@@ -19,14 +19,14 @@ unsigned int one_to_hundred()
19
19
}
20
20
```
21
21
22
- The function above returns the desired integer from 1 to 100. You must
22
+ This function returns the desired integer from 1 to 100. You must
23
23
ensure that the condition given as an assumption is actually satisfiable
24
- by some nondeterministic choice, or otherwise the model checking step
24
+ by some nondeterministic choice, otherwise the model checking step
25
25
will pass vacuously.
26
26
27
- Also note that assumptions are never retroactive: They only affect
27
+ Also note that assumptions are never retroactive. They only affect
28
28
assertions (or other properties) that follow them in program order. This
29
- is best illustrated with an example. In the following fragment, the
29
+ is best illustrated with an example. In the following fragment the
30
30
assumption has no effect on the assertion, which means that the
31
31
assertion will fail:
32
32
@@ -37,7 +37,7 @@ __CPROVER_assume(x==100);
37
37
```
38
38
39
39
Assumptions do restrict the search space, but only for assertions that
40
- follow. As an example, the following program will pass:
40
+ follow. As an example, this program will pass:
41
41
42
42
```C
43
43
int main() {
@@ -52,7 +52,7 @@ int main() {
52
52
```
53
53
54
54
Beware that nondeterminism cannot be used to obtain the effect of
55
- universal quantification in assumptions. As an example,
55
+ universal quantification in assumptions. For example:
56
56
57
57
``` C
58
58
int main () {
@@ -68,6 +68,6 @@ int main() {
68
68
}
69
69
```
70
70
71
- fails, as there is a choice of x and y which results in a counterexample
71
+ This code fails, as there is a choice of x and y which results in a counterexample
72
72
(any choice in which x and y are different).
73
73
0 commit comments