# # Copyright (C) 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved. # # Permission is hereby granted, free of charge, to any person obtaining a copy of # this software and associated documentation files (the "Software"), to deal in # the Software without restriction, including without limitation the rights to # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of # the Software, and to permit persons to whom the Software is furnished to do so, # subject to the following conditions: # # The above copyright notice and this permission notice shall be included in all # copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. # HARNESS_ENTRY=harness HARNESS_FILE=Shadow_MatchTopic_harness PROOF_UID = Shadow_MatchTopic # The topic length is bounded to reduce the proof run time. This length bounds # the time to look for the thing name in the topic string. The minimum length # of the topic string is the length of the SHADOW_PREFIX ("$aws/things/") # plus the maximum Shadow Message Type length ("/shadow/update/documents") # plus the minimum Thing name length (1 byte). Memory safety on the buffer # holding the topic string can be proven within a reasonable bound. It adds # no value to the proof to input the largest possible topic string accepted # by AWS (64KB). The reasonable bound for topic length is chosen as 50 bytes, # which is higher than the minimum (38 bytes) topic length and provides a good # allowance for the variable Thing name length (13 bytes). TOPIC_STRING_LENGTH_MAX=50 DEFINES += -DTOPIC_STRING_LENGTH_MAX=$(TOPIC_STRING_LENGTH_MAX) INCLUDES += # The maximum length of the message type ( /shadow/update/documents ) is 24. UNWINDSET += strncmp.0:25 UNWINDSET += __CPROVER_file_local_shadow_c_validateName.0:$(TOPIC_STRING_LENGTH_MAX) # The number of message types is 8. UNWINDSET += __CPROVER_file_local_shadow_c_extractShadowMessageType.0:9 PROOF_SOURCES += $(PROOFDIR)/$(HARNESS_FILE).c PROJECT_SOURCES += $(SRCDIR)/source/shadow.c include ../Makefile.common