[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem ll-trav2-end
r2 ≠ null ⊦ h[r2] = a × null → ( ((ll-trav(r0, r1, r2, x) * hP))(h) ↔ x ≠ [] ∧ (r1 = null ⊃ r0 = r2 ∧ ((lls(r0, null, x) * hP))(h) ;∃ y, b. x = (y + b) + a ∧ ((lls(r0, r1, y) * r1 => b × r2 * r2 => a × null * hP))(h) ))
Type: A user defined theorem
Validity: The proof is valid.
Features: s,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 15
Used lemmas:
lls-one
,
lls-null
,
lls-rec
,
lls-base
,
ll-trav2-null-def
,
ll-trav2-nonnull-def
,
Used spec theorems:
Used simplifier rules:
list
/
Last
list
/
c
list
/
app-02
list
/
e-01
list
/
a
heap-sep
/
prop-shift
heap-sep
/
emp-sep
heap-sep
/
and
heap-sep
/
false-rev
heap-sep
/
falseH
heap-sep
/
and-ass
heap-sep
/
and-com
heap-sep
/
sep-ass
heap-sep
/
sep-com
heap-sep
/
false-and
heap-sep
/
false-sep
list
/
app-03
list
/
app
heap-sep
/
prop
heap-sep
/
true-and
heap-sep
/
true-rev
cell
/
inj-tim
maplet
/cell-heap/
at-eq
maplet
/cell-heap/
ex1-shift
list
/
e-02