module Logic_interp:returns a copy of the spec in which all formals in an ensures clause are guarded by an \at(x,Old).sig
..end
module To_zone:sig
..end
val formals_in_ensures : Db_types.kernel_function -> Cil_types.funspec
exception Error of Cil_types.location * string