| m0 + 1 = n0 + # buf0, (buf0 + buf1)[m0] = empty, datasize(buf1, n0) = 0, m0 < # buf0 + # buf1, # buf0 ≤ m0 + 1, n0 ≤ # buf1, ∀ buf0, buf1. m0 ≤ # buf0 + # buf1 ∧ (# buf0 ≤ m0 → datasize(buf1, m0 - # buf0) = 0) → datasize(buf0 + buf1, m0) = datasize(buf0, min(m0, # buf0)) ⊦ datasize(buf0 + buf1, m0) = datasize(buf0, # buf0) |
m0 + 1 = n0 + # buf0, (buf0 + buf1)[m0] = empty, datasize(buf1, n0) = 0, m0 < # buf0 + # buf1, n0 ≤ # buf1, # buf0 ≤ m0 + 1, m0 ≤ # buf0 + # buf1 ∧ (# buf0 ≤ m0 → datasize(buf1, m0 - # buf0) = 0) → datasize(buf0 + buf1, m0) = datasize(buf0, min(m0, # buf0)) ⊦ datasize(buf0 + buf1, m0) = datasize(buf0, # buf0)
Used terms: buf0, buf1