@@ -114,10 +114,10 @@ struct node_pair {
114
114
};
115
115
116
116
struct node_pair split (struct node * xs )
117
- /*@ requires take Xs = List(xs); @*/
118
- /*@ ensures take Ys = List(return.fst); @*/
119
- /*@ ensures take Zs = List(return.snd); @*/
120
- /*@ ensures {fst: Ys, snd: Zs} == cn_split(Xs); @*/
117
+ /*@ requires take Xs = List(xs);
118
+ ensures take Ys = List(return.fst);
119
+ ensures take Zs = List(return.snd);
120
+ ensures {fst: Ys, snd: Zs} == cn_split(Xs); @*/
121
121
{
122
122
/*@ unfold cn_split(Xs); @*/
123
123
if (xs == 0 ) {
@@ -139,10 +139,10 @@ struct node_pair split(struct node *xs)
139
139
}
140
140
141
141
struct node * merge (struct node * xs , struct node * ys )
142
- /*@ requires take Xs = List(xs); @*/
143
- /*@ requires take Ys = List(ys); @*/
144
- /*@ ensures take Zs = List(return); @*/
145
- /*@ ensures Zs == cn_merge(Xs, Ys); @*/
142
+ /*@ requires take Xs = List(xs);
143
+ requires take Ys = List(ys);
144
+ ensures take Zs = List(return);
145
+ ensures Zs == cn_merge(Xs, Ys); @*/
146
146
{
147
147
/*@ unfold cn_merge(Xs, Ys); @*/
148
148
if (xs == 0 ) {
@@ -159,9 +159,9 @@ struct node *merge(struct node *xs, struct node *ys)
159
159
}
160
160
161
161
struct node * naive_mergesort (struct node * xs )
162
- /*@ requires take Xs = List(xs); @*/
163
- /*@ ensures take Ys = List(return); @*/
164
- /*@ ensures Ys == cn_mergesort(Xs); @*/
162
+ /*@ requires take Xs = List(xs);
163
+ ensures take Ys = List(return);
164
+ ensures Ys == cn_mergesort(Xs); @*/
165
165
{
166
166
/*@ unfold cn_mergesort(Xs); @*/
167
167
if (xs == 0 ) {
0 commit comments