org.jmlspecs.models
Class JMLValueToValueMap

java.lang.Object
  org.jmlspecs.models.JMLValueToValueRelation
      org.jmlspecs.models.JMLValueToValueMap

All Implemented Interfaces:

Cloneable, JMLCollection, JMLType, Serializable

public class JMLValueToValueMap

extends JMLValueToValueRelation

Maps (i.e., binary relations that are functional) from non-null elements of JMLType to non-null elements of JMLType. The first type, JMLType, is called the domain type of the map; the second type, JMLType, is called the range type of the map. A map can be seen as a set of pairs, of form (dv, rv), consisting of an element of the domain type, dv, and an element of the range type, rv. Alternatively, it can be seen as a partial function that maps each element of the domain to an element of the range type.

This type is a subtype of JMLValueToValueRelation, and as such as can be treated as a binary relation or a set valued function also. See the documentation for JMLValueToValueRelation and for the methods inherited from this supertype for more information.

This type considers elements val and dv of the domain type, to be distinct just when _val_not_equal_to_dv_. It considers elements of r and rv of the range type to be distinct just when _r_not_equal_to_rv_. Cloning takes place for the domain or range elements if the corresponding domain or range type is JMLType.

Version:

$Revision: 1.35 $

Author:

Gary T. Leavens, Clyde Ruby

See Also:

JMLCollection, JMLType, JMLValueToValueRelation, JMLValueToValueRelationEnumerator, JMLValueToValueRelationImageEnumerator, JMLValueSet, JMLObjectSet, JMLObjectToObjectMap, JMLValueToObjectMap, JMLObjectToValueMap, JMLValueToValueMap, JMLValueToValueRelation.toFunction()

Class Specifications

public invariant this.isaFunction(); public invariant_redundantly ( \forall org.jmlspecs.models.JMLType dv; this.isDefinedAt(dv); this.elementImage(dv).int_size() == 1);

Specifications inherited from class JMLValueToValueRelation

public invariant ( \forall java.lang.Object obj; this.theRelation.has((org.jmlspecs.models.JMLType)obj); obj != null&&obj instanceof org.jmlspecs.models.JMLValueValuePair&&((org.jmlspecs.models.JMLValueValuePair)obj).key != null&&((org.jmlspecs.models.JMLValueValuePair)obj).value != null); public invariant_redundantly (* Every element of 'theRelation'is a JMLValueValuePair whose key and value are not null *); public invariant this.elementType == \type(org.jmlspecs.models.JMLValueValuePair); public invariant !this.containsNull; protected invariant this.imagePairSet_.int_size() == this.domain_.int_size()&&( \forall org.jmlspecs.models.JMLType dv; dv != null&&this.domain_.has(dv); this.imagePairSet_.has(new org.jmlspecs.models.JMLValueValuePair(dv, this.elementImage(dv)))); protected invariant_redundantly this.imagePairSet_ == this.imagePairSet(); protected invariant this.size_ == this.theRelation.int_size(); protected invariant this.size_ >= 0; public invariant this.owner == null; protected represents theRelation <- this.toSet();

Specifications inherited from class Object

represents objectState <- org.jmlspecs.lang.JMLDataGroup.IT; public represents _getClass <- \typeof(this);

Specifications inherited from interface JMLCollection

instance public constraint this.elementType == \old(this.elementType); instance public constraint this.containsNull == \old(this.containsNull);

Model Field Summary

 

Model fields inherited from class org.jmlspecs.models.JMLValueToValueRelation

theRelation

 

Model fields inherited from class java.lang.Object

_getClass, objectState, theString

 

Model fields inherited from interface org.jmlspecs.models.JMLCollection

elementState

 

Ghost Field Summary

 

Ghost fields inherited from class java.lang.Object

objectTimesFinalized, owner

 

Ghost fields inherited from interface org.jmlspecs.models.JMLCollection

containsNull, elementType

 

Field Summary
static JMLValueToValueMap	EMPTY           The empty JMLValueToValueMap.

 

Fields inherited from class org.jmlspecs.models.JMLValueToValueRelation

domain_, imagePairSet_, size_, TOO_BIG_TO_UNION

 

Constructor Summary
	JMLValueToValueMap()           Initialize this map to be the empty mapping.
	JMLValueToValueMap(non_null JMLType dv, non_null JMLType rv)           Initialize this map to be a mapping that maps the given domain element to the given range element.
protected	JMLValueToValueMap(JMLValueSet ipset, JMLValueSet dom, int sz)           Initialize this map based on the representation values given.
	JMLValueToValueMap(non_null JMLValueValuePair pair)           Initialize this map to be a mapping that maps the key in the given pair to the value in that pair.

