| is_obj(str, r0, st) ∧ st[r0 -- _type] .type ≤ ty, is_obj(str, r0, st), validrefs(str, r ' + refs0, ty0, st), acc + r ' = [] ∨ (∃ fs. fs ' ∈ instfields(st[r0 -- _type] .type .class) ∧ is_referencevalue(st[r0 -- fs ']) ∧ (acc + r ') .first = st[r0 -- fs '] .refval ∧ validrefs(str, acc + r ', fs .type, st)), st[r0 -- _type] .type ≤ ty, ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ r0 = jvmref, validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st) |
(acc + r ') .first = st[r0 -- fs '] .refval, is_obj(str, r0, st), validrefs(str, r ' + refs0, ty0, st), st[r0 -- _type] .type ≤ ty, fs ' ∈ instfields(st[r0 -- _type] .type .class), is_referencevalue(st[r0 -- fs ']), validrefs(str, acc + r ', fs .type, st), ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ r0 = jvmref, validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ r ' ≠ []], [CSIMPSEQ : ⊦ ¬ refs + refs0 ≠ [] ↔ refs = [] ∧ refs0 = []])]]