# General Information on the PPL

### 0.6.1

## The Main Features

The Parma Polyhedra Library (PPL) is a modern C++ library for the manipulation of numerical information that can be represented by points in some -dimensional vector space. For instance, one of the key domains the PPL supports is that of rational convex polyhedra (Section Convex Polyhedra). Such domains are employed in several systems for the analysis and verification of hardware and software components, with applications spanning imperative, functional and logic programming languages, synchronous languages and synchronization protocols, real-time and hybrid systems. Even though the PPL library is not meant to target a particular problem, the design of its interface has been largely influenced by the needs of the above class of applications. That is the reason why the library implements a few operators that are more or less specific to static analysis applications, while lacking some other operators that might be useful when working, e.g., in the field of computational geometry.

The main features of the library are the following:

- it is user friendly: you write `x + 2*y + 5*z <= 7` when you mean it;
- it is fully dynamic: available virtual memory is the only limitation to the dimension of anything;
- it provides full support for the manipulation of convex polyhedra that are not topologically closed;
- it is written in standard C++: meant to be portable;
- it is exception-safe: never leaks resources or leaves invalid object fragments around;
- it is rather efficient: and we hope to make it even more so;
- it is thoroughly documented: perhaps not literate programming but close enough;
- it has interfaces to other programming languages: including C and a number of Prolog systems;
- it is free software: distributed under the terms of the GNU General Public License.

In addition to the basic domains, we also provide generic support for constructing new domains from pre-existing domains. The following domains and domain constructors are provided by the PPL:

- the domain of topologically closed, rational convex polyhedra;
- the domain of rational convex polyhedra that are not necessarily closed;
- the powerset construction;
- the powerset construction, instantiated for rational convex polyhedra.

In the following sections we describe these domains and domain constructors together with their representations and operations that are available to the PPL user.

In the final section of this chapter (Section Using the Library), we provide some additional advice on the use of the library.

## Convex Polyhedra

In this section we introduce convex polyhedra, as considered by the library, in more detail. For more information about the definitions and results stated here see [BRZH02b], [Fuk98], [NW88], and [Wil93].

Vectors, Matrices and Scalar Products

We denote by the -dimensional vector space on the field of real numbers , endowed with the standard topology. The set of all non-negative reals is denoted by . For each , denotes the -th component of the (column) vector . We denote by the vector of , called the origin, having all components equal to zero. A vector can be also interpreted as a matrix in and manipulated accordingly using the usual definitions for addition, multiplication (both by a scalar and by another matrix), and transposition, denoted by .

The scalar product of , denoted , is the real number

For any , the Minkowski's sum of and is:

Affine Hyperplanes and Half-spaces

For each vector and scalar , where , and for each relation symbol , the linear constraint defines:

- an affine hyperplane if it is an equality constraint, i.e., if ;
- a topologically closed affine half-space if it is a non-strict inequality constraint, i.e., if ;
- a topologically open affine half-space if it is a strict inequality constraint, i.e., if .

Note that each hyperplane can be defined as the intersection of the two closed affine half-spaces and . Also note that, when , the constraint is either a tautology (i.e., always true) or inconsistent (i.e., always false), so that it defines either the whole vector space or the empty set .

Convex Polyhedra

The set is a not necessarily closed convex polyhedron (NNC polyhedron, for short) if and only if either can be expressed as the intersection of a finite number of (open or closed) affine half-spaces of or and . The set of all NNC polyhedra on the vector space is denoted .

The set is a closed convex polyhedron (closed polyhedron, for short) if and only if either can be expressed as the intersection of a finite number of closed affine half-spaces of or and . The set of all closed polyhedra on the vector space is denoted .

When ordering NNC polyhedra by the set inclusion relation, the empty set and the vector space are, respectively, the smallest and the biggest elements of both and . The vector space is also called the universe polyhedron.

In theoretical terms, is a lattice under set inclusion and is a sub-lattice of .

Bounded Polyhedra

An NNC polyhedron is bounded if there exists a such that

A bounded polyhedron is also called a polytope.

## Representations of Convex Polyhedra

NNC polyhedra can be specified by using two possible representations, the constraints (or implicit) representation and the generators (or parametric) representation.

Constraints representation

In the sequel, we will simply write ``equality'' and ``inequality'' to mean ``linear equality'' and ``linear inequality'', respectively; also, we will refer to either an equality or an inequality as a constraint.

By definition, each polyhedron is the set of solutions to a constraint system, i.e., a finite number of constraints. By using matrix notation, we have

where, for all , and , and are the number of equalities, the number of non-strict inequalities, and the number of strict inequalities, respectively.

Combinations and Hulls

Let be a finite set of vectors. For all scalars , the vector is said to be a linear combination of the vectors in . Such a combination is said to be

- a positive (or conic) combination, if ;
- an affine combination, if ;
- a convex combination, if it is both positive and affine.

We denote by (resp., , , ) the set of all the linear (resp., positive, affine, convex) combinations of the vectors in .

Let , where . We denote by the set of all convex combinations of the vectors in such that for some (informally, we say that there exists a vector of that plays an active role in the convex combination). Note that so that, if ,

It can be observed that is an affine space, is a topologically closed convex cone, is a topologically closed polytope, and is an NNC polytope.