 

Model Method Summary

 

Model methods inherited from class java.lang.Object

hashValue

 

Model methods inherited from interface org.jmlspecs.models.JMLCollection

size

 

Method Summary
JMLType	apply(JMLType dv)           Return the range element corresponding to dv, if there is one.
JMLValueToValueMap	clashReplaceUnion(JMLValueToValueMap othMap, JMLType errval)           Return a new map that is like the union of the given map and this map, except that if both define a mapping for a given domain element, then each of these clashes is replaced by a mapping from the domain element in question to the given range element.
Object	clone()           Return a clone of this object.
JMLObjectToValueMap	compose(non_null JMLObjectToValueMap othMap)           Return a new map that is the composition of this and the given map.
JMLValueToValueMap	compose(non_null JMLValueToValueMap othMap)           Return a new map that is the composition of this and the given map.
JMLValueToValueMap	disjointUnion(non_null JMLValueToValueMap othMap)           Return a map that is the disjoint union of this and othMap.
JMLValueToValueMap	extend(non_null JMLType dv, non_null JMLType rv)           Return a new map that is like this but maps the given domain element to the given range element.
JMLValueToValueMap	extendUnion(non_null JMLValueToValueMap othMap)           Return a new map that is like the union of the given map and this map, except that if both define a mapping for a given domain element, then only the mapping in the given map is retained.
boolean	isaFunction()           Tells whether this relation is a function.
JMLValueToValueMap	rangeRestrictedTo(non_null JMLValueSet rng)           Return a new map that is like this map but only contains associations that map to range elements in the given set.
JMLValueToValueMap	removeDomainElement(JMLType dv)           Return a new map that is like this but has no association for the given domain element.
JMLValueToValueMap	restrictedTo(non_null JMLValueSet dom)           Return a new map that only maps elements in the given domain to the corresponding range elements in this map.
static JMLValueToValueMap	singletonMap(non_null JMLType dv, non_null JMLType rv)           Return the singleton map containing the given association.
static JMLValueToValueMap	singletonMap(non_null JMLValueValuePair pair)           Return the singleton map containing the association described by the given pair.

 

Methods inherited from class org.jmlspecs.models.JMLValueToValueRelation

add, associations, compose, compose, difference, domain, domainElements, elementImage, elements, equals, has, has, has, hashCode, image, imagePairs, imagePairSet, insert, int_size, intersection, inverse, inverseElementImage, inverseImage, isDefinedAt, isEmpty, iterator, range, rangeElements, remove, remove, removeFromDomain, restrictDomainTo, restrictRangeTo, singleton, singleton, toBag, toFunction, toSequence, toSet, toString, union

 

Methods inherited from class java.lang.Object

finalize, getClass, notify, notifyAll, wait, wait, wait

 

Field Detail

EMPTY

public static final JMLValueToValueMap EMPTY

The empty JMLValueToValueMap.

See Also:

JMLValueToValueMap()

Specifications: non_null

JMLValueToValueMap

public JMLValueToValueMap()

Initialize this map to be the empty mapping.

See Also:

EMPTY

Specifications: (class)pure

public normal_behavior
assignable theRelation, owner, elementType, containsNull;
ensures this.theRelation.equals(new org.jmlspecs.models.JMLValueSet());
ensures_redundantly this.theRelation.isEmpty();

JMLValueToValueMap

public JMLValueToValueMap(non_null JMLType dv,
                          non_null JMLType rv)

Initialize this map to be a mapping that maps the given domain element to the given range element.

See Also:

singletonMap(JMLType, JMLType), JMLValueToValueMap(JMLValueValuePair)

Specifications: (class)pure

public normal_behavior
requires dv != null&&rv != null;
assignable theRelation, owner, elementType, containsNull;
ensures (this.theRelation.int_size() == 1)&&this.elementImage(dv).has(rv);
ensures_redundantly this.isDefinedAt(dv);

JMLValueToValueMap

public JMLValueToValueMap(non_null JMLValueValuePair pair)

Initialize this map to be a mapping that maps the key in the given pair to the value in that pair.

See Also:

singletonMap(JMLValueValuePair), JMLValueToValueMap(JMLType, JMLType)

Specifications: (class)pure

public normal_behavior
requires pair != null;
assignable theRelation, owner, elementType, containsNull;
ensures (this.theRelation.int_size() == 1)&&this.elementImage(pair.key).has(pair.value);
ensures_redundantly this.isDefinedAt(pair.key);

JMLValueToValueMap

protected JMLValueToValueMap(JMLValueSet ipset,
                             JMLValueSet dom,
                             int sz)

Initialize this map based on the representation values given.

