Skip to content

Commit fc752fb

Browse files
author
Matthieu Lemerre
committed
Comment out the note
1 parent 54cccd0 commit fc752fb

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

papers/2024-oopsla-typedc-dependent-nominal-physical-type-system.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -130,14 +130,14 @@ this proof relies on the hypothesis that the `box` argument of
130130
This assumption is checked in any analyzed function that would call `zeros_buffer`.
131131
Thus, if you verify all the functions in a program, we prove it memory-safe.
132132
133-
{: .note }
134-
While codex **ensures spatial memory safety** (no invalid pointer read/write),
135-
it does **not ensure termination**.
136-
Even with our given types, the `zeros_buffer` function may loop infinitely.
137-
Indeed, we cannot express the invariant stating the list is circular. It is sort
138-
of implied by the constraints that the `next` pointer is never null, since memory
139-
is finite, the list will eventually reach a loop. However, we may have a lasso-shape,
140-
where the first few `message`s are not part of that loop.
133+
[//]: # {: .note }
134+
[//]: # While codex **ensures spatial memory safety** (no invalid pointer read/write),
135+
[//]: # it does **not ensure termination**.
136+
[//]: # Even with our given types, the `zeros_buffer` function may loop infinitely.
137+
[//]: # Indeed, we cannot express the invariant stating the list is circular. It is sort
138+
[//]: # of implied by the constraints that the `next` pointer is never null, since memory
139+
[//]: # is finite, the list will eventually reach a loop. However, we may have a lasso-shape,
140+
[//]: # where the first few `message`s are not part of that loop.
141141
142142
Finally, this verification of `zeros_buffer` can be made not only on
143143
the C source code, but also on the compiled machine code, i.e. Codex

0 commit comments

Comments
 (0)