| acc + r ' = r1 + refs ∧ acc + r ' ≠ [], r1 = st[r0 -- mkfs(class, ty1, fieldvar) '] .refval, is_obj(str, r0, st), validrefs(str, r ' + refs0, ty0, st), st[r0 -- _type] .type ≤ ty, mkfs(class, ty1, fieldvar) ' ∈ instfields(st[r0 -- _type] .type .class), is_referencevalue(st[r0 -- mkfs(class, ty1, fieldvar) ']), validrefs(str, acc + r ', ty1, st), ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ r0 = jvmref, validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st) |
acc + r ' = st[r0 -- mkfs(class, ty1, fieldvar) '] .refval ' + refs, validrefs(str, acc + r ', ty1, st), is_referencevalue(st[r0 -- mkfs(class, ty1, fieldvar) ']), mkfs(class, ty1, fieldvar) ' ∈ instfields(st[r0 -- _type] .type .class), st[r0 -- _type] .type ≤ ty, validrefs(str, r ' + refs0, ty0, st), is_obj(str, r0, st), ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ r0 = jvmref, validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st), r ≠ st[r0 -- mkfs(class, ty1, fieldvar) '] .refval ∧ ¬ r ∈ refs, ¬ st[r0 -- mkfs(class, ty1, fieldvar) '] .refval ∈ acc ∧ st[r0 -- mkfs(class, ty1, fieldvar) '] .refval ≠ r
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ r ∈ r0 ' ↔ r = r0], [CSIMPSEQ : ⊦ r ∈ refs + refs0 ↔ ¬ ¬ (r ∈ refs ∨ r ∈ refs0)], [CSIMPFORWARD : ⊦ r ' + refs = refs0 → r ∈ refs0], [CSIMPFORWARD : ⊦ refs + r ' = refs0 → r ∈ refs0], [CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ refs + r ' ≠ []], [CSIMPSEQ : ⊦ r + refs = r ' + refs])]]