| r1 = r2, reachable(r, r1, H[r2, ce]), r ∈ H, r1 = r2 ∨ r1 ∈ H ⊦ reachable(r, r1, H), r2 ∈ H, ∃ r0. reachable(r, r0, H) ∧ H[r0].nxt = r2 ∧ H[r0].nxt ≠ null ∧ (r1 = H[r0].nxt ∨ reachable(ce.nxt, r1, H)) |
r ∈ H, reachable(r, r2, H[r2, ce]) ⊦ r2 ∈ H, ∃ r0. reachable(r, r0, H) ∧ H[r0].nxt = r2 ∧ H[r0].nxt ≠ null
Used simplifier rules: endnotinH-notreachable: ⊦ ¬ r0 ∈ H → (reachable(r, r0, H) ↔ false);%reach-alloc: ⊦ reachable(r, r1, H) → r1 ∈ H;%In-insert: ⊦ r ∈ H[r0, ce] ↔ r = r0 ∨ r ∈ H; from specification store[linheap]