6 let mean_wrong (a:int32) (b:int32) : int32 =
7 div (add a b) (of_int 2)
9 let mean_ok (a:int32) (b:int32) : int32
10 requires { 0 <= to_int a <= to_int b }
12 add a (div (sub b a) (of_int 2))
20 let mean_wrong (a:uint32) (b:uint32) : uint32 =
21 div (add a b) (of_int 2)
23 let mean_ok (a:uint32) (b:uint32) : uint32
24 requires { to_int a <= to_int b }
26 add a (div (sub b a) (of_int 2))