Points, Closure Points, Rays and Lines

Let be an NNC polyhedron. Then

- a vector is called a point of ;
- a vector is called a closure point of if it is a point of the topological closure of ;
- a vector , where , is called a ray (or direction of infinity) of if and , for all points and all ;
- a vector is called a line of if both and are rays of .

A point of an NNC polyhedron is a vertex if and only if it cannot be expressed as a convex combination of any other pair of distinct points in . A ray of a polyhedron is an extreme ray if and only if it cannot be expressed as a positive combination of any other pair and of rays of , where , and for all (i.e., rays differing by a positive scalar factor are considered to be the same ray).

Generators Representation

Each NNC polyhedron can be represented by finite sets of lines , rays , points and closure points of . The 4-tuple is said to be a generator system for , in the sense that

where the symbol '' denotes the Minkowski's sum.

When is a closed polyhedron, then it can be represented by finite sets of lines , rays and points of . In this case, the 3-tuple is said to be a generator system for since we have

Thus, in this case, every closure point of is a point of .

For any and generator system for , we have if and only if . Also must contain all the vertices of although can be non-empty and have no vertices. In this case, as is necessarily non-empty, it must contain points of that are not vertices. For instance, the half-space of corresponding to the single constraint can be represented by the generator system such that , , , and . It is also worth noting that the only ray in is not an extreme ray of .

Minimized Representations

A constraints system for an NNC polyhedron is said to be minimized if no proper subset of is a constraint system for .

Similarly, a generator system for an NNC polyhedron is said to be minimized if there does not exist a generator system for such that , , and .

Double Description

Any NNC polyhedron can be described by using a constraint system , a generator system , or both by means of the double description pair (DD pair) . The double description method is a collection of well-known as well as novel theoretical results showing that, given one kind of representation, there are algorithms for computing a representation of the other kind and for minimizing both representations by removing redundant constraints/generators.

Such changes of representation form a key step in the implementation of many operators on NNC polyhedra: this is because some operators, such as intersections and poly-hulls, are provided with a natural and efficient implementation when using one of the representations in a DD pair, while being rather cumbersome when using the other.

Topologies and Topological-compatibility

As indicated above, when an NNC polyhedron is necessarily closed, we can ignore the closure points contained in its generator system (as every closure point is also a point) and represent by the triple . Similarly, can be represented by a constraint system that has no strict inequalities. Thus a necessarily closed polyhedron can have a smaller representation than one that is not necessarily closed. Moreover, operators restricted to work on closed polyhedra only can be implemented more efficiently. For this reason the library provides two alternative ``topological kinds'' for a polyhedron, NNC and C. We shall abuse terminology by referring to the topologcal kind of a polyhedron as its topology.

In the library, the topology of each polyhedron object is fixed once for all at the time of its creation and must be respected when performing operations on the polyhedron.

Unless it is otherwise stated, all the polyhedra, constraints and/or generators in any library operation must obey the following topological-compatibility rules:

- polyhedra are topologically-compatible if and only if they have the same topology;
- all constraints except for strict inequality constraints and all generators except for closure points are topologically-compatible with both C and NNC polyhedra;
- strict inequality constraints and closure points are topologically-compatible with a polyhedron if and only if it is NNC.

Wherever possible, the library provides methods that, starting from a polyhedron of a given topology, build the corresponding polyhedron having the other topology.

Space Dimensions and Dimension-compatibility

The space dimension of an NNC polyhedron (resp., a C polyhedron ) is the dimension of the corresponding vector space . The space dimension of constraints, generators and other objects of the library is defined similarly.

Unless it is otherwise stated, all the polyhedra, constraints and/or generators in any library operation must obey the following space dimension-compatibility rules:

- polyhedra are dimension-compatible if and only if they have the same space dimension;
- the constraint where and , is dimension-compatible with a polyhedron having space dimension if and only if ;
- the generator is dimension-compatible with a polyhedron having space dimension if and only if ;
- a system of constraints (resp., generators) is dimension-compatible with a polyhedron if and only if all the constraints (resp., generators) in the system are dimension-compatible with the polyhedron.

While the space dimension of a constraint, a generator or a system thereof is automatically adjusted when needed, the space dimension of a polyhedron can only be changed by explicit calls to operators provided for that purpose.

Rational Polyhedra

An NNC polyhedron is called rational if it can be represented by a constraint system where all the constraints have rational coefficients. It has been shown that an NNC polyhedron is rational if and only if it can be represented by a generator system where all the generators have rational coefficients.

The library only supports rational polyhedra. The restriction to rational numbers applies not only to polyhedra, but also to the other numeric arguments that may be required by the operators considered, such as the coefficients defining (rational) affine transformations and (rational) bounding boxes.

## Operations on Convex Polyhedra

In this section we briefly describe operations on NNC polyhedra that are provided by the library.

Intersection and Convex Polyhedral Hull

For any pair of NNC polyhedra , the intersection of and , defined as the set intersection , is the biggest NNC polyhedron included in both and ; similarly, the convex polyhedral hull (or poly-hull) of and , denoted by , is the smallest NNC polyhedron that includes both and . The intersection and poly-hull of any pair of closed polyhedra in is also closed.

In theoretical terms, the intersection and poly-hull operators defined above are the binary meet and the binary join operators on the lattices and .

