| # buf1 = n2 + n1 + m, ⌜# buf1⌝ = ⌜n1⌝ + #((⌜buf0⌝ from n0) to m) + #(⌜buf1⌝ from n1 + m), n0 + m ≤ # buf0, n1 + m ≤ # buf1 ⊦ ⌜# buf1⌝ = ⌜n1⌝ + #((⌜buf0⌝ from n0) to m) + #(⌜buf1⌝ from n1 + m) ∧ (n < # buf1 → ⌜copy(buf0, n0, buf1, n1, m)⌝ [n] = ((⌜buf1⌝ to n1) + ((⌜buf0⌝ from n0) to m) + (⌜buf1⌝ from n1 + m))[n]) |
# buf1 = n2 + n1 + m, ⌜# buf1⌝ = ⌜n1⌝ + #((⌜buf0⌝ from n0) to m) + #(⌜buf1⌝ from n1 + m), n < # buf1, n0 + m ≤ # buf0, n1 + m ≤ # buf1 ⊦ ⌜copy(buf0, n0, buf1, n1, m)⌝ [n] = ((⌜buf1⌝ to n1) + ((⌜buf0⌝ from n0) to m) + (⌜buf1⌝ from n1 + m))[n]
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic