pub fn extern_spec_u32_overflowing_add(self_: u32, rhs: u32) -> (u32, bool)Expand description
extern spec for u32::overflowing_add
This is not a real function: its only use is for documentation.
terminates
ghost
ensures
(self@ $op rhs@) >= $type::MIN@ && (self@ $op rhs@) <= $type::MAX@ ==> result.0@ == (self@ $op rhs@)
ensures
exists<k: Int> result.0@ == (self@ $op rhs@) + k * ($type::MAX@ - $type::MIN@ + 1)
ensures
result.1 == ((self@ $op rhs@) < $type::MIN@ || (self@ $op rhs@) > $type::MAX@)