[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem add-preserves-reachable
⊦ h[r1].nxt = h[r2].nxt ∧ ce.nxt = r2 ∧ reachable(r, r0, h) ∧ ¬ reachable(r, r2, h) ∧ r2 ≠ null ∧ r2 ∈ h ∧ reachable(r, r1, h) → reachable(r, r0, h[r1, ce])
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 26
Proof steps: 50
Used lemmas:
fromnext-reachable
,
fromnext-reachable-rev
,
reachable-notnullinH
,
reach-alloc
,
modnotreachable-reachable-weak
,
path-cons
,
self-reachable
,
path-one
,
reachable-def
,
Used spec theorems:
store
/linheap/
At-other
Used simplifier rules:
list
/reflist/
app
list
/reflist/
a
list-last
/reflist/
last-one
store
/linheap/
In-insert
list-last
/reflist/
last-rec
list
/reflist/
c
list-last
/reflist/
lapp-03
store
/linheap/
At-same
store
/linheap/
insin
store
/linheap/
in-neq
store
/linheap/
At-other