a>=aV0V2a-a+aV0V1V1V2Ia>=aV0V2a-a+aV0V3V3V2La+V1c1ONa<V1V2Aa<V2alengthV0Aa<=V4V2Aa<=c0V4Aadecrease1V0Aa<a-V2V4a-V2V1Aa<=c0a-V2V1La+V1c1Ia<V1V2Ia<V2alengthV0Aa<=V1V2Aa<=c0V1Aadecrease1V0F
VC for decrease1_induction
a>=aV0V2a-a+aV0V1V1V2Ia<V2alengthV0Aa<=V1V2Aa<=c0V1Iadecrease1V0F
a<=c0c0Iadecrease1V3F
loop invariant init
Na=aV3V4c0Ia<V4alengthV3Ia<V4c0Aa<=c0V4FIa<=c0c0Iadecrease1V3F
a<V4alengthV3Aa<=c0V4Ia<V4alengthV3INa=aV3V5c0Ia<V5alengthV3Ia<V5V4Aa<=c0V5FAa<=c0V4FIadecrease1V3F
index in array bounds
Na=aV3V5c0Ia<V5V4Aa<=c0V5FAa=aV3V4c0Aa<V4alengthV3Aa<=c0V4ONa=aV3V6c0Ia<V6alengthV3Aa<=c0V6FAa=V4c-1Ia=aV3V4c0Ia<V4alengthV3INa=aV3V7c0Ia<V7alengthV3Ia<V7V4Aa<=c0V7FAa<=c0V4FIadecrease1V3F
postcondition
a<V4alengthV3Aa<=c0V4INa=aV3V4c0Ia<V4alengthV3INa=aV3V5c0Ia<V5alengthV3Ia<V5V4Aa<=c0V5FAa<=c0V4FIadecrease1V3F
a<V4alengthV3Aa<=c0V4Ia>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V5c0Ia<V5alengthV3Ia<V5V4Aa<=c0V5FAa<=c0V4FIadecrease1V3F
a<a-alengthV3V5a-alengthV3V4Aa<=c0a-alengthV3V4Ia=V5a+V4aV3V4FIa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V6c0Ia<V6alengthV3Ia<V6V4Aa<=c0V6FAa<=c0V4FIadecrease1V3F
loop variant decrease
a<=c0V5Ia=V5a+V4aV3V4FIa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V6c0Ia<V6alengthV3Ia<V6V4Aa<=c0V6FAa<=c0V4FIadecrease1V3F
loop invariant preservation
Na=aV3V6c0Ia<V6alengthV3Ia<V6V5Aa<=c0V6FIa<=c0V5Ia=V5a+V4aV3V4FIa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V7c0Ia<V7alengthV3Ia<V7V4Aa<=c0V7FAa<=c0V4FIadecrease1V3F
a<a-alengthV3V5a-alengthV3V4Aa<=c0a-alengthV3V4Ia=V5a+V4c1FINa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V6c0Ia<V6alengthV3Ia<V6V4Aa<=c0V6FAa<=c0V4FIadecrease1V3F
a<=c0V5Ia=V5a+V4c1FINa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V6c0Ia<V6alengthV3Ia<V6V4Aa<=c0V6FAa<=c0V4FIadecrease1V3F
Na=aV3V6c0Ia<V6alengthV3Ia<V6V5Aa<=c0V6FIa<=c0V5Ia=V5a+V4c1FINa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3INa=aV3V7c0Ia<V7alengthV3Ia<V7V4Aa<=c0V7FAa<=c0V4FIadecrease1V3F
Na=aV3V5c0Ia<V5c-1Aa<=c0V5FAa=aV3c-1c0Aa<c-1alengthV3Aa<=c0c-1ONa=aV3V6c0Ia<V6alengthV3Aa<=c0V6FAtINa<V4alengthV3INa=aV3V7c0Ia<V7alengthV3Ia<V7V4Aa<=c0V7FAa<=c0V4FIadecrease1V3F
iNa=aV3V5c0Ia<V5c-1Aa<=c0V5FAa=aV3c-1c0Aa<c-1alengthV3Aa<=c0c-1ONa=aV3V6c0Ia<V6alengthV3Aa<=c0V6FAtiiNa=aV3V8c0Ia<V8alengthV3Ia<V8V7Aa<=c0V8FAa<=c0V7Aa<a-alengthV3V7a-alengthV3V4Aa<=c0a-alengthV3V4Ia=V7a+V4c1FNa=aV3V10c0Ia<V10alengthV3Ia<V10V9Aa<=c0V10FAa<=c0V9Aa<a-alengthV3V9a-alengthV3V4Aa<=c0a-alengthV3V4Ia=V9a+V4aV3V4FAa<V4alengthV3Aa<=c0V4a>aV3V4c0Aa<V4alengthV3Aa<=c0V4Na=aV3V11c0Ia<V11V4Aa<=c0V11FAa=aV3V4c0Aa<V4alengthV3Aa<=c0V4ONa=aV3V12c0Ia<V12alengthV3Aa<=c0V12FAa=V4c-1a=aV3V4c0Aa<V4alengthV3Aa<=c0V4a<V4alengthV3INa=aV3V13c0Ia<V13alengthV3Ia<V13V4Aa<=c0V13FAa<=c0V4FANa=aV3V14c0Ia<V14alengthV3Ia<V14c0Aa<=c0V14FAa<=c0c0Iadecrease1V3F
