I'm glad that I wasn't the only persion pondering the similar thing (referring to the theses), but I'm not sure if the current direction can produce a small enough solution. For example I expected the following to work even with the currently restricted xlib:<p><pre><code> #include <stdlib.h>
foo(int **pp) [
if (@pp) {
.alloc *pp;
} else {
.undefined;
}
] {
*pp = malloc(4);
// or: int *qq = malloc(4); *pp = qq;
}
</code></pre>
It seems that `*pp` doesn't even work in the abstraction. (I originally tried structs, but realized that Xr0 currently doesn't support them.) This is crucial because you can't just do pattern matching against abstractions and axioms, there should be some sort of tactics that massage abstractions so that appropriate axioms can be used if any. Even keeping track of non-variable places (here `*qq`) is not trivial, please consider how to handle the commented code.