l4v
l4v copied to clipboard
Style for `ccorres` statements
The actual content looks good to me. However, I can't be sure without opening it up myself, but do you need all of the fake constants. I would have thought you would just need
ccorres
,UNIV
,c_guard
,ptr_select
, and maybeptr
andcond
. Couldn't theccorres
arguments be bound variables?Also, you shouldn't need the axiomatizations unless you explicitly refer to the definition lemma.
Very good point. None of the constants is needed. I've removed them, and adjusted things in the fake lemmas to make the schematic variable names nicer
@michaelmcinerney : any reason this wasn't merged?
@michaelmcinerney : any reason this wasn't merged?
No good reason. I've been meaning to ask whether it's fine to merge. I'll try today