Dafny:

* Enforce ghost vs. non-ghost separation
* Allow ghost parameters and ghost locals
* Functions are ghost, but allow the non-ghost "function method"

1 files changed, 2 insertions, 2 deletions

diff --git a/Test/VSI-Benchmarks/b3.dfy b/Test/VSI-Benchmarks/b3.dfy
index ed121ba0..e3a91ab2 100644
--- a/Test/VSI-Benchmarks/b3.dfy
+++ b/Test/VSI-Benchmarks/b3.dfy
@@ -24,11 +24,11 @@ class Queue<T> {
     requires 0 < |contents|;

     modifies this;

     ensures contents == old(contents)[1..] && x == old(contents)[0];

-  function Head(): T

+  function method Head(): T

     requires 0 < |contents|;

     reads this;

   { contents[0] }

-  function Get(i: int): T

+  function method Get(i: int): T

     requires 0 <= i && i < |contents|;

     reads this;

   { contents[i] }