Convex Polyhedral Difference

For any pair of NNC polyhedra , the convex polyhedral difference (or poly-difference) of and is defined as the smallest convex polyhedron containing the set-theoretic difference of and .

In general, even though are topologically closed polyhedra, their poly-difference may be a convex polyhedron that is not topologically closed. For this reason, when computing the poly-difference of two C polyhedra, the library will enforce the topological closure of the result.

Concatenating Polyhedra

Viewing a polyhedron as a set of tuples (its points), it is sometimes useful to consider the set of tuples obtained by concatenating an ordered pair of polyhedra. Formally, the concatenation of the polyhedra and (taken in this order) is the polyhedron such that

Another way of seeing it is as follows: first embed polyhedron into a vector space of dimension and then add a suitably renamed-apart version of the constraints defining .

Adding New Dimensions to the Vector Space

The library provides two operators for adding a number of space dimensions to an NNC polyhedron , therefore transforming it into a new NNC polyhedron . In both cases, the added dimensions of the vector space are those having the highest indices.

The operator `add_dimensions_and_embed` embeds the polyhedron into the new vector space of dimension and returns the polyhedron defined by all and only the constraints defining (the variables corresponding to the added dimensions are unconstrained). For instance, when starting from a polyhedron and adding a third dimension, the result will be the polyhedron

In contrast, the operator `add_dimensions_and_project` projects the polyhedron into the new vector space of dimension and returns the polyhedron whose constraint system, besides the constraints defining , will include additional constraints on the added dimensions. Namely, the corresponding variables are all constrained to be equal to 0. For instance, when starting from a polyhedron and adding a third dimension, the result will be the polyhedron

Removing Dimensions from the Vector Space

The library provides two operators for removing space dimensions from an NNC polyhedron , therefore transforming it into a new NNC polyhedron where .

Given a set of variables, the operator `remove_dimensions` removes all the space dimensions specified by the variables in the set. For instance, letting be the singleton set , then after invoking this operator with the set of variables the resulting polyhedron is

Given a space dimension less than or equal to that of the polyhedron, the operator `remove_higher_dimensions` removes the dimensions having indices greater than or equal to . For instance, letting defined as before, by invoking this operator with the resulting polyhedron will be

Mapping the Dimensions of the Vector Space

The operator `map_dimensions` provided by the library maps the dimensions of the vector space according to a partial injective function such that with . Dimensions corresponding to indices that are not mapped by are removed.

If , i.e., if the function is undefined everywhere, then the operator projects the argument polyhedron onto the zero-dimension space ; otherwise the result is given by

Expanding One Dimension of the Vector Space to Multiple Dimensions

The operator `expand_dimension` provided by the library adds new dimensions to a polyhedron , with , so that dimensions , , , of the result are exact copies of the -th dimension of . More formally,

This operation has been proposed in [GDMDRS04].

Folding Multiple Dimensions of the Vector Space into One Dimension

The operator `fold_dimensions` provided by the library, given a polyhedron , with , folds a set of dimensions , with and for each , into dimension , where . The result is given by

where

and, for , , ,

and, finally, for , , ,

( denotes the cardinality of the finite set ).

This operation has been proposed in [GDMDRS04].

Affine Images and Preimages

For each function mapping , we denote by the image under of the set ; formally,

Similarly, we denote by the preimage under of , that is the largest set such that ; formally,

The function mapping is an affine transformation if there exist a matrix and a vector such that, for all , we have . If , then the function is said to be space-dimension preserving.

Both and are closed under the application of any space-dimension preserving affine image and preimage operators.

The library provides two operators, one computes an affine image and the other an affine preimage of a polyhedron for a given variable and linear expression . This variable and expression determine the affine transformation that is to be used by the operator. That is, is the transformation defined by the matrix and vector

where the (resp., ) occurs in the st row in (resp., position in ). Thus transforms any point in the polyhedron to

The affine image operator computes the affine image of under . For instance, suppose the polyhedron to be transformed is the square in generated by the set of points . Then, for example if the considered variable is and the linear expression (so that , ), the affine image operator will translate to the parallelogram generated by the set of points with height equal to the side of the square and oblique sides parallel to the line . If the considered variable is as before (i.e., ) but the linear expression is (so that ), then the resulting polyhedron is the positive diagonal of the square.

The affine preimage operator computes the affine preimage of under . For instance, suppose now that we apply the affine preimage operator as given in the first example using variable and linear expression to the parallelogram ; then we get the original square back. If, on the other hand, we apply the affine preimage operator as given in the second example using variable and linear expression to , then the resulting polyhedron is a line that corresponds to the axes.

Observe that provided the coefficient of the considered variable in the linear expression is non-zero, the affine transformation is invertible.

Generalized Affine Images

The library provides another operator which is a generalization of the affine image operator. Given a polyhedron , an affine expression , a relation symbol , and an affine expression , the image of with respect to the transfer function is defined as

Note that, when and , then the above operator is equivalent to the application of the standard affine image of with respect to the variable and the affine expression (hence the name given to this operator).

