what does the never claim verify in this promela model

Question

bool p = true;

active proctype q() {
  do
    :: p=false; p=true; p=false
  od
}

never {
do
  :: !p -> goto acceptRun
  :: else -> skip; skip
od;
acceptRun : skip

}

In this promela model, the never claim verifies that initially and then at every second time step p holds. Why? Thanks!

score 0 · Answer 1 · answered Jan 04 '14 at 19:05

A never claim takes one step with every step of the model. So if !p the next step will be the accept state (never claim fails). But if p then the never claim will need two addition steps before it returns to checking on p again.

While the claim is not 'looking for p', you can 'sneak in' some other value for p.

what does the never claim verify in this promela model

1 Answers1