| r0 ≠ r, ce.nxt = H[H[r0].nxt].nxt, path(r ' + x1 + H[r0].nxt ', H[r0, ce]), reachable(r, r0, H), H[r0].nxt ∈ H, H[r0].nxt ∈ H[r0, ce], r0 ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H), r0 = r ∨ r0 = H[r0].nxt ⊦ H[r0].nxt = null, r = H[r0].nxt, r0 ∈ x1, r ∈ x1, H[r0].nxt ∈ x1, dups(x1) |
ce.nxt = H[ce.nxt].nxt, reachable(r, ce.nxt, H), path(r ' + x1 + ce.nxt ', H[ce.nxt, ce]), ce.nxt ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ ce.nxt = r, ce.nxt = null, dups(x1), r ∈ x1, ce.nxt ∈ x1
Used simplifier rules: reach-alloc: ⊦ reachable(r, r1, H) → r1 ∈ H;%insin: ⊦ r ∈ H[r, ce]; from specification store[linheap]