use option ana.arinc.export for saving spin model and dot graph
otherwise tests fail because of missing result-folder
spin export: jump to immediate post-dominator from branches
spin export syntactically correct
label all the things! use goto instead of do-loops. processes stopped per
default.
spin: replace else stmts with concrete conditions b/c verifier has problems with jumps?
error: proctype '%s' state %d, inherits %d 'else' stmts
http://web.mit.edu/spin_v4.2.5/Src4.2.5/pangen2.h
extend arinc_base.pml
take callstack out of context (length 1 already results in Out_of_memory for airbus code)
keep callstack for each node
use SetDomain for callstack and join all calls to a function
work on demand driven base
arinc: handle library functions in special to speed up the analysis
also take previous nodes out of context -> terminates with callstring 1 in 9m
but: leads to invalid edges b/c of cross product of nodes and callstacks
use mapping from callstack to predecessor nodes to simulate context
top of callstack is head, not last!
fixed combine
fixed fixpoint not reached: set initial predecessor mapping when spawning/as startstate