<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
<why3session shape_version="6">
<prover id="0" name="Alt-Ergo" version="2.3.0" timelimit="1" steplimit="0" memlimit="1000"/>
<prover id="2" name="Alt-Ergo" version="2.2.0" timelimit="1" steplimit="0" memlimit="1000"/>
<prover id="3" name="CVC4" version="1.5" timelimit="1" steplimit="0" memlimit="1000"/>
<file format="whyml" proved="true">
<path name=".."/><path name="ccursor.mlw"/>
<theory name="PtrCursor" proved="true">
 <goal name="cursor&#39;vc" expl="VC for cursor" proved="true">
 <proof prover="3"><result status="valid" time="0.060000" steps="11306"/></proof>
 </goal>
 <goal name="create_cursor&#39;vc" expl="VC for create_cursor" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="create_cursor&#39;vc.0" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="8520"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.1" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="8558"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.2" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="9928"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9131"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.4" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="10172"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.5" expl="precondition" proved="true">
  <proof prover="0"><result status="valid" time="0.010000" steps="47"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.6" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.140000" steps="298"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.7" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9383"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.8" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="create_cursor&#39;vc.8.0" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.050000" steps="10108"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.1" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.030000" steps="9407"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.2" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="11846"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.3" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.040000" steps="9407"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.4" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.060000" steps="10026"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.5" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.050000" steps="10076"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.6" expl="precondition" proved="true">
   <proof prover="0"><result status="valid" time="0.010000" steps="41"/></proof>
   </goal>
   <goal name="create_cursor&#39;vc.8.7" expl="precondition" proved="true">
   <proof prover="3"><result status="valid" time="0.040000" steps="11334"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="create_cursor&#39;vc.9" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9517"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.10" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="9523"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.11" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="11640"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.12" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9633"/></proof>
  </goal>
  <goal name="create_cursor&#39;vc.13" expl="out of loop bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="10653"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="free_cursor&#39;vc" expl="VC for free_cursor" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="free_cursor&#39;vc.0" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="9585"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.1" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="9592"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.2" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="9709"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.3" expl="precondition" proved="true">
  <proof prover="0"><result status="valid" time="0.010000" steps="26"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.4" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9780"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.5" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="9438"/></proof>
  </goal>
  <goal name="free_cursor&#39;vc.6" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="8587"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="next&#39;vc" expl="VC for next" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="next&#39;vc.0" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="8167"/></proof>
  </goal>
  <goal name="next&#39;vc.1" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="10666"/></proof>
  </goal>
  <goal name="next&#39;vc.2" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.080000" steps="10785"/></proof>
  </goal>
  <goal name="next&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="9853"/></proof>
  </goal>
  <goal name="next&#39;vc.4" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="11032"/></proof>
  </goal>
  <goal name="next&#39;vc.5" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.080000" steps="11122"/></proof>
  </goal>
  <goal name="next&#39;vc.6" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="11275"/></proof>
  </goal>
  <goal name="next&#39;vc.7" expl="loop variant decrease" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="9985"/></proof>
  </goal>
  <goal name="next&#39;vc.8" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="10048"/></proof>
  </goal>
  <goal name="next&#39;vc.9" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="11693"/></proof>
  </goal>
  <goal name="next&#39;vc.10" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="11289"/></proof>
  </goal>
  <goal name="next&#39;vc.11" expl="type invariant" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="next&#39;vc.11.0" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.070000" steps="11220"/></proof>
   </goal>
