| r ∈ H, ∀ r, H, r2, ce. r ∈ H → (path(r ' + x0, H[r2, ce]) ↔ path(r ' + x0, H)) ∨ r2 ∈ x0 ∨ r2 ∈ H, H[r].nxt ∈ H → (path(H[r].nxt ' + x0, H[r2, ce]) ↔ path(H[r].nxt ' + x0, H)) ⊦ r2 = H[r].nxt, r = null, r ∈ H[r2, ce] ∧ path(H[r].nxt ' + x0, H[r2, ce]) ↔ path(H[r].nxt ' + x0, H), r2 ∈ x0, r2 ∈ H |
r ∈ H[r2, ce] ∧ path(H[r].nxt ' + x0, H[r2, ce]), r ∈ H, ∀ r, H, r2, ce. r ∈ H → (path(r ' + x0, H[r2, ce]) ↔ path(r ' + x0, H)) ∨ r2 ∈ x0 ∨ r2 ∈ H, H[r].nxt ∈ H → (path(H[r].nxt ' + x0, H[r2, ce]) ↔ path(H[r].nxt ' + x0, H)) ⊦ path(H[r].nxt ' + x0, H), r2 = H[r].nxt, r = null, r2 ∈ x0, r2 ∈ H
Used simplifier rules: path-first-in-H: ⊦ path(r ' + x, H) → (¬ r ∈ H ↔ false);%a: ⊦ (x0 + x1) + x2 = x0 + x1 + x2; from specification list[reflist]%In-insert: ⊦ r ∈ H[r0, ce] ↔ r = r0 ∨ r ∈ H; from specification store[linheap]