[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem add-preserves-reachable
⊦ H[r1].nxt = H[r2].nxt ∧ ce.nxt = r2 ∧ reachable(r, r0, H) ∧ ¬ reachable(r, r2, H) ∧ r2 ≠ null ∧ r2 ∈ H ∧ reachable(r, r1, H) → reachable(r, r0, H[r1, ce])
Type: A user defined theorem
Validity: The proof is valid.
Features: simp, localsimp,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 26
Proof steps: 42
Used lemmas:
fromnext-reachable
,
fromnext-reachable-rev
,
modnotreachable-reachable-weak
,
reachable-notnullinH
,
path-last
,
path-cons
,
self-reachable
,
path-one
,
reachable-def
,
reach-alloc
,
Used spec theorems:
store
/linheap/
At-other
Used simplifier rules:
list
/reflist/
app
list-last
/reflist/
l
list
/reflist/
c
store
/linheap/
In-insert
store
/linheap/
At-same
store
/linheap/
insin
store
/linheap/
in-neq
store
/linheap/
At-other
list
/reflist/
a
list-last
/reflist/
l-05