3 ms·
Inline ASM can't be verified either.
by Retra 9y ago
Inline ASM can't be verified either.
- andrewflnr 9y agoInline ASM is exactly as verifiable as the underlying CPU, given an adequate model in the verifier. That's probably easier than verifying C, which introduces extra ambiguity in its semantics. But yeah, verifiable CPUs would be nice.