VC for search
a<V4alengthV3Aa<=c0V4Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
a<V4alengthV3Aa<=c0V4INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
a<V4alengthV3Aa<=c0V4Ia>aV3V4c0INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
a<a-alengthV3V5a-alengthV3V4Aa<=c0a-alengthV3V4La+V4aV3V4Ia>aV3V4c0INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
variant decrease
a<=c0V5Aadecrease1V3La+V4aV3V4Ia>aV3V4c0INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
precondition
a<a-alengthV3V5a-alengthV3V4Aa<=c0a-alengthV3V4La+V4c1INa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
a<=c0V5Aadecrease1V3La+V4c1INa>aV3V4c0INa=aV3V4c0Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
Na=aV3V6c0Ia<V6V5Aa<=V4V6FAa=aV3V5c0Aa<V5alengthV3Aa<=V4V5ONa=aV3V7c0Ia<V7alengthV3Aa<=V4V7FAa=V5c-1Iia=V5c-1iiNa=aV3V9c0Ia<V9V5Aa<=V8V9FAa=aV3V5c0Aa<V5alengthV3Aa<=V8V5ONa=aV3V10c0Ia<V10alengthV3Aa<=V8V10FAa=V5c-1La+V4c1Na=aV3V12c0Ia<V12V5Aa<=V11V12FAa=aV3V5c0Aa<V5alengthV3Aa<=V11V5ONa=aV3V13c0Ia<V13alengthV3Aa<=V11V13FAa=V5c-1La+V4aV3V4a>aV3V4c0a=V5V4a=aV3V4c0a<V4alengthV3FIa<=c0V4Aadecrease1V3F
Na=aV3V6c0Ia<V6V5Aa<=V4V6FAa=aV3V5c0Aa<V5alengthV3Aa<=V4V5ONa=aV3V7c0Ia<V7alengthV3Aa<=V4V7FAa=V5c-1Iia=V5c-1iiNa=aV3V9c0Ia<V9V5Aa<=V8V9FAa=aV3V5c0Aa<V5alengthV3Aa<=V8V5ONa=aV3V10c0Ia<V10alengthV3Aa<=V8V10FAa=V5c-1La+V4c1Na=aV3V12c0Ia<V12V5Aa<=V11V12FAa=aV3V5c0Aa<V5alengthV3Aa<=V11V5ONa=aV3V13c0Ia<V13alengthV3Aa<=V11V13FAa=V5c-1La+V4aV3V4a>aV3V4c0a=V5V4a=aV3V4c0a<V4alengthV3FAia<=c0V14Aadecrease1V3Aa<a-alengthV3V14a-alengthV3V4Aa<=c0a-alengthV3V4La+V4c1a<=c0V15Aadecrease1V3Aa<a-alengthV3V15a-alengthV3V4Aa<=c0a-alengthV3V4La+V4aV3V4Aa<V4alengthV3Aa<=c0V4a>aV3V4c0Aa<V4alengthV3Aa<=c0V4INa=aV3V4c0Aa<V4alengthV3Aa<=c0V4Ia<V4alengthV3Ia<=c0V4Aadecrease1V3F
VC for search_rec

8d8b40d08cb064f53f9a09bfda5afaec 1H0
002ea6689ae692ed5070f319ab1e283b 22H21H2
9579968add0d6622f2e90749c74bc21b 4H3H2
67c54e9570b7c2b45060b5888d7df1e8 4H5H2
82d4ad70ddf140cf9b35fdbe4b497bb0 7H6H2
ae6811a391136b615d0cecc7a602e252 9H8H2
3227c60fa4f8a378aa17e68a2669562d 7H10H2
650c76bb4adcb9bc3f44342afd7778b5 7H11H2
b21d338ec2c527ec943068c071a29f75 13H12H2
31d4fe41350afbb2033be727f58b1f68 15H14H2
883b0ff45eaf1c63e64088257620c2fd 15H16H2
fb83fac1f5392ae93177b52a3a1af954 13H17H2
9e35dcde24a0d22491612e21583e3c32 15H18H2
83245e3d9ecb47d77550ccdd84b830d9 15H19H2
7b2ea9671b0a678e8a5f848f57ab8087 9H20H2
d1af9cd102521f45d15f9a2e7e19b06c 34H33H2
2b3c4902a90ad1ee8c64e690c513fa41 7H23H2
b3b9bb2b7eefde7c30f3ec808d947c55 7H24H2
72e0eebccb0c1b5fd2d30e1fb29e9900 7H25H2
a15774fe8c8a1c76bf94fad77b5174d9 27H26H2
27d671ac5f1592eee04e059c166d87a4 29H28H2
13c85c98cddc7acf95241ab5a22b5cc7 27H30H2
30de6b85ce4eb4d24305c0a5c9a19894 29H31H2
02da96bb0e46dbcb4ab2f9a0fddaf39a 9H32H2