Time-Elapse Operator

The time-elapse operator has been defined in [HPR97]. Actually, the time-elapse operator provided by the library is a slight generalization of that one, since it also works on NNC polyhedra. For any two NNC polyhedra , the time-elapse between and , denoted , is the smallest NNC polyhedron containing the set

Note that, if are closed polyhedra, the above set is also a closed polyhedron. In contrast, when is not topologically closed, the above set might not be an NNC polyhedron.

Relation-with Operators

The library provides operators for checking the relation holding between an NNC polyhedron and either a constraint or a generator.

Suppose is an NNC polyhedron and an arbitrary constraint system representing . Suppose also that is a constraint with and the set of points that satisfy . The possible relations between and are as follows.

- is disjoint from if ; that is, adding to gives us the empty polyhedron.
- strictly intersects if and ; that is, adding to gives us a non-empty polyhedron strictly smaller than .
- is included in if ; that is, adding to leaves unchanged.
- saturates if , where is the hyperplane induced by constraint , i.e., the set of points satisfying the equality constraint ; that is, adding the constraint to leaves unchanged.

The polyhedron subsumes the generator if adding to any generator system representing does not change .

Intervals, boxes and bounding boxes

An interval in is a pair of bounds, called lower and upper. Each bound can be either (1) closed and bounded, (2) open and bounded, or (3) open and unbounded. If the bound is bounded, then it has a value in . An -dimensional box in is a sequence of intervals in .

The polyhedron represents a box in if is described by a constraint system in that consists of one constraint for each bounded bound (lower and upper) in an interval in : Letting be the vector in with 1 in the 'th position and zeroes in every other position; if the lower bound of the 'th interval in is bounded, the corresponding constraint is defined as , where is the value of the bound and is if it is a closed bound and if it is an open bound. Similarly, if the upper bound of the 'th interval in is bounded, the corresponding constraint is defined as , where is the value of the bound and is if it is a closed bound and if it is an open bound.

If every bound in the intervals defining a box is either closed and bounded or open and unbounded, then represents a closed polyhedron.

The bounding box of an NNC polyhedron is the smallest -dimensional box containing .

The library provides operations for computing the bounding box of an NNC polyhedron and conversely, for obtaining the NNC polyhedron representing a given bounding box.

Widening Operators

The library provides two widening operators for the domain of NNC polyhedra. The first one, that we call H79-widening, mainly follows the specification provided in the PhD thesis of N. Halbwachs [Hal79], also described in [HPR97]. There are a few differences between the H79-widening and the widening described in the cited paper. In particular, the H79-widening of an NNC polyhedron using the NNC polyhedron :

- allows for equalities in and (the original definition is restricted to inequalities);
- requires as a precondition that .

The second widening operator, that we call BHRZ03-widening, is an instance of the specification provided in [BHRZ03a]. This operator also requires as a precondition that and it is guaranteed to provide a result which is at least as precise as the H79-widening.

Both widening operators can be applied to polyhedra that are not topologically closed. The user is warned that, in such a case, the results may not closely match the geometric intuition which is at the base of the specification of the two widenings. The reason is that, in the current implementation, the widenings are not directly applied to the NNC polyhedra, but rather to their internal representations. Implementation work is in progress and future versions of the library may provide an even better integration of the two widenings with the domain of NNC polyhedra.

Widening with Tokens

When approximating a fixpoint computation using widening operators, a common tactic to improve the precision of the final result is to delay the application of widening operators. The usual approach is to fix a parameter and only apply widenings starting from the -th iteration.

The library also supports an improved widening delay strategy, that we call widening with tokens [BHRZ03a]. A token is a sort of wildcard allowing for the replacement of the widening application by the exact upper bound computation: the token is used (and thus consumed) only when the widening would have resulted in an actual precision loss (as opposed to the potential precision loss of the classical delay strategy). Thus, all widening operators can be supplied with an optional argument, recording the number of available tokens, which is decremented when tokens are used. The approximated fixpoint computation will start with a fixed number of tokens, which will be used if and when needed. When there are no tokens left, the widening is always applied.

Extrapolation Operators

Besides the two widening operators, the library also implements several extrapolation operators, which differ from widenings in that their use along an upper iteration sequence does not ensure convergence in a finite number of steps.

In particular, for each of the two widenings there is a corresponding limited extrapolation operator, which can be used to implement the widening ``up to'' technique as described in [HPR97]. Each limited extrapolation operator takes a constraint system as an additional parameter and uses it to improve the approximation yielded by the corresponding widening operator. Note that a convergence guarantee can only be obtained by suitably restricting the set of constraints that can occur in this additional parameter. For instance, in [HPR97] this set is fixed once and for all before starting the computation of the upward iteration sequence.

The bounded extrapolation operators further enhance each one of the limited extrapolation operators described above, by ensuring that their results cannot be worse than the smallest bounding box enclosing the two argument polyhedra.

## The Powerset Construction

The PPL provides the finite powerset construction; this takes a pre-existing domain and upgrades it to one that can represent disjunctive information (by using a finite number of disjucts). The construction follows the approach described in [Bag98], also summarised in [BHZ04] where there is an account of generic widenings for the powerset domain (some of which are supported in the instantiation of this construction by the domain of convex polyhedra and described in Section The Polyhedra Powerset Domain).

The Powerset Domain

The domain is built from a pre-existing base-level domain which must include an entailment relation `', a meet operation `', a top element `' and bottom element `'.

