creusot_contracts/std/iter/
empty.rs1use crate::{prelude::*, std::iter::Empty};
2
3impl<T> IteratorSpec for Empty<T> {
4 #[logic(open, prophetic)]
5 fn completed(&mut self) -> bool {
6 resolve(self)
7 }
8
9 #[logic(open)]
10 fn produces(self, visited: Seq<Self::Item>, o: Self) -> bool {
11 pearlite! { visited == Seq::empty() && self == o }
12 }
13
14 #[logic(law)]
15 #[ensures(self.produces(Seq::empty(), self))]
16 fn produces_refl(self) {}
17
18 #[logic(law)]
19 #[requires(a.produces(ab, b))]
20 #[requires(b.produces(bc, c))]
21 #[ensures(a.produces(ab.concat(bc), c))]
22 fn produces_trans(a: Self, ab: Seq<Self::Item>, b: Self, bc: Seq<Self::Item>, c: Self) {}
23}
24
25extern_spec! {
26 mod std {
27 mod iter {
28 impl<T> Iterator for Empty<T> {
29 #[check(ghost)]
30 #[ensures(result == None && self.completed())]
31 fn next(&mut self) -> Option<T>;
32 }
33 }
34 }
35}