int x, y; int ai[]; int bi[]; typedef struct _ts { int a; int b; } tst; tst ts; tst *tstp ; int f (int i[], int *j) int ai[]; int x, y; tst ts; tst* tstp; { let elt be ai[6]; modifies elt, x, ai[3], ai[3+6], ai[x'], ts.a, tstp'->a, ts; ensures true; } int g (int a[], int *p) int x, y; { modifies x, y; ensures true; }