a=alengthV0c0Aa=alengthV1alengthV0Ia=alengthV1c0Aa=aV1V2c0Ia<V2c0Aa<=c0V2FFAa>=c0c0Ia=alengthV0c0Aa=aV0V3c0Ia<V3c0Aa<=c0V3FFAa>=c0c0
VC for dll
a=alengthanextV0anV0Aa=alengthaprevV0alengthanextV0FanV0anextV0aprevV0
a<V5alengthV7Aa<=c0V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
index in array bounds
a<V5alengthV9Aa<=c0V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
a<V10alengthV11Aa<=c0V10LaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
a<V5alengthV13Aa<=c0V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
a<V5alengthV14Aa<=c0V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
a<V16alengthV13Aa<=c0V16LaV14V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
a=anthaconsV5V6a+V21c1anthV6V21Ia<V21alength1V6Aa<=c0V21FIa=V19aV13V16V15Aa=aeltsV19asetaeltsV13V16V15Ia=V18V12Aa=alengthV19alengthV13Aa=V20V14Ia=alengthV19alengthV13FLaV14V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
assertion
a=alengthV19V18Aa=alengthV20alengthV19Ia=anthaconsV5V6a+V21c1anthV6V21Ia<V21alength1V6Aa<=c0V21FIa=V19aV13V16V15Aa=aeltsV19asetaeltsV13V16V15Ia=V18V12Aa=alengthV19alengthV13Aa=V20V14Ia=alengthV19alengthV13FLaV14V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
type invariant
avalid_outV17V5Ia=V20aprevV17Aa=V19anextV17Aa=V18anV17Ia=anthaconsV5V6a+V21c1anthV6V21Ia<V21alength1V6Aa<=c0V21FIa=V19aV13V16V15Aa=aeltsV19asetaeltsV13V16V15Ia=V18V12Aa=alengthV19alengthV13Aa=V20V14Ia=alengthV19alengthV13FLaV14V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
postcondition
ais_listV17V6Iavalid_outV17V5Ia=V20aprevV17Aa=V19anextV17Aa=V18anV17Ia=anthaconsV5V6a+V21c1anthV6V21Ia<V21alength1V6Aa<=c0V21FIa=V19aV13V16V15Aa=aeltsV19asetaeltsV13V16V15Ia=V18V12Aa=alengthV19alengthV13Aa=V20V14Ia=alengthV19alengthV13FLaV14V5LaV13V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FLaprevV1LaV9V5LanextV1LaV7V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
ais_listV17V6Aavalid_outV17V5Ia=V20aprevV17Aa=V19anextV17Aa=V18anV17Aa=alengthV19V18Aa=alengthV20alengthV19Aa=anthaconsV5V6a+V21c1anthV6V21Ia<V21alength1V6Aa<=c0V21FIa=V19aV13V16V15Aa=aeltsV19asetaeltsV13V16V15Ia=V18V12Aa=alengthV19alengthV13Aa=V20V14Ia=alengthV19alengthV13FAa<V16alengthV13Aa<=c0V16LaV14V5Aa<V5alengthV14Aa<=c0V5LaV13V5Aa<V5alengthV13Aa<=c0V5Ia=V14aV11V10V8Aa=aeltsV14asetaeltsV11V10V8Ia=V12anV1Aa=V13anextV1Aa=alengthV14alengthaprevV1Ia=alengthV14alengthV11FAa<V10alengthV11Aa<=c0V10LaprevV1LaV9V5Aa<V5alengthV9Aa<=c0V5LanextV1LaV7V5Aa<V5alengthV7Aa<=c0V5LaprevV1Iais_listV1aconsV5V6Aavalid_inV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
VC for remove
ais_listV14aconsV5V6Aavalid_inV14V5Ia=V17aprevV14Aa=V16anextV14Aa=V15anV14Aa=alengthV16V15Aa=alengthV17alengthV16Ia=V16aV11V13V5Aa=aeltsV16asetaeltsV11V13V5Ia=V15V10Aa=alengthV16alengthV11Aa=V17V12Ia=alengthV16alengthV11FAa<V13alengthV11Aa<=c0V13LaV12V5Aa<V5alengthV12Aa<=c0V5Ia=V12aV9V8V5Aa=aeltsV12asetaeltsV9V8V5Ia=V10anV1Aa=V11anextV1Aa=alengthV12alengthaprevV1Ia=alengthV12alengthV9FAa<V8alengthV9Aa<=c0V8LaprevV1LaV7V5Aa<V5alengthV7Aa<=c0V5LanextV1INa=anthV6c0V5Aa=aanextV1V5anthV6c0Aa<c0alength1V6Aais_listV1V6Aavalid_outV1V5Aa=V4aprevV1Aa=V3anextV1Aa=V2anV1F
VC for put_back

4014d9a54bd85400396d5c95e6e20630 1H0
3759c89fc1a79f367b71a16286d61f39 18H17H2
b80809460166aebc8a68b6791a5e764c 4H3H2
324b4d47b88709a1d69ee28e4ee528ce 4H5H2
c42704cdaa87c3042468f2a408f2e01c 4H6H2
c17b1d39f8c3d38bf4468dd5eddf7235 4H7H2
dd369e7e2f10fe4432d52a7c0d7e8ec8 4H8H2
4b5ae99a348516a168b9f2ba4bde314f 4H9H2
a69f4927f420eadb7837308ff9a6830b 11H10H2
e1e5003dd9b4916f1c6f4300ad69f309 13H12H2
4e83904c80d1a15ba1d91b90c54385c8 15H14H2
491b708e4700c0d5a6cae5855b033f16 15H16H2
e3f24ec38f008cc93fae5efa7e849514 20H19H2
