| n2 ≤ n1 + # buf ⊦ # subarray(mkempbuf(n0 + n1) + buf, n0, n2) = # subarray(mkempbuf(n1) + buf, 0, n2) ∧ (∀ n. n < # subarray(mkempbuf(n0 + n1) + buf, n0, n2) → subarray(mkempbuf(n0 + n1) + buf, n0, n2)[n] = subarray(mkempbuf(n1) + buf, 0, n2)[n]) |
n < n2, n < n1 + # buf, n2 ≤ n1 + # buf ⊦ (mkempbuf(n0 + n1) + buf)[n0 + n] = (mkempbuf(n1) + buf)[n]
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)% ⊦ # subarray(buf, m, n) = n; (s)