| # buf1 = n2 + n1 + m, n3 = n4 + m, ⌜# buf1⌝ = ⌜n1⌝ + ⌜m⌝ + #(⌜buf1⌝ from n1 + m), n3 < n2 + m, n1 < # buf1, n0 + m ≤ # buf0, n1 + m ≤ # buf1, m ≤ n3 ⊦ buf1[n3 + n1] = (⌜buf1⌝ from n1 + m)[n4], n2 = 0, #(⌜buf0⌝ from n0) < ⌜m⌝ |
# buf1 = n2 + n1 + m, ⌜# buf1⌝ = ⌜n1⌝ + ⌜m⌝ + #(⌜buf1⌝ from n1 + m), n4 < n2, n1 < # buf1, n0 + m ≤ # buf0, n1 + m ≤ # buf1 ⊦ buf1[(n4 + m) + n1] = (⌜buf1⌝ from n1 + m)[n4], #(⌜buf0⌝ from n0) < ⌜m⌝
Used simplifier rules: f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → n ≠ 0; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)