revised MIntSet to be unsigned
fixed a failing assertion
Merge pull request #1146 from yilongli/incomplete-attempt-to-prove-cil-avl

Incomplete attempt to prove cil avl