Proving loop programs
Sanat Kumar Basu, Jayadev Misra · IEEE Transactions on Software Engineering · 1975
Given a `DO WHILE' programPand a functionFon a domainD, the authors investigate the problem of proving (or disproving) ifPcomputesFoverD. It is shown that ifPsatisfies certain natural constraints (well behaved), then there is a loop assertion independent of the structure of the loop body, that is both necessary and sufficient for proving the hypothesis. These results are extended to classes of loop programs which are not well behaved and to FOR loops. The sufficiency of Hoare's DO WHILE axiom for well-behaved loop programs is shown. Applications of these ideas to the problem of mechanical generation of assertions is discussed.