void abort() { }; /*@ requires ((0 < cond)) && (cond != 0); ensures ((0 < cond)) && (1); @*/ void __VERIFIER_assert(int cond) { if (!(cond)) { ERROR: {/*@ assert(0); */;abort();} } return; } int main() { unsigned int x = 0; unsigned int y = 1; /*@ loop invariant (((x == 6) || (x < 6))); @*/ while (x < 6) { x++; y *= 2; } __VERIFIER_assert(x == 6); }