src/soc/fu/shift_rot/formal/proof_main_stage.py

   1 # Proof of correctness for partitioned equal signal combiner
   2 # Copyright (C) 2020 Michael Nolan <mtnolan2640@gmail.com>
   3 """
   4 Links:
   5 * https://bugs.libre-soc.org/show_bug.cgi?id=340
   6 """
   7
   8 from nmigen import (Module, Signal, Elaboratable, Mux, Cat, Repl,
   9                     signed)
  10 from nmigen.asserts import Assert, AnyConst, Assume, Cover
  11 from nmutil.formaltest import FHDLTestCase
  12 from nmigen.cli import rtlil
  13
  14 from soc.fu.shift_rot.main_stage import ShiftRotMainStage
  15 from soc.fu.alu.pipe_data import ALUPipeSpec
  16 from soc.fu.alu.alu_input_record import CompALUOpSubset
  17 from soc.decoder.power_enums import MicrOp
  18 import unittest
  19 from nmutil.extend import exts
  20
  21
  22 # This defines a module to drive the device under test and assert
  23 # properties about its outputs
  24 class Driver(Elaboratable):
  25     def __init__(self):
  26         # inputs and outputs
  27         pass
  28
  29     def elaborate(self, platform):
  30         m = Module()
  31         comb = m.d.comb
  32
  33         rec = CompALUOpSubset()
  34         # Setup random inputs for dut.op
  35         for p in rec.ports():
  36             comb += p.eq(AnyConst(p.width))
  37
  38         pspec = ALUPipeSpec(id_wid=2)
  39         m.submodules.dut = dut = ShiftRotMainStage(pspec)
  40
  41         # convenience variables
  42         a = dut.i.rs
  43         b = dut.i.rb
  44         ra = dut.i.a
  45         carry_in = dut.i.xer_ca[0]
  46         carry_in32 = dut.i.xer_ca[1]
  47         carry_out = dut.o.xer_ca
  48         o = dut.o.o.data
  49
  50         # setup random inputs
  51         comb += a.eq(AnyConst(64))
  52         comb += b.eq(AnyConst(64))
  53         comb += carry_in.eq(AnyConst(1))
  54         comb += carry_in32.eq(AnyConst(1))
  55
  56         # copy operation
  57         comb += dut.i.ctx.op.eq(rec)
  58
  59         # Assert that op gets copied from the input to output
  60         for rec_sig in rec.ports():
  61             name = rec_sig.name
  62             dut_sig = getattr(dut.o.ctx.op, name)
  63             comb += Assert(dut_sig == rec_sig)
  64
  65         # signed and signed/32 versions of input a
  66         a_signed = Signal(signed(64))
  67         a_signed_32 = Signal(signed(32))
  68         comb += a_signed.eq(a)
  69         comb += a_signed_32.eq(a[0:32])
  70
  71         # must check Data.ok
  72         o_ok = Signal()
  73         comb += o_ok.eq(1)
  74
  75         # main assertion of arithmetic operations
  76         with m.Switch(rec.insn_type):
  77
  78             with m.Case(MicrOp.OP_SHL):
  79                 comb += Assume(ra == 0)
  80                 with m.If(rec.is_32bit):
  81                     comb += Assert(o[0:32] == ((a << b[0:6]) & 0xffffffff))
  82                     comb += Assert(o[32:64] == 0)
  83                 with m.Else():
  84                     comb += Assert(o == ((a << b[0:7]) & ((1 << 64)-1)))
  85
  86             with m.Case(MicrOp.OP_SHR):
  87                 comb += Assume(ra == 0)
  88                 with m.If(~rec.is_signed):
  89                     with m.If(rec.is_32bit):
  90                         comb += Assert(o[0:32] == (a[0:32] >> b[0:6]))
  91                         comb += Assert(o[32:64] == 0)
  92                     with m.Else():
  93                         comb += Assert(o == (a >> b[0:7]))
  94                 with m.Else():
  95                     with m.If(rec.is_32bit):
  96                         comb += Assert(o[0:32] == (a_signed_32 >> b[0:6]))
  97                         comb += Assert(o[32:64] == Repl(a[31], 32))
  98                     with m.Else():
  99                         comb += Assert(o == (a_signed >> b[0:7]))
 100             #TODO
 101             with m.Case(MicrOp.OP_RLC):
 102                 pass
 103             with m.Case(MicrOp.OP_RLCR):
 104                 pass
 105             with m.Case(MicrOp.OP_RLCL):
 106                 pass
 107             with m.Case(MicrOp.OP_EXTSWSLI):
 108                 # sign-extend
 109                 a_s = Signal(64, reset_less=True)
 110                 comb += a_s.eq(exts(a, 32, 64))
 111                 # assume b[0:6] is sh
 112                 comb += Assume(b[7:] == 0)
 113                 with m.If(b[0:7] == 0):
 114                     comb += Assert(o[0:32] == a_s[0:32])
 115                 with m.Else():
 116                     #b_s = 64-b[0:6]
 117                     #comb += Assert(o == ((a_s << b_s) & ((1 << 64)-1)))
 118                     pass
 119
 120             with m.Default():
 121                 comb += o_ok.eq(0)
 122
 123         # check that data ok was only enabled when op actioned
 124         comb += Assert(dut.o.o.ok == o_ok)
 125
 126         return m
 127
 128
 129 class ALUTestCase(FHDLTestCase):
 130     def test_formal(self):
 131         module = Driver()
 132         self.assertFormal(module, mode="bmc", depth=2)
 133         self.assertFormal(module, mode="cover", depth=2)
 134     def test_ilang(self):
 135         dut = Driver()
 136         vl = rtlil.convert(dut, ports=[])
 137         with open("main_stage.il", "w") as f:
 138             f.write(vl)
 139
 140
 141 if __name__ == '__main__':
 142     unittest.main()