Cleaned hoare triple to consider address of y instead of value