| # buf1 = n2 + n1 + m, ⌜# buf1⌝ = ⌜n1⌝ + #((⌜buf0⌝ from n0) to m) + #(⌜buf1⌝ from n1 + m), #(⌜buf0⌝ from n0) < ⌜m⌝ , ⌜n3⌝ < #((⌜buf0⌝ from n0) to m), n3 < n2 + m, n1 < # buf1, n0 + m ≤ # buf0, n1 + m ≤ # buf1 ⊦ (m ≤ n3 ⊃ buf1[n3 + n1];buf0[n3 + n0]) = ((⌜buf0⌝ from n0) to m)[n3] |
# buf1 = n2 + n1 + m, ⌜# buf1⌝ = ⌜n1⌝ + #((⌜buf0⌝ from n0) to m) + #(⌜buf1⌝ from n1 + m), n1 < # buf1, n3 < n2 + m, ⌜n3⌝ < #((⌜buf0⌝ from n0) to m), #(⌜buf0⌝ from n0) < ⌜m⌝ , n1 + m ≤ # buf1, n0 + m ≤ # buf0 ⊦ (m ≤ n3 ⊃ buf1[n3 + n1];buf0[n3 + n0]) = ((⌜buf0⌝ from n0) to m)[n3]