| r1 ' + x = x0 + r0 ', ce.nxt = H[H[r0].nxt].nxt, x0 = [], path(r ' + x1 + H[r0].nxt ', H), path(r ' + (x1 + H[r0].nxt ' + x0) + r0 ', H), H[r0].nxt ∈ H, r0 ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H), r0 = r1 ∨ r0 ∈ x, r1 ∈ x0 ∨ r1 = r0 ⊦ H[r0].nxt = null, r = H[r0].nxt, r0 = H[r0].nxt, r0 = r, dups(x0), dups(x1), dups(x1 + x0), H[r0].nxt ∈ x0, r0 ∈ x0, r ∈ x0, r0 ∈ x1, r ∈ x1, H[r0].nxt ∈ x1 |
ce.nxt = H[H[r0].nxt].nxt, path(r ' + x1 + H[r0].nxt ' + r0 ', H), path(r ' + x1 + H[r0].nxt ', H), H[r0].nxt ∈ H, r0 ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ H[r0].nxt = null, r = H[r0].nxt, r0 = H[r0].nxt, r0 = r, dups(x1), r0 ∈ x1, r ∈ x1, H[r0].nxt ∈ x1
Used simplifier rules: ⊦ ¬ dups([]); (s)% ⊦ x0 + [] = x0; (s)% ⊦ ¬ r ∈ []; (s)% ⊦ r ' = r0 ' + x0 ↔ r = r0 ∧ x0 = []; (ws)%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]% ⊦ [] + x0 = x0; (s)