| ce.nxt = H[H[r0].nxt].nxt, x = [], path(r0 ' + x + H[r0].nxt ', H[r0, ce]), path(r ' + (x0 + r0 ' + x) + H[r0].nxt ', H[r0, ce]), reachable(r, r0, H), r0 ∈ H, H[r0].nxt ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ H[r0].nxt = null, H[r0].nxt = r0, r = H[r0].nxt, r = r0, dups(x0 + x), dups(x0), dups(x), r0 ∈ x, H[r0].nxt ∈ x0, H[r0].nxt ∈ x, r ∈ x0, r ∈ x, r0 ∈ x0 |
ce.nxt = H[ce.nxt].nxt, ce.nxt = H[r0].nxt, path(r ' + x0 + r0 ' + ce.nxt ', H[r0, ce]), reachable(r, r0, H), ce.nxt ∈ H, r0 ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ ce.nxt = r0, ce.nxt = null, r = r0, r = ce.nxt, r0 = null, dups(x0), r0 ∈ x0, r ∈ x0, ce.nxt ∈ x0
Used simplifier rules: path-two: ⊦ path(r ' + r0 ', H) ↔ r ∈ H ∧ r0 ∈ H ∧ r ≠ null ∧ r0 ≠ null ∧ H[r].nxt = r0;% ⊦ x0 + [] = x0; (s)% ⊦ ¬ dups([]); (s)% ⊦ ¬ r ∈ []; (s)% ⊦ H[r, ce][r] = ce; (s)% ⊦ r ≠ r0 → (r ∈ H[r0, ce] ↔ r ∈ H); (s)% ⊦ r ∈ H[r, ce]; (s)%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]% ⊦ [] + x0 = x0; (s)