diff options
| author | Christophe Grenier <[email protected]> | 2023-12-27 11:20:49 +0100 |
|---|---|---|
| committer | Christophe Grenier <[email protected]> | 2023-12-27 11:20:49 +0100 |
| commit | 952f581bdd3509a2812e156bbf5d17eafd9e1202 (patch) | |
| tree | d490e9ece5392881c383b8712669ab66d38cdfe8 | |
| parent | 31042a31265ae4574ea0e346cbee08bd00e70bbd (diff) | |
src/file_mov.c: more frama-c annotations
| -rw-r--r-- | src/file_mov.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/file_mov.c b/src/file_mov.c index 8b98f299..b52b782a 100644 --- a/src/file_mov.c +++ b/src/file_mov.c @@ -107,6 +107,7 @@ static void file_rename_mov(file_recovery_t *file_recovery) /*@ @ requires \valid_read(atom + (0 .. 3)); + @ terminates \true; @ assigns \nothing; @*/ static inline int is_known_atom(const unsigned char *atom) @@ -137,6 +138,7 @@ static inline int is_known_atom(const unsigned char *atom) @ requires buffer_size >= 16; @ requires file_recovery->data_check==&data_check_mov; @ requires valid_data_check_param(buffer, buffer_size, file_recovery); + @ terminates \true; @ ensures valid_data_check_result(\result, file_recovery); @ assigns file_recovery->calculated_file_size; @*/ @@ -146,6 +148,7 @@ static data_check_t data_check_mov(const unsigned char *buffer, const unsigned i /*@ assert file_recovery->file_size <= PHOTOREC_MAX_FILE_SIZE; */ /*@ @ loop assigns file_recovery->calculated_file_size; + @ loop variant file_recovery->file_size + buffer_size/2 - (file_recovery->calculated_file_size + 8); @*/ while(file_recovery->calculated_file_size + buffer_size/2 >= file_recovery->file_size && file_recovery->calculated_file_size + 8 <= file_recovery->file_size + buffer_size/2) @@ -243,6 +246,9 @@ static data_check_t data_check_mov(const unsigned char *buffer, const unsigned i static int header_check_mov_aux(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new) { uint64_t i=0; + /*@ + @ loop variant buffer_size-16 - i; + @*/ while(i <= buffer_size-16) { /*@ assert i <= buffer_size - 16; */ |