Specifications: (class)pure

requires ipset != null&&dom != null&&0 <= sz;
assignable theRelation, owner, elementType, containsNull;
ensures this.imagePairSet_ == ipset&&this.domain_ == dom&&this.size_ == sz;

singletonMap

public static JMLValueToValueMap singletonMap(non_null JMLType dv,
                                              non_null JMLType rv)

Return the singleton map containing the given association.

See Also:

JMLValueToValueMap(JMLType, JMLType), singletonMap(JMLValueValuePair)

Specifications: pure non_null

public normal_behavior
requires dv != null&&rv != null;
ensures \result != null&&\result .equals(new org.jmlspecs.models.JMLValueToValueMap(dv, rv));

singletonMap

public static JMLValueToValueMap singletonMap(non_null JMLValueValuePair pair)

Return the singleton map containing the association described by the given pair.

See Also:

JMLValueToValueMap(JMLValueValuePair), singletonMap(JMLType, JMLType)

Specifications: pure non_null

public normal_behavior
requires pair != null;
ensures \result != null&&\result .equals(new org.jmlspecs.models.JMLValueToValueMap(pair));

isaFunction

public boolean isaFunction()

Tells whether this relation is a function.

Overrides:

isaFunction in class JMLValueToValueRelation

Specifications: pure

     also

public normal_behavior
ensures \result ;

Specifications inherited from overridden method in class JMLValueToValueRelation:
       (class)pure

public normal_behavior
ensures \result == ( \forall org.jmlspecs.models.JMLType dv; this.isDefinedAt(dv); this.elementImage(dv).int_size() == 1);

apply

public JMLType apply(JMLType dv)
              throws JMLNoSuchElementException

Return the range element corresponding to dv, if there is one.

Parameters:

dv - the domain element for which an association is sought (the key to the table).

Throws:

JMLNoSuchElementException - when dv is not associated to any range element by this.

See Also:

JMLValueToValueRelation.isDefinedAt(org.jmlspecs.models.JMLType), JMLValueToValueRelation.elementImage(org.jmlspecs.models.JMLType), JMLValueToValueRelation.image(org.jmlspecs.models.JMLValueSet)

Specifications: non_null (class)pure

public normal_behavior
requires this.isDefinedAt(dv);
ensures this.elementImage(dv).has(\result );

     also

public exceptional_behavior
requires !this.isDefinedAt(dv);
signals_only org.jmlspecs.models.JMLNoSuchElementException;

clone

public Object clone()

Description copied from class: JMLValueToValueRelation

Return a clone of this object.

Specified by:

clone in interface JMLType

Overrides:

clone in class JMLValueToValueRelation

Specifications: pure non_null

     also

public normal_behavior
ensures \result instanceof org.jmlspecs.models.JMLValueToValueMap&&((org.jmlspecs.models.JMLValueToValueMap)\result ).theRelation.equals(this.theRelation);

Specifications inherited from overridden method in class JMLValueToValueRelation:
       (class)pure

     also

public normal_behavior
ensures \result instanceof org.jmlspecs.models.JMLValueToValueRelation&&((org.jmlspecs.models.JMLValueToValueRelation)\result ).theRelation.equals(this.theRelation);

Specifications inherited from overridden method in class Object:
       non_null

protected normal_behavior
requires this instanceof java.lang.Cloneable;
assignable \nothing;
ensures \result != null;
ensures \typeof(\result ) == \typeof(this);
ensures (* \result is a clone of this *);

     also

protected normal_behavior
requires this.getClass().isArray();
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((java.lang.Object[])\result ).length == ((java.lang.Object[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((java.lang.Object[])this).length; ((java.lang.Object[])\result )[i] == ((java.lang.Object[])this)[i]);

     also

requires this.getClass().isArray();
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures java.lang.reflect.Array.getLength(\result ) == java.lang.reflect.Array.getLength(this);
ensures ( \forall int i; 0 <= i&&i < java.lang.reflect.Array.getLength(this); ( \exists java.lang.Object result_i; result_i == java.lang.reflect.Array.get(\result ,i); (result_i == null&&java.lang.reflect.Array.get(this,i) == null)||(result_i != null&&result_i.equals(java.lang.reflect.Array.get(this,i)))));

     also

protected exceptional_behavior
requires !(this instanceof java.lang.Cloneable);
assignable \nothing;
signals_only java.lang.CloneNotSupportedException;

