| r ≠ r0, (H[r].nxt ' + x0).last ∈ H[r0, ce], path(H[r].nxt ' + x0, H[r0, ce]), r ∈ H[r0, ce], r0 ∈ H, ∀ r2, H0, r3, ce0. r2 ∈ H0 ∧ path(r3 ' + x0, H0[r2, ce0]) → reachable(r3, (r3 ' + x0).last, H0) ∨ reachable(r3, r2, H0) ⊦ r = null, reachable(r, (H[r].nxt ' + x0).last, H), reachable(r, r0, H) |
r0 ∈ H, (H[r].nxt ' + x0).last ∈ H[r0, ce], path(H[r].nxt ' + x0, H[r0, ce]), r ∈ H, ∀ r2, H0, r3, ce0. r2 ∈ H0 ∧ path(r3 ' + x0, H0[r2, ce0]) → reachable(r3, (r3 ' + x0).last, H0) ∨ reachable(r3, r2, H0) ⊦ r = null, r = r0, reachable(r, (H[r].nxt ' + x0).last, H), reachable(r, r0, H)
Used simplifier rules: in-neq: ⊦ r ≠ r0 → (r ∈ H[r0, ce] ↔ r ∈ H); from specification store[linheap]