As the intended semantics of an element of the powerset of the base-level domain is that of disjunction, elements of the powerset are always reduced to semantically-equivalent non-redundant elements.

A set is called non-redundant with respect to `' if and only if and . The set of finite non-redundant subsets of (with respect to `') is denoted by . The reduction function mapping a finite set into its non-redundant counterpart is defined, for each , by

The restriction to the finite subsets reflects the fact that here disjunctions are implemented by explicit collections of elements of the base-level abstract domain. As a consequence of this restriction, for any such that , is the (finite) set of the maximal elements of .

The finite powerset domain over a domain is the set of all finite reduced sets of and denoted by . The domain includes an approximation ordering `' defined so that if and only if

Therefore the top element is and the bottom element is the emptyset.

## Operations on the Powerset Construction

In this section we briefly describe the generic operations on Powerset Domains that are provided by the library for any given base-level domain .

Meet and Upper Bound

Given the sets and , the meet and upper bound operators provided by the library returns the set and reduced set union respectively.

Adding a Disjunct

Given the powerset element and the base-level element , the add_disjunct operator provided by the library returns the powerset element .

Collapsing a Powerset Element

If the given powerset element is not empty, then the collapse operator returns the singleton powerset consisting of an upper-bound of all the disjuncts.

## The Polyhedra Powerset Domain

The Polyhedra powerset domain provided by the PPL is the finite powerset domain (defined in Section The Powerset Construction) over the domain of NNC polyhedra .

In addition to the operations described for the generic powerset domain in Section Operations on the Powerset Construction, we provide some operations that are specific to this instantiation. Of these, most correspond to the application of the equivalent operation on each of the NNC polyhedron that are in the given set. Here we just describe those operations that are particular to the polyhedra powerset domain.

Geometric Comparisons

Given the sets , then we say that geometrically_covers if every point (in some element) in a polyhedron in is also a point in a polyhedron in . If geometrically_covers and geometrically_covers , then we say that they are geometrically_equal.

Pairwise Merge

Given the powerset , then the pairwise_merge operator takes pairs of distinct elements in whose poly-hull is the same as their set-theoretical union and replaces them by their union. This replacement is done recursively so that, for each pair of distinct polyhedra in the result set, we have .

Extrapolation Operators

The library implements a generalization of the extrapolation operator for powerset domains proposed in [BGP99]. The operator `BGP99_extrapolation_assign` is made parametric by allowing for the specification of a base-level extrapolation operator different from the H79 widening (e.g., the BHRZ03 widening can be used). Note that, in the general case, this operator cannot guarantee the convergence of the iteration sequence in a finite number of steps (for a counter-example, see [BHZ04]).

Certificate-Based Widenings

The PPL library provides support for the specification of proper widening operators on the powerset domain of convex polyhedra. In particular, this version of the library implements an instance of the certificate-based widening framework proposed in [BHZ03b].

A finite convergence certificate for an extrapolation operator is a formal way of ensuring that such an operator is indeed a widening on the considered domain. Given a widening operator on the base-level domain, together with the corresponding convergence certificate, the BHZ03 framework shows how it is possible to lift this widening so as to work on the finite powerset domain, while still ensuring convergence in a finite number of iterations.

Being highly parametric, the BHZ03 widening framework can be instantiated in many ways. The current implementation provides the templatic operator `BHZ03_widening_assign<Certificate, Widening>` which only exploits a fraction of this generality, by allowing the user to specify the base-level widening function and the corresponding certificate. The widening strategy is fixed and uses two extrapolation heuristics: first, the least upper bound is tried; second, the BGP99 extrapolation operator is tried, possibly applying pairwise merging. If both heuristics fail to converge according to the convergence certificate, then an attempt is made to apply the base-level widening to the poly-hulls of the two arguments, possibly improving the result obtained by means of the poly-difference operator. For more details and a justification of the overall approach, see [BHZ03b] and [BHZ04].

The library provides two convergence certificates: while BHRZ03_Certificate is compatible with both the BHRZ03 and the H79 widenings, H79_Certificate is only compatible with the latter. Note that using different certificates will change the results obtained, even when using the same base-level widening operator. It is also worth stressing that it is up to the user to see that the widening operator is actually compatible with a given convergence certificate. If such a requirement is not met, then an extrapolation operator will be obtained.

## Using the Library

A Note on the Implementation of the Operators

When adopting the double description method for the representation of convex polyhedra, the implementation of most of the operators may require an explicit conversion from one of the two representations into the other one, leading to algorithms having a worst-case exponential complexity. However, thanks to the adoption of lazy and incremental computation techniques, the library turns out to be rather efficient in many practical cases.

In earlier versions of the library, a number of operators were introduced in two flavors: a lazy version and an eager version, the latter having the operator name ending with `_and_minimize`. In principle, only the lazy versions should be used. The eager versions were added to help a knowledgeble user obtain better performance in particular cases. Basically, by invoking the eager version of an operator, the user is trading laziness to better exploit the incrementality of the inner library computations. Starting from version 0.5, the lazy and incremental computation techniques have been refined to achieve a better integration: as a consequence, the lazy versions of the operators are now almost always more efficient than the eager versions.

