[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem deallocate-gnd
index_deallocate_gnd#(N, PRI, PFI, PSTORE0, PNL, PMAXINO, P_OS, ISYNCED; PINVAL, PSTORE; ERR) {if ISYNCED ∧ N ∈ PSTORE ∧ ¬ N ∈ PNL then {fail_or_success#(; ; ERR); if ERR = ESUCCESS then PSTORE := PSTORE -- N, PINVAL := PINVAL ++ N} else abort }
Type: An axiom
Validity: The proof is valid.
Features:
Comment:
Used by:
crash-neutral-deallocate-gnd
,
inv-deallocate-gnd
,
Used by units in proved state:
gjournal-refine
,
gjournal-asm
,
Proof exists?: No