   <goal name="next&#39;vc.11.1" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.090000" steps="11386"/></proof>
   </goal>
   <goal name="next&#39;vc.11.2" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.090000" steps="11514"/></proof>
   </goal>
   <goal name="next&#39;vc.11.3" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="11390"/></proof>
   </goal>
   <goal name="next&#39;vc.11.4" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="11370"/></proof>
   </goal>
   <goal name="next&#39;vc.11.5" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="11299"/></proof>
   </goal>
   <goal name="next&#39;vc.11.6" expl="type invariant" proved="true">
   <proof prover="0"><result status="valid" time="0.010000" steps="33"/></proof>
   </goal>
   <goal name="next&#39;vc.11.7" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.040000" steps="12317"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="next&#39;vc.12" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="11392"/></proof>
  </goal>
  <goal name="next&#39;vc.13" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.170000" steps="302"/></proof>
  </goal>
  <goal name="next&#39;vc.14" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.080000" steps="11466"/></proof>
  </goal>
  <goal name="next&#39;vc.15" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="0.060000" steps="321"/></proof>
  </goal>
  <goal name="next&#39;vc.16" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="12164"/></proof>
  </goal>
  <goal name="next&#39;vc.17" expl="integer overflow" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="12341"/></proof>
  </goal>
  <goal name="next&#39;vc.18" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="10746"/></proof>
  </goal>
  <goal name="next&#39;vc.19" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.040000" steps="209"/></proof>
  </goal>
  <goal name="next&#39;vc.20" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="83"/></proof>
  </goal>
  <goal name="next&#39;vc.21" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.080000" steps="13254"/></proof>
  </goal>
  <goal name="next&#39;vc.22" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.240000" steps="796"/></proof>
  </goal>
  <goal name="next&#39;vc.23" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.070000" steps="483"/></proof>
  </goal>
  <goal name="next&#39;vc.24" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.050000" steps="274"/></proof>
  </goal>
  <goal name="next&#39;vc.25" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="11119"/></proof>
  </goal>
  <goal name="next&#39;vc.26" expl="type invariant" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="next&#39;vc.26.0" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="13013"/></proof>
   </goal>
   <goal name="next&#39;vc.26.1" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="13047"/></proof>
   </goal>
   <goal name="next&#39;vc.26.2" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.080000" steps="14766"/></proof>
   </goal>
   <goal name="next&#39;vc.26.3" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.070000" steps="13052"/></proof>
   </goal>
   <goal name="next&#39;vc.26.4" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.050000" steps="13007"/></proof>
   </goal>
   <goal name="next&#39;vc.26.5" expl="type invariant" proved="true">
   <proof prover="3"><result status="valid" time="0.050000" steps="12976"/></proof>
   </goal>
   <goal name="next&#39;vc.26.6" expl="type invariant" proved="true">
   <proof prover="0"><result status="valid" time="0.020000" steps="81"/></proof>
   </goal>
   <goal name="next&#39;vc.26.7" expl="type invariant" proved="true">
   <transf name="case" proved="true" arg1="(i &gt;= r)">
    <goal name="next&#39;vc.26.7.0" expl="true case (type invariant)" proved="true">
    <proof prover="2"><result status="valid" time="0.060000" steps="316"/></proof>
    </goal>
    <goal name="next&#39;vc.26.7.1" expl="false case (type invariant)" proved="true">
    <proof prover="2"><result status="valid" time="0.150000" steps="417"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="next&#39;vc.27" expl="out of loop bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.070000" steps="11078"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="main&#39;vc" expl="VC for main" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="main&#39;vc.0" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="8043"/></proof>
  </goal>
  <goal name="main&#39;vc.1" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="8049"/></proof>
  </goal>
  <goal name="main&#39;vc.2" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="8835"/></proof>
  </goal>
  <goal name="main&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="10355"/></proof>
  </goal>
  <goal name="main&#39;vc.4" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.030000" steps="10090"/></proof>
  </goal>
  <goal name="main&#39;vc.5" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.060000" steps="12794"/></proof>
  </goal>
  <goal name="main&#39;vc.6" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="9583"/></proof>
  </goal>
  <goal name="main&#39;vc.7" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="10425"/></proof>
  </goal>
  <goal name="main&#39;vc.8" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="9789"/></proof>
  </goal>
  <goal name="main&#39;vc.9" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="13735"/></proof>
  </goal>
  <goal name="main&#39;vc.10" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.040000" steps="10059"/></proof>
  </goal>
  <goal name="main&#39;vc.11" expl="type invariant" proved="true">
  <proof prover="3"><result status="valid" time="0.050000" steps="12614"/></proof>
  </goal>
  <goal name="main&#39;vc.12" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="9565"/></proof>
  </goal>
  <goal name="main&#39;vc.13" expl="out of loop bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.020000" steps="8848"/></proof>
  </goal>
 </transf>
 </goal>
</theory>
</file>
</why3session>