     also

protected normal_behavior
requires \elemtype(\typeof(this)) <: \type(java.lang.Object);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((java.lang.Object[])\result ).length == ((java.lang.Object[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((java.lang.Object[])this).length; ((java.lang.Object[])\result )[i] == ((java.lang.Object[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(int);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((int[])\result ).length == ((int[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((int[])this).length; ((int[])\result )[i] == ((int[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(byte);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((byte[])\result ).length == ((byte[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((byte[])this).length; ((byte[])\result )[i] == ((byte[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(char);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((char[])\result ).length == ((char[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((char[])this).length; ((char[])\result )[i] == ((char[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(long);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((long[])\result ).length == ((long[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((long[])this).length; ((long[])\result )[i] == ((long[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(short);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((short[])\result ).length == ((short[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((short[])this).length; ((short[])\result )[i] == ((short[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(boolean);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((boolean[])\result ).length == ((boolean[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((boolean[])this).length; ((boolean[])\result )[i] == ((boolean[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(float);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((float[])\result ).length == ((float[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((float[])this).length; (java.lang.Float.isNaN(((float[])\result )[i])&&java.lang.Float.isNaN(((float[])this)[i]))||((float[])\result )[i] == ((float[])this)[i]);

     also

protected normal_behavior
requires \elemtype(\typeof(this)) == \type(double);
assignable \nothing;
ensures \elemtype(\typeof(\result )) == \elemtype(\typeof(this));
ensures ((double[])\result ).length == ((double[])this).length;
ensures ( \forall int i; 0 <= i&&i < ((double[])this).length; (java.lang.Double.isNaN(((double[])\result )[i])&&java.lang.Double.isNaN(((double[])this)[i]))||((double[])\result )[i] == ((double[])this)[i]);

Specifications inherited from overridden method in interface JMLType:
       pure

     also

public normal_behavior
ensures \result != null;
ensures \result instanceof org.jmlspecs.models.JMLType;
ensures ((org.jmlspecs.models.JMLType)\result ).equals(this);

    implies_that

ensures \result != null&&\typeof(\result ) <: \type(org.jmlspecs.models.JMLType);

extend

public JMLValueToValueMap extend(non_null JMLType dv,
                                 non_null JMLType rv)

Return a new map that is like this but maps the given domain element to the given range element. Any previously existing mapping for the domain element is removed first.

See Also:

JMLValueToValueRelation#insert(JMLType, JMLType)

Specifications: non_null (class)pure

public normal_behavior
requires dv != null&&rv != null;
requires !this.isDefinedAt(dv) ==> this.int_size() < 2147483647;
ensures \result .equals(this.removeDomainElement(dv).add(dv,rv));

removeDomainElement

public JMLValueToValueMap removeDomainElement(JMLType dv)

Return a new map that is like this but has no association for the given domain element.

See Also:

JMLValueToValueRelation.removeFromDomain(org.jmlspecs.models.JMLType)

Specifications: non_null (class)pure

public normal_behavior
ensures \result .equals(this.removeFromDomain(dv).toFunction());
ensures_redundantly !this.isDefinedAt(dv) ==> \result .equals(this);

compose

public JMLValueToValueMap compose(non_null JMLValueToValueMap othMap)

Return a new map that is the composition of this and the given map. The composition is done in the usual order; that is, if the given map maps x to y and this maps y to z, then the result maps x to z.

See Also:

compose(JMLObjectToValueMap)

Specifications: non_null (class)pure

public normal_behavior
requires othMap != null;
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == ( \exists org.jmlspecs.models.JMLType val; othMap.elementImage(pair.key).has(val); this.elementImage(val).has(pair.value)));

Specifications inherited from overridden method compose(JMLValueToValueRelation othRel) in class JMLValueToValueRelation:
       non_null (class)pure

public normal_behavior
requires othRel != null;
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == ( \exists org.jmlspecs.models.JMLType val; othRel.elementImage(pair.key).has(val); this.elementImage(val).has(pair.value)));

compose

public JMLObjectToValueMap compose(non_null JMLObjectToValueMap othMap)

Return a new map that is the composition of this and the given map. The composition is done in the usual order; that is, if the given map maps x to y and this maps y to z, then the result maps x to z.

See Also:

compose(JMLValueToValueMap)

Specifications: non_null (class)pure

public normal_behavior
requires othMap != null;
ensures ( \forall org.jmlspecs.models.JMLObjectValuePair pair; ; \result .theRelation.has(pair) == ( \exists org.jmlspecs.models.JMLType val; othMap.elementImage(pair.key).has(val); this.elementImage(val).has(pair.value)));

Specifications inherited from overridden method compose(JMLObjectToValueRelation othRel) in class JMLValueToValueRelation:
       non_null (class)pure

public normal_behavior
requires othRel != null;
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == ( \exists org.jmlspecs.models.JMLType val; othRel.elementImage(pair.key).has(val); this.elementImage(val).has(pair.value)));

restrictedTo

public JMLValueToValueMap restrictedTo(non_null JMLValueSet dom)

Return a new map that only maps elements in the given domain to the corresponding range elements in this map.

