| r1 = H[r0].nxt, reachable(ce.nxt, r1, H[H[r0].nxt, ce]), reachable(r, r0, H[H[r0].nxt, ce]), reachable(r, r0, H), r ∈ H, r0 ∈ H, r0 ∈ H[H[r0].nxt, ce], r1 ∈ H[H[r0].nxt, ce] ⊦ H[r0].nxt = null, reachable(r, r1, H[H[r0].nxt, ce]), reachable(r, r1, H), H[r0].nxt ∈ H, reachable(r0, r1, H[H[r0].nxt, ce]) |
r0 ∈ H[H[r0].nxt, ce], r0 ∈ H, r ∈ H, reachable(r, r0, H), reachable(r, r0, H[H[r0].nxt, ce]), reachable(ce.nxt, H[r0].nxt, H[H[r0].nxt, ce]) ⊦ H[r0].nxt = null, reachable(r0, H[r0].nxt, H[H[r0].nxt, ce]), H[r0].nxt ∈ H, reachable(r, H[r0].nxt, H[H[r0].nxt, ce])
Used simplifier rules: reach-reachnext: ⊦ reachable(r, r1, H) → (¬ reachable(r, H[r1].nxt, H) ↔ H[r1].nxt = null ∨ ¬ H[r1].nxt ∈ H);%reach-alloc: ⊦ reachable(r, r1, H) → r1 ∈ H;%In-insert: ⊦ r ∈ H[r0, ce] ↔ r = r0 ∨ r ∈ H; from specification store[linheap]