Step4: INVARIANT's restriction on index: y <= x + 1 and EXIT prove "eyeballs".
int factorial(int x) { int f, y; // PRE-CONDITION: x >= 0 y = 1; // y = 1 f = 1; // y = 1 and f = 1 while (y <= x) { f = f * y; y = y + 1; } // end while // INVARIANT: y <= x + 1 and EXIT: y > x // y = x + 1 // "eyeballs" // POST-CONDITION: f = x! return f; }