| ¬ r ≠ r1, ce.nxt = H[r1].nxt, (H[r].nxt ' + x0).last ∈ H, path(H[r].nxt ' + x0, H), r ∈ H, r ∈ H[r1, ce], ∀ ce0, H0, r2, r3. ce0.nxt = H0[r2].nxt ∧ path(r3 ' + x0, H0) → path(r3 ' + x0, H0[r2, ce0]) ⊦ r = null, path(H[r1, ce][r].nxt ' + x0, H[r1, ce]) ∧ H[r1, ce][r].nxt = H[r].nxt |
ce.nxt = H[r1].nxt, (ce.nxt ' + x0).last ∈ H, path(ce.nxt ' + x0, H), r1 ∈ H, ∀ ce0, H0, r2, r3. ce0.nxt = H0[r2].nxt ∧ path(r3 ' + x0, H0) → path(r3 ' + x0, H0[r2, ce0]) ⊦ r1 = null, path(ce.nxt ' + x0, H[r1, ce])
Used simplifier rules: At-same: ⊦ H[r, ce][r] = ce; from specification store[linheap]%insin: ⊦ r ∈ H[r, ce]; from specification store[linheap]