[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem in-crash-at-gstore
⊦ @(m0, m1, m2) ∈ crash(gstore, gstore0, ginval, nx) ∧ ¬ m0 ∈ ginval → crash(gstore, gstore0, ginval, nx)[@(m0, m1, m2)] = gstore[@(m0, m1, m2)]
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 3
Proof steps: 9
Used lemmas:
crash-group-in
,
crash-group-at
,
in-crash-in-gstore
,
Used spec theorems:
ablock-store-inv
/group-store/
at
Used simplifier rules:
address-data
/
sel-05
address-data
/
sel-04
address-data
/
sel-03
ablock
/group-store/
elim
ablock
/group-store/
inj
ablock
/group-store/
sel-01
ablock
/group-store/
sel-02
store
/group-store-ablock-store-nat-store/
notmemlookup
ablock-store-inv
/group-store/
notin-notin