| is_obj(str, r, st[r0 -- sk, val]) ∧ (st[r0 -- sk, val][r -- _type]) .type ≤ st[r -- _type] .type, is_obj(str, r, st[r0 -- sk, val]), refs0 = [] ∨ (∃ fs. fs ' ∈ instfields((st[r0 -- sk, val][r -- _type]) .type .class) ∧ is_referencevalue(st[r0 -- sk, val][r -- fs ']) ∧ refs0 .first = (st[r0 -- sk, val][r -- fs ']) .refval ∧ validrefs(str, refs0, fs .type, st[r0 -- sk, val])), ∀ val, sk, r0, st, r, str, refs. # refs < # refs0 → ( validrefs(str, r ' + refs, st[r -- _type] .type, st[r0 -- sk, val]) → sk = _type ∨ path∃(str, r, r0, st) ∨ junkref(str, r, st) ∨ path∃(str, r, (r ' + refs) .last, st)) ⊦ sk = _type, r = jvmref, path∃(str, r, (r ' + refs0) .last, st), junkref(str, r, st), path∃(str, r, r0, st) |
⊦ path∃(str, r, r, st) ↔ r = jvmref ∨ r ≠ jvmref ∧ is_valid_ref(str, r, st)
refs0 .first = (st[r0 -- sk, val][r -- fs ']) .refval, is_obj(str, r, st[r0 -- sk, val]), fs ' ∈ instfields(st[r -- _type] .type .class), is_referencevalue(st[r0 -- sk, val][r -- fs ']), validrefs(str, refs0, fs .type, st[r0 -- sk, val]), ∀ val, sk, r0, st, r, str, refs. # refs < # refs0 → ( validrefs(str, r ' + refs, st[r -- _type] .type, st[r0 -- sk, val]) → sk = _type ∨ path∃(str, r, r0, st) ∨ junkref(str, r, st) ∨ path∃(str, r, (r ' + refs) .last, st)) ⊦ sk = _type, r = jvmref, refs0 = [], junkref(str, r, st), path∃(str, r, r0, st), path∃(str, r, refs0 .last, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ refs ≠ [] → (r ' + refs) .last = refs .last], [CSIMPSEQ : ⊦ ¬ is_valid_ref(str, r, st) ∧ r ≠ jvmref → junkref(str, r, st)], [CSIMPSEQ : ⊦ r ' .last = r], [CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ refs + [] = refs], [CSIMPSEQ : ⊦ ty ≤ ty], [CSIMPSEQ : ⊦ sk ≠ sk0 → (st[r -- sk, val][r0 -- sk0]) = st[r0 -- sk0]])]]