sig val formals_in_ensures : Db_types.kernel_function -> Cil_types.funspec exception Error of Cil_types.location * string end