云南大学-代飞《软件过程》Chapter3.pptVIP

The Hoare triple “{P} S {Q}” is used to describe the semantics of program S, whilst P and Q denote predicates that describe properties of the variables that occur in S. P is called a precondition for S and Q is called a postcondition for S. The Hoare triple denotes that if P is true before S is executed and the execution of S terminates, then Q is true after the execution of S (Hein 2003). Hoare Logic does not make sure that S terminates. Hoare Logic Partial correctness is defined as that {P} S {Q} is true if whenever S terminates after starting in an initial state that satisfies P then the