anodized 0.4.0

An ecosystem for correct Rust based on lightweight specification annotations
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use anodized::spec;

#[spec(
    requires: divisor != 0,
    ensures: *output < dividend,
)]
fn checked_divide(dividend: i32, divisor: i32) -> i32 {
    dividend / divisor
}

#[test]
fn divide_success() {
    checked_divide(10, 2);
}

#[cfg(feature = "runtime-check-and-panic")]
#[test]
#[should_panic(expected = "Precondition failed: divisor != 0")]
fn divide_by_zero_panics() {
    checked_divide(10, 0);
}