extern_spec_u8_saturating_mul

creusot_contracts::std::num

Function extern_spec_u8_saturating_mul 

Source 
pub fn extern_spec_u8_saturating_mul(self_: u8, rhs: u8) -> u8
Expand description

extern spec for u8::saturating_mul

This is not a real function: its only use is for documentation.

terminates

ghost

ensures

(self@ $op rhs@) >= $type::MIN@ && (self@ $op rhs@) <= $type::MAX@
                    ==> result@ == (self@ $op rhs@)

ensures 

(self@ $op rhs@) < $type::MIN@ ==> result@ == $type::MIN@

ensures 

(self@ $op rhs@) > $type::MAX@ ==> result@ == $type::MAX@