summaryrefslogtreecommitdiff
path: root/tests
diff options
context:
space:
mode:
Diffstat (limited to 'tests')
-rw-r--r--tests/hashmap/Hashmap.Properties.fsti7
1 files changed, 4 insertions, 3 deletions
diff --git a/tests/hashmap/Hashmap.Properties.fsti b/tests/hashmap/Hashmap.Properties.fsti
index 80c0de06..7728bb81 100644
--- a/tests/hashmap/Hashmap.Properties.fsti
+++ b/tests/hashmap/Hashmap.Properties.fsti
@@ -42,7 +42,8 @@ val hash_map_not_overloaded_lem (#t : Type0) (hm : hash_map_t t) :
// if there are more entries than a given fraction of the number of slots,
// we resize the slots vector to limit the hash collisions
let (dividend, divisor) = hm.hash_map_max_load_factor in
- // This postcondition won't typecheck if we don't reveal that divisor > 0
+ // technicality: this postcondition won't typecheck if we don't reveal
+ // that divisor > 0 (because of the division)
divisor > 0 /\
begin
// The max load, computed as a fraction of the capacity
@@ -53,8 +54,8 @@ val hash_map_not_overloaded_lem (#t : Type0) (hm : hash_map_t t) :
// We prove that:
// - either the number of entries is <= than the max load threshold
len <= max_load
- // - or we couldn't resize the map, because then it would overflow
- // (note that we always multiply the number of slots by 2)
+ // - or we couldn't resize the map, because then the arithmetic computations
+ // would overflow (note that we always multiply the number of slots by 2)
|| 2* capacity * dividend > usize_max
end))