Open
Description
Another example where the prover fails to complete:
Facility PushDemo;
uses String_Theory;
Facility Integer_Stack_Fac is Stack_Template(Integer, 5)
realized by Array_Realiz;
Operation MyPush(preserves I: Integer; updates S: Stack);
ensures (|#S| < 5 and S = <#I> o #S) or |#S| = 5 and S = #S;
Procedure
Var J: Integer;
J := I;
If Depth(S) + 1 <= 5 then
Push(J, S);
end;
end;
Operation Main();
Procedure
end Main;
end;
Metadata
Metadata
Assignees
Type
Projects
Status
No status