| ((btree(rp1, r1, adr, height1, false, ri1, iast, as1, alladrs1, nstat) * P1))(zh1), ((btree(rp0, r0, adr, height +1, false, ri0, iast, as0, alladrs0, nstat) * P0))(zh0), ∀ rp0, r0, adr, ri0, iast, as0, alladrs0, nstat, P0, zh0, rp1, r1, height1, ri1, as1, alladrs1, P1, zh1. ((btree(rp0, r0, adr, height, false, ri0, iast, as0, alladrs0, nstat) * P0))(zh0) ∧ ((btree(rp1, r1, adr, height1, false, ri1, iast, as1, alladrs1, nstat) * P1))(zh1) → height = height1 ∧ as0 = as1 ∧ ri0 = ri1 ∧ alladrs0 = alladrs1 ⊦ height +1 = height1 ∧ as0 = as1 ∧ ri0 = ri1 ∧ alladrs0 = alladrs1 |
((btree(rp1, r1, adr, height1, false, ri1, iast, alladrs1, alladrs1, nstat) * P1))(zh1), ((btree(rp0, r0, adr, height + 1, false, ri0, iast, alladrs0, alladrs0, nstat) * P0))(zh0), alladrs1 ⊆ dom iast, alladrs0 ⊆ dom iast, ∀ rp0, r0, adr, ri0, iast, as0, alladrs0, nstat, P0, zh0, rp1, r1, height1, ri1, as1, alladrs1, P1, zh1. ((btree(rp0, r0, adr, height, false, ri0, iast, as0, alladrs0, nstat) * P0))(zh0) ∧ ((btree(rp1, r1, adr, height1, false, ri1, iast, as1, alladrs1, nstat) * P1))(zh1) → height = height1 ∧ as0 = as1 ∧ ri0 = ri1 ∧ alladrs0 = alladrs1 ⊦ height + 1 = height1 ∧ ri0 = ri1 ∧ alladrs0 = alladrs1
Used simplifier rules: btree-clean-alladrs: ⊦ (( btree(rp, r, adr, height, false, ri, iast, as, alladrs, nstat) * P) )(zh) → as = alladrs;%btree-refed-subseteq-alladrs: ⊦ (( btree(rp, r, adr, height, dirty, fi, iast, as, alladrs, nstat) * P) )(zh) → as ⊆ alladrs;%btree-adrs: ⊦ (( btree (rp, rp0, adr0, height, dirty, fi, iast, as, alladrs, nstat) * P) )(zh) → as ⊆ dom iast;% ⊦ as ⊆ as; (s)%sep-com: ⊦ P * P2 = P2 * P; from specification heap-sep[zheap]%sep-ass: ⊦ (P * P3) * P4 = P * P3 * P4; from specification heap-sep[zheap]% ⊦ m +1 = m + 1; (s)