| ¬ r0 ∈ r ' + x1 + H[r0].nxt ', ce.nxt = H[H[r0].nxt].nxt, path(r ' + x1 + H[r0].nxt ', H), reachable(r, r0, H), H[r0].nxt ∈ H, H[r0].nxt ∈ H[r0, ce], r0 ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ r0 ∈ x1, H[r0].nxt = null, r = H[r0].nxt, r ∈ x1, H[r0].nxt ∈ x1, dups(x1) |
ce.nxt = H[H[r0].nxt].nxt, r0 ∈ H, path(r ' + x1 + H[r0].nxt ', H), reachable(r, r0, H), H[r0].nxt ∈ H, ∀ r1. ¬ reachable(H[r1].nxt, r1, H) ⊦ H[r0].nxt = null, r = H[r0].nxt, r0 = r, r0 = H[r0].nxt, r0 ∈ x1, r ∈ x1, H[r0].nxt ∈ x1, dups(x1)
Used simplifier rules: in-neq: ⊦ r ≠ r0 → (r ∈ H[r0, ce] ↔ r ∈ H); from specification store[linheap]%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]%in-17: ⊦ r ∈ r0 ' ↔ r = r0; from specification list[reflist]%in-append: ⊦ r ∈ x0 + x1 ↔ ¬ ¬(r ∈ x0 ∨ r ∈ x1); from specification list[reflist]%in-06: ⊦ ¬ r ∈ r0 ' + x0 ↔ r ≠ r0 ∧ ¬ r ∈ x0; from specification list[reflist]