1 Assuming the bound specified in the harness and abstracting the task pool and
2 concurrency functions, this harness proves the memory safety of QueueSemaphoreTake.
3 Some of the task pool functions are used to model concurrent behavior required
4 to trigger all branches during the model creation.
6 This proof is a work-in-progress. Proof assumptions are described in
7 the harness. The proof also assumes the following functions are
8 memory safe and have no side effects relevant to the memory safety of
11 * pvTaskIncrementMutexHeldCount
14 * vPortGenerateSimulatedInterrupt
16 * vTaskPlaceOnEventList
17 * vTaskPriorityDisinheritAfterTimeout
19 * xTaskPriorityDisinherit
20 * xTaskPriorityInherit
21 * xTaskRemoveFromEventList