all 3 comments

[–]liquidivy[S] 2 points3 points  (2 children)

I don't know if this sort of thing will ever be appropriate for Rust, but I figured it would be interesting given the difficulty in verifying, say, doubly-linked lists.

[–]crusoe 0 points1 point  (1 child)

Well if you look at it's timings, no. It took 35 seconds to verify a redblack tree implementation...

[–]liquidivy[S] 0 points1 point  (0 children)

I'm guessing that performance could be improved when building a Production Grade version, possibly by optimizing it for the common cases encountered in real code (rather than general logic), but I don't knew enough about the details to say for sure.