With_Diff_One
type t
val diff_if_one : t -> t -> t
diff_if_one t1 t2 is an over-approximation of t1-t2.
diff_if_one t1 t2
t1-t2
t1 if t2 is not a singleton.
t1
t2
Frama-C