See Also:

rangeRestrictedTo(org.jmlspecs.models.JMLValueSet), JMLValueToValueRelation.restrictDomainTo(org.jmlspecs.models.JMLValueSet)

Specifications: non_null (class)pure

public normal_behavior
requires dom != null;
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == dom.has(pair.key)&&this.elementImage(pair.key).has(pair.value));

rangeRestrictedTo

public JMLValueToValueMap rangeRestrictedTo(non_null JMLValueSet rng)

Return a new map that is like this map but only contains associations that map to range elements in the given set.

See Also:

restrictedTo(org.jmlspecs.models.JMLValueSet), JMLValueToValueRelation.restrictRangeTo(org.jmlspecs.models.JMLValueSet)

Specifications: non_null (class)pure

public normal_behavior
requires rng != null;
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == rng.has(pair.value)&&this.elementImage(pair.key).has(pair.value));

extendUnion

public JMLValueToValueMap extendUnion(non_null JMLValueToValueMap othMap)
                               throws IllegalStateException

Return a new map that is like the union of the given map and this map, except that if both define a mapping for a given domain element, then only the mapping in the given map is retained.

Throws:

IllegalStateException

See Also:

clashReplaceUnion(org.jmlspecs.models.JMLValueToValueMap, org.jmlspecs.models.JMLType), disjointUnion(org.jmlspecs.models.JMLValueToValueMap), JMLValueToValueRelation.union(org.jmlspecs.models.JMLValueToValueRelation)

Specifications: non_null (class)pure

public normal_behavior
requires othMap != null;
requires this.int_size() <= 2147483647-othMap.difference(this).int_size();
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == othMap.elementImage(pair.key).has(pair.value)||(!othMap.isDefinedAt(pair.key)&&this.elementImage(pair.key).has(pair.value)));

clashReplaceUnion

public JMLValueToValueMap clashReplaceUnion(JMLValueToValueMap othMap,
                                            JMLType errval)
                                     throws IllegalStateException

Return a new map that is like the union of the given map and this map, except that if both define a mapping for a given domain element, then each of these clashes is replaced by a mapping from the domain element in question to the given range element.

Parameters:

othMap - the other map.

errval - the range element to use when clashes occur.

Throws:

IllegalStateException

See Also:

extendUnion(org.jmlspecs.models.JMLValueToValueMap), disjointUnion(org.jmlspecs.models.JMLValueToValueMap), JMLValueToValueRelation.union(org.jmlspecs.models.JMLValueToValueRelation)

Specifications: non_null (class)pure

public normal_behavior
requires othMap != null&&errval != null;
requires this.int_size() <= 2147483647-othMap.difference(this).int_size();
ensures ( \forall org.jmlspecs.models.JMLValueValuePair pair; ; \result .theRelation.has(pair) == (!othMap.isDefinedAt(pair.key)&&this.elementImage(pair.key).has(pair.value))||(!this.isDefinedAt(pair.key)&&othMap.elementImage(pair.key).has(pair.value))||(this.isDefinedAt(pair.key)&&othMap.isDefinedAt(pair.key)&&pair.value.equals(errval)));

    implies_that

requires othMap != null&&errval != null;

disjointUnion

public JMLValueToValueMap disjointUnion(non_null JMLValueToValueMap othMap)
                                 throws JMLMapException,
                                        IllegalStateException

Return a map that is the disjoint union of this and othMap.

Parameters:

othMap - the other mapping

Throws:

JMLMapException - the ranges of this and othMap have elements in common (i.e., when they interesect).

IllegalStateException

See Also:

extendUnion(org.jmlspecs.models.JMLValueToValueMap), clashReplaceUnion(org.jmlspecs.models.JMLValueToValueMap, org.jmlspecs.models.JMLType), JMLValueToValueRelation.union(org.jmlspecs.models.JMLValueToValueRelation)

Specifications: non_null (class)pure

public normal_behavior
requires othMap != null&&this.domain().intersection(othMap.domain()).isEmpty();
requires this.int_size() <= 2147483647-othMap.int_size();
ensures \result .equals(this.union(othMap));

     also

public exceptional_behavior
requires othMap != null&&!this.domain().intersection(othMap.domain()).isEmpty();
signals_only org.jmlspecs.models.JMLMapException;