| m0 < # buf0, ∀ buf0, buf1. m0 ≤ # buf0 → datasize(buf0 + buf1, m0) = datasize(buf0, m0) ⊦ (buf0[m0] = empty ⊃ datasize(buf0 + buf1, m0);m0 + 