[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem validrefs-maxlen
⊦ validrefs(str, refs, ty, st) ∧ refs ≠ [] ∧ ¬ dups(refs) → # refs ≤ # st .refs + 1
Type: A user defined theorem
Validity: The proof is valid.
Features:
Comment: max length: every reference + null could occur.
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 15
Proof steps: 36
Used lemmas:
validrefs-array
,
validrefs-delete-03
,
validrefs-class
,
validrefs-is-junk
,
validrefs-null
,
Used spec theorems:
addfuns
/
is-valid-ref-stronger-def
storefunsx
/
refs-def
Used simplifier rules:
okfuns
/
is_array-notin
int-abs
/
forward-le-01
int-abs
/
forward-le-05
list
/references/
in-01
storefuns
/
del-notin-01
addfuns
/
is_obj-notin
nat
/
ler
nat
/
anti
set-union
/references/
del-in
set-union
/references/
size-del-leq
nat
/
let
storefunsx
/
refs-del
javavalue
/
test-19
javavalue
/
elim-13
fieldspec
/
elim
list
/references/
in-06
nat
/
lels
nat-basic2
/
s
list-data
/references/
elim-list-c
list-data
/references/
l
nat-basic1
/
f
list-dup
/references/
dups-cons
nat-basic2
/
c
nat-basic2
/
a
nat
/
lels-01
nat
/
lep-02
list
/references/
len-02
list
/references/
len
list
/references/
a
list
/references/
e-01
list
/references/
c