Made invariant of class 'QKeyValue' robust by:

- making field private
- exposing read-only list
- copying incoming list
- adding methods 'AddParam', 'AddParams', and 'ClearParams'
(with help from David Rohr)

1 files changed, 1 insertions, 1 deletions

diff --git a/Source/Core/AbsyCmd.cs b/Source/Core/AbsyCmd.cs
index 89a3d1d1..6bc41b5f 100644
--- a/Source/Core/AbsyCmd.cs
+++ b/Source/Core/AbsyCmd.cs
@@ -2599,7 +2599,7 @@ namespace Microsoft.Boogie {
         if (QKeyValue.FindBoolAttribute(e.Attributes, "candidate"))

         {

             assume.Attributes = new QKeyValue(Token.NoToken, "candidate", new List<object>(), assume.Attributes);

-            assume.Attributes.Params.Add(this.callee);

+            assume.Attributes.AddParam(this.callee);

         }

         #endregion

         newBlockBody.Add(assume);