source: CIVL/examples/loop_invariants/max.cvl@ 9becdb9

#include <assert.h>

#pragma PARSE_ACSL

$input int N;
$assume(N > 0);     
$input double a[N];

int main() {
  int i = 0;
  double max = a[0];
  
  /*@ loop invariant 1 <= i && i <= N;
    @ loop invariant \forall int t; 0 <= t && t < i ==> a[t] <= max;
    @ loop assigns i, max;
    @*/
  for (i = 1; i < N; i++)
    if (a[i] > max)
      max = a[i];

  assert($forall (int i : 0 .. N-1) a[i] <= max);
}