Search results

Stack overflow (non-termination) in dropping_formula_for_term when a recursive ADT's self-pointer is nested inside a tuple/struct field

bugSomething isn't workingSomething isn't working

Status: Open.

#178 In coord-e/thrust;

· coord-e opened on Jul 13, 2026

Unsound: moving a &mut-capturing closure out of a tuple/struct field into a by-value FnOnce/FnMut verifies panicking programs as safe

bugSomething isn't workingSomething isn't working

Status: Open.

#177 In coord-e/thrust;

· coord-e opened on Jul 13, 2026

Panic: "borrowing unbound var" when writing through a reassigned &mut local

bugSomething isn't workingSomething isn't working

Status: Open.

#176 In coord-e/thrust;

· coord-e opened on Jul 12, 2026

Incompleteness: a &mut stored in a Box has its prophecy resolved only at the Box's drop, so reading the referent before the box is dropped wrongly rejects safe programs

Status: Open.

#175 In coord-e/thrust;

· coord-e opened on Jul 10, 2026

Unsound: the i32::abs extern spec (requires(true)) is violated at i32::MIN, so overflowing abs verifies as safe

bugSomething isn't workingSomething isn't working

Status: Open.

#174 In coord-e/thrust;

· coord-e opened on Jul 9, 2026

Incompleteness: dropping a recursively-defined ADT does not resolve &mut prophecies stored in its recursive-position field, so safe programs are wrongly rejected

bugSomething isn't workingSomething isn't working

Status: Open.

#173 In coord-e/thrust;

· coord-e opened on Jul 8, 2026

Unsoundness: unsigned subtraction underflow is not modeled, so panicking programs are verified as safe

Status: Open.

#172 In coord-e/thrust;

· coord-e opened on Jul 7, 2026

Incompleteness: refinement on a reference's pointee (&{ v | φ } / &mut { v | φ }) in parameter position is not assumed by the callee

Status: Open.

#166 In coord-e/thrust;

· coord-e opened on Jul 3, 2026

Incompleteness: unsigned integer types (usize/u32/u64) are modeled as unconstrained integers, so their >= 0 lower bound is not assumed and safe programs are wrongly rejected

Status: Open.

#165 In coord-e/thrust;

· coord-e opened on Jul 2, 2026

Incompleteness: Box<T> (Own) is related invariantly in subtyping, wrongly rejecting valid refinement weakening through a box

Status: Open.

#157 In coord-e/thrust;

· coord-e opened on Jun 29, 2026

Integer division (/) and remainder (%) abort with unimplemented!, and bypass div-by-zero / MIN / -1 panic checking

bugSomething isn't workingSomething isn't working

Status: Open.

#144 In coord-e/thrust;

· coord-e opened on Jun 22, 2026

Quantifier (forall/exists) binder sorts are never declared in SMT-LIB, so any spec quantifying over a datatype/tuple-sorted variable emits an undefined sort

bugSomething isn't workingSomething isn't working

Status: Open.

#142 In coord-e/thrust;

· coord-e opened on Jun 18, 2026