2015-08-15 14:58:59 +03:00
|
|
|
N = 2
|
|
|
|
S = 3
|
|
|
|
STATES = {0..S-1}
|
|
|
|
CONN_NAMES = {0..N-1}
|
|
|
|
channel input, render, up, down:STATES
|
|
|
|
channel save:CONN_NAMES.STATES
|
2015-08-13 21:58:03 +03:00
|
|
|
|
2015-08-15 14:58:59 +03:00
|
|
|
apply(state, patch) = (state + patch) % S
|
|
|
|
diff(state1, state2) = (state2 - state1) % S
|
2015-08-13 22:25:18 +03:00
|
|
|
|
2015-08-15 14:58:59 +03:00
|
|
|
CLIENT(i, state, shadow) =
|
|
|
|
input?new_state -> up!diff(shadow, new_state) -> CLIENT(i, new_state, shadow)
|
2015-08-13 22:41:30 +03:00
|
|
|
[] down?patch -> if patch != 0
|
2015-08-15 14:58:59 +03:00
|
|
|
then render!apply(state, patch) -> CLIENT(i, apply(state, patch), apply(shadow, patch))
|
|
|
|
else CLIENT(i, state, state)
|
2015-08-13 22:41:30 +03:00
|
|
|
|
2015-08-15 14:58:59 +03:00
|
|
|
SERVER(i, state, shadow) =
|
|
|
|
up?patch -> save!i!apply(state, patch)
|
|
|
|
-> down!diff(apply(shadow, patch), apply(state, patch))
|
|
|
|
-> SERVER(i, apply(state, patch), apply(shadow, patch))
|
|
|
|
[] save?save_i?new_state -> if (new_state == state) then SERVER(i, state, shadow) else
|
|
|
|
down!diff(apply(shadow, patch), apply(state, patch))
|
|
|
|
-> SERVER(i, apply(state, patch), apply(shadow, patch)
|
2015-08-13 22:41:30 +03:00
|
|
|
|
2015-08-15 14:58:59 +03:00
|
|
|
SYSTEM = CLIENT(0, 0, 0) ||| CLIENT(1, 0, 0) ||| SERVER(0, 0, 0) ||| SERVER(1, 0, 0)
|
2015-08-13 21:58:03 +03:00
|
|
|
|
|
|
|
assert SYSTEM :[deadlock free [F]]
|