited_Controlled with record
List: Protected_Pool;
end record;
end Util.Pool;
完整代码编译时没有错误和警告,但 SPARK 证明步骤失败并显示以下内容:gnatprove -PX:\Path\To\project.gpr -j0 --mode=flow --ide-progress-bar -u main.adb
Phase 1 of 2: generation of Global contracts ...
main.adb:11:05: instantiation error at util-pool.ads:34
main.adb:11:05: effectively volatile type "Protected_Pool" must be declared at library level (SPARK RM 7.1.3(3))
main.adb:11:05: instantiation error at util-pool.ads:45
main.adb:11:05: component "List" of non-volatile type "Pool" cannot be volatile
gnatprove: error during generation of Global contracts
我已阅读 corresponding parts SPARK 手册,但我不明白如何根据它们修复我的代码。 TIA。
最佳答案
看起来好像您正在 Main
中实例化泛型.这不是“在图书馆级别”。
实例化为库级包,应该工作得更好。这需要进入一个文件(在这种情况下)my_util_pool.ads
:
with Util.Pool;
package My_Util_Pool is new Util.Pool (Integer);
main.adb
现在开始with My_Util_Pool;
with ...;
procedure Main is
...
关于data-structures - SPARK 实例化错误 w.r.t. volatile 类型,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/64719529/