One of the cases when an eager computation still makes sense is when the well-known fail-first principle comes into play. For instance, if you have to compute the intersection of several polyhedra and you strongly suspect that the result will become empty after a few of these intersections, then you may obtain a better performance by calling the eager version of the intersection operator, since the minimization process also enforces an emptyness check. Note anyway that the same effect can be obtained by interleaving the calls of the lazy operator with explicit emptyness checks.

On Object-Orientation and Polymorphism: A Disclaimer

The PPL library is mainly a collection of so-called ``concrete data types'': while providing the user with a clean and friendly interface, these types are not meant to --- i.e., they should not --- be used polymorphically (since, e.g., most of the destructors are not declared `virtual`). In practice, this restriction means that the library types should not be used as public base classes to be derived from. A user willing to extend the library types, adding new functionalities, often can do so by using containment instead of inheritance; even when there is the need to override a `protected` method, non-public inheritance should suffice.

On Const-Correctness: A Warning about the Use of References and Iterators

Most operators of the library depend on one or more parameters that are declared ``const'', meaning that they will not be changed by the application of the considered operator. Due to the adoption of lazy computation techniques, in many cases such a const-correctness guarantee only holds at the semantic level, whereas it does not necessarily hold at the implementation level. For a typical example, consider the extraction from a polyhedron of its constraint system representation. While this operation is not going to change the polyhedron, it might actually invoke the internal conversion algorithm and modify the generators representation of the polyhedron object, e.g., by reordering the generators and removing those that are detected as redundant. Thus, any previously computed reference to the generators of the polyhedron (be it a direct reference object or an indirect one, such as an iterator) will no longer be valid. For this reason, code fragments such as the following should be avoided, as they may result in undefined behavior:

    // Find a reference to the first point of the non-empty polyhedron `ph'.
    const GenSys& gs = ph.generators();
    GenSys::const_iterator i = gs.begin();
    for (GenSys::const_iterator gs_end = gs.end(); i != gs_end; ++i)
      if (i->is_point())
        break;
    const Generator& p = *i;
    // Get the constraints of `ph'.
    const ConSys& cs = ph.constraints();
    // Both the const iterator `i' and the reference `p'
    // are no longer valid at this point.
    cout << p.divisor() << endl;  // Undefinded behavior!
    ++i;                          // Undefinded behavior!

As a rule of thumb, if a polyhedron plays any role in a computation (even as a const parameter), then any previously computed reference to parts of the polyhedron may have been invalidated. Note that, in the example above, the computation of the constraint system could have been placed after the uses of the iterator `i` and the reference `p`. Anyway, if really needed, it is always possible to take a copy of, instead of a reference to, the parts of interest of the polyhedron; in the case above, one may have taken a copy of the generator system by replacing the second line of code with the following:

    GenSys gs = ph.generators();

The same observations, modulo syntactic sugar, apply to the operators defined in the C interface of the library.

## Bibliography

[Bag98]
  R. Bagnara. A hierarchy of constraint systems for data-flow analysis of constraint logic-based languages. Science of Computer Programming, 30(1-2):119-155, 1998.

[BGP99]
  T. Bultan, R. Gerber, and W. Pugh. Model-checking concurrent systems with unbounded integer variables: Symbolic representations, approximations, and experimental results. ACM Transactions on Programming Languages and Systems, 21(4):747-789, 1999.

[BHRZ03a]
  R. Bagnara, P. M. Hill, E. Ricci, and E. Zaffanella. Precise widening operators for convex polyhedra. In R. Cousot, editor, Static Analysis: Proceedings of the 10th International Symposium, volume 2694 of Lecture Notes in Computer Science, pages 337-354, San Diego, California, USA, 2003. Springer-Verlag, Berlin.

[BHRZ03b]
  R. Bagnara, P. M. Hill, E. Ricci, and E. Zaffanella. Precise widening operators for convex polyhedra. Quaderno 312, Dipartimento di Matematica, Università di Parma, Italy, 2003. Available at http://www.cs.unipr.it/Publications/.

[BHZ02a]
  R. Bagnara, P. M. Hill, and E. Zaffanella. A new encoding and implementation of not necessarily closed convex polyhedra. Quaderno 305, Dipartimento di Matematica, Università di Parma, Italy, 2002. Available at http://www.cs.unipr.it/Publications/.

[BHZ02b]
  R. Bagnara, P. M. Hill, and E. Zaffanella. A new encoding of not necessarily closed convex polyhedra. In M. Carro, C. Vacheret, and K.-K. Lau, editors, Proceedings of the 1st CoLogNet Workshop on Component-based Software Development and Implementation Technology for Computational Logic Systems, pages 147-153, Madrid, Spain, 2002. Published as TR Number CLIP4/02.0, Universidad Politécnica de Madrid, Facultad de Informática.

[BHZ03a]
  R. Bagnara, P. M. Hill, and E. Zaffanella. A new encoding and implementation of not necessarily closed convex polyhedra. In M. Leuschel, S. Gruner, and S. Lo Presti, editors, Proceedings of the 3rd Workshop on Automated Verification of Critical Systems, pages 161-176, Southampton, UK, 2003. Published as TR Number DSSE-TR-2003-2, University of Southampton.

