| is_obj(str, r, st) ∧ st[r -- _type] .type ≤ ty, is_obj(str, r, st), acc + jvmref ' + refs0 = [] ∨ (∃ fs. fs ' ∈ instfields(st[r -- _type] .type .class) ∧ is_referencevalue(st[r -- fs ']) ∧ (acc + jvmref ' + refs0) .first = st[r -- fs '] .refval ∧ validrefs(str, acc + jvmref ' + refs0, fs .type, st)), st[r -- _type] .type ≤ ty, ∀ str, refs0, ty, st. validrefs(str, acc + jvmref ' + refs0, ty, st) → validrefs(str, acc + jvmref ', ty, st) ∧ refs0 = [] ⊦ r = jvmref, validrefs(str, (r ' + acc) + jvmref ', ty, st) ∧ refs0 = [] |
(acc + jvmref ') .first = st[r -- fs '] .refval, is_obj(str, r, st), st[r -- _type] .type ≤ ty, fs ' ∈ instfields(st[r -- _type] .type .class), is_referencevalue(st[r -- fs ']), validrefs(str, acc + jvmref ' + refs0, fs .type, st), ∀ str, refs0, ty, st. validrefs(str, acc + jvmref ' + refs0, ty, st) → validrefs(str, acc + jvmref ', ty, st) ∧ refs0 = [] ⊦ r = jvmref, validrefs(str, (r ' + acc) + jvmref ', ty, st) ∧ refs0 = []
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (refs + r ' + refs0) .first = (refs + r ') .first], [CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ r ' ≠ []], [CSIMPSEQ : ⊦ ¬ refs + refs0 ≠ [] ↔ refs = [] ∧ refs0 = []])]]