procedure P (X : in out Integer);
--# derives X from *;
--# pre  X = 42;