[BHZ03b]
  R. Bagnara, P. M. Hill, and E. Zaffanella. Widening operators for powerset domains. In B. Steffen and G. Levi, editors, Proceedings of the Fifth International Conference on Verification, Model Checking and Abstract Interpretation (VMCAI 2004), volume 2937 of Lecture Notes in Computer Science, pages 135-148, Venice, Italy, 2003. Springer-Verlag, Berlin.

[BHZ04]
  R. Bagnara, P. M. Hill, and E. Zaffanella. Widening operators for powerset domains. Quaderno 349, Dipartimento di Matematica, Università di Parma, Italy, 2004. Available at http://www.cs.unipr.it/Publications/.

[BJT99]
  F. Besson, T. P. Jensen, and J.-P. Talpin. Polyhedral analysis for synchronous languages. In A. Cortesi and G. Filé, editors, Static Analysis: Proceedings of the 6th International Symposium, volume 1694 of Lecture Notes in Computer Science, pages 51-68, Venice, Italy, 1999. Springer-Verlag, Berlin.

[BRZH02a]
  R. Bagnara, E. Ricci, E. Zaffanella, and P. M. Hill. Possibly not closed convex polyhedra and the Parma Polyhedra Library. In M. V. Hermenegildo and G. Puebla, editors, Static Analysis: Proceedings of the 9th International Symposium, volume 2477 of Lecture Notes in Computer Science, pages 213-229, Madrid, Spain, 2002. Springer-Verlag, Berlin.

[BRZH02b]
  R. Bagnara, E. Ricci, E. Zaffanella, and P. M. Hill. Possibly not closed convex polyhedra and the Parma Polyhedra Library. Quaderno 286, Dipartimento di Matematica, Università di Parma, Italy, 2002. See also [BRZH02c]. Available at http://www.cs.unipr.it/Publications/.

[BRZH02c]
  R. Bagnara, E. Ricci, E. Zaffanella, and P. M. Hill. Errata for technical report ``Quaderno 286''. Available at http://www.cs.unipr.it/Publications/, 2002. See [BRZH02b].

[CC92]
  P. Cousot and R. Cousot. Comparing the Galois connection and widening/narrowing approaches to abstract interpretation. In M. Bruynooghe and M. Wirsing, editors, Proceedings of the 4th International Symposium on Programming Language Implementation and Logic Programming, volume 631 of Lecture Notes in Computer Science, pages 269-295, Leuven, Belgium, 1992. Springer-Verlag, Berlin.

[CH78]
  P. Cousot and N. Halbwachs. Automatic discovery of linear restraints among variables of a program. In Conference Record of the Fifth Annual ACM Symposium on Principles of Programming Languages, pages 84-96, Tucson, Arizona, 1978. ACM Press.

[Che64]
  N. V. Chernikova. Algorithm for finding a general formula for the non-negative solutions of system of linear equations. U.S.S.R. Computational Mathematics and Mathematical Physics, 4(4):151-158, 1964.

[Che65]
  N. V. Chernikova. Algorithm for finding a general formula for the non-negative solutions of system of linear inequalities. U.S.S.R. Computational Mathematics and Mathematical Physics, 5(2):228-233, 1965.

[Che68]
  N. V. Chernikova. Algorithm for discovering the set of all solutions of a linear programming problem. U.S.S.R. Computational Mathematics and Mathematical Physics, 8(6):282-293, 1968.

[Dan63]
  G. B. Dantzig. Linear Programming and Extensions. Princeton University Press, Princeton, NJ, 1963.

[FP96]
  K. Fukuda and A. Prodon. Double description method revisited. In M. Deza, R. Euler, and Y. Manoussakis, editors, Combinatorics and Computer Science, 8th Franco-Japanese and 4th Franco-Chinese Conference, Brest, France, July 3-5, 1995, Selected Papers, volume 1120 of Lecture Notes in Computer Science, pages 91-111. Springer-Verlag, Berlin, 1996.

[Fuk98]
  K. Fukuda. Polyhedral computation FAQ. Swiss Federal Institute of Technology, Lausanne and Zurich, Switzerland, available at http://www.ifor.math.ethz.ch/~fukuda/fukuda.html, 1998.

[GDD+04]
  D. Gopan, F. DiMaio, N. Dor, T. Reps, and M. Sagiv. Numeric domains with summarized dimensions. In K. Jensen and A. Podelski, editors, Tools and Algorithms for the Construction and Analysis of Systems, 10th International Conference, TACAS 2004, volume 2988 of Lecture Notes in Computer Science, pages 512-529. Springer-Verlag, Berlin, 2004.

[GJ00]
  E. Gawrilow and M. Joswig. `polymake`: a framework for analyzing convex polytopes. In G. Kalai and G. M. Ziegler, editors, Polytopes - Combinatorics and Computation, pages 43-74. Birkhäuser, 2000.

[GJ01]
  E. Gawrilow and M. Joswig. `polymake`: an approach to modular software design in computational geometry. In Proceedings of the 17th Annual Symposium on Computational Geometry, pages 222-231, Medford, MA, USA, 2001. ACM.

[Hal79]
  N. Halbwachs. Détermination Automatique de Relations Linéaires Vérifiées par les Variables d'un Programme. Thèse de 3ème cycle d'informatique, Université scientifique et médicale de Grenoble, Grenoble, France, March 1979.

[Hal93]
  N. Halbwachs. Delay analysis in synchronous programs. In C. Courcoubetis, editor, Computer Aided Verification: Proceedings of the 5th International Conference, volume 697 of Lecture Notes in Computer Science, pages 333-346, Elounda, Greece, 1993. Springer-Verlag, Berlin.

[HH95]
  T. A. Henzinger and P.-H. Ho. A note on abstract interpretation strategies for hybrid automata. In P. J. Antsaklis, W. Kohn, A. Nerode, and S. Sastry, editors, Hybrid Systems II, volume 999 of Lecture Notes in Computer Science, pages 252-264. Springer-Verlag, Berlin, 1995.

[HKP95]
  N. Halbwachs, A. Kerbrat, and Y.-E. Proy. POLyhedra INtegrated Environment. Verimag, France, version 1.0 of POLINE edition, September 1995. Documentation taken from source code.

[HLW94]
  V. Van Dongen H. Le Verge and D. K. Wilde. Loop nest synthesis using the polyhedral library. Publication interne 830, IRISA, Campus de Beaulieu, Rennes, France, 1994.

[HPR94]
  N. Halbwachs, Y.-E. Proy, and P. Raymond. Verification of linear hybrid systems by means of convex approximations. In B. Le Charlier, editor, Static Analysis: Proceedings of the 1st International Symposium, volume 864 of Lecture Notes in Computer Science, pages 223-237, Namur, Belgium, 1994. Springer-Verlag, Berlin.

[HPR97]
  N. Halbwachs, Y.-E. Proy, and P. Roumanoff. Verification of real-time systems using linear relation analysis. Formal Methods in System Design, 11(2):157-185, 1997.

[HPWT01]
  T. A. Henzinger, J. Preussig, and H. Wong-Toi. Some lessons from the hytech experience. In Proceedings of the 40th Annual Conference on Decision and Control, pages 2887-2892. IEEE Computer Society Press, 2001.

[Jea02]
  B. Jeannet. Convex Polyhedra Library, release 1.1.3c edition, March 2002. Documentation of the ``New Polka'' library available at http://www.irisa.fr/prive/Bertrand.Jeannet/newpolka.html.

[Kuh56]
  H. W. Kuhn. Solvability and consistency for linear equations and inequalities. American Mathematical Monthly, 63:217-232, 1956.

[Le 92]
  92 H. Le Verge. A note on Chernikova's algorithm. Publication interne 635, IRISA, Campus de Beaulieu, Rennes, France, 1992.

[Loe99]
  V. Loechner. PolyLib: A library for manipulating parameterized polyhedra. Available at http://icps.u-strasbg.fr/~loechner/polylib/, March 1999. Declares itself to be a continuation of [Wil93].

[LW97]
  V. Loechner and D. K. Wilde. Parameterized polyhedra and their vertices. International Journal of Parallel Programming, 25(6):525-549, 1997.

[Mas92]
  F. Masdupuy. Array operations abstraction using semantic analysis of trapezoid congruences. In Proceedings of the 6th ACM International Conference on Supercomputing, pages 226-235, Washington, DC, USA, 1992. ACM Press.

[Mas93]
  F. Masdupuy. Array Indices Relational Semantic Analysis Using Rational Cosets and Trapezoids. Thèse d'informatique, École Polytechnique, Palaiseau, France, December 1993.

[MRTT53]
  T. S. Motzkin, H. Raiffa, G. L. Thompson, and R. M. Thrall. The double description method. In H. W. Kuhn and A. W. Tucker, editors, Contributions to the Theory of Games - Volume II, number 28 in Annals of Mathematics Studies, pages 51-73. Princeton University Press, Princeton, New Jersey, 1953.

[NR00]
  S. P. K. Nookala and T. Risset. A library for Z-polyhedral operations. Publication interne 1330, IRISA, Campus de Beaulieu, Rennes, France, 2000.

[NW88]
  G. L. Nemhauser and L. A. Wolsey. Integer and Combinatorial Optimization. Wiley Interscience Series in Discrete Mathematics and Optimization. John Wiley & Sons, 1988.

[Sch99]
  A. Schrijver. Theory of Linear and Integer Programming. Wiley Interscience Series in Discrete Mathematics and Optimization. John Wiley & Sons, 1999.

[Sri93]
  D. Srivastava. Subsumption and indexing in constraint query languages with linear arithmetic constraints. Annals of Mathematics and Artificial Intelligence, 8(3-4):315-343, 1993.

[SW70]
  J. Stoer and C. Witzgall. Convexity and Optimization in Finite Dimensions I. Springer-Verlag, Berlin, 1970.

[Wey35]
  H. Weyl. Elementare theorie der konvexen polyeder. Commentarii Mathematici Helvetici, 7:290-306, 1935. English translation in [Wey50].

[Wey50]
  H. Weyl. The elementary theory of convex polyhedra. In H. W. Kuhn, editor, Contributions to the Theory of Games - Volume I, number 24 in Annals of Mathematics Studies, pages 3-18. Princeton University Press, Princeton, New Jersey, 1950. Translated from [Wey35] by H. W. Kuhn.

[Wil93]
  D. K. Wilde. A library for doing polyhedral operations. Master's thesis, Oregon State University, Corvallis, Oregon, December 1993. Also published as IRISA Publication interne 785, Rennes, France, 1993.