With_Diff
type t
val diff : t -> t -> t
diff t1 t2 is an over-approximation of t1-t2. t2 must be an under-approximation or exact.
diff t1 t2
t1-t2
t2
Frama-C