//SyGuG2018_cggmp2005_variant_true-unreach-call_true-termination int main(){ int lo; int mid; int hi; //pre-condition __VERIFIER_assume(mid > 0); lo = 0; hi = 2 * mid ...
Carbon does not check if loop invariant is wellformed, as can be seen in this Silver example: #!Silver field f: Int method test(x: Ref) requires acc(x.f) && x.f != 3 { var b: Bool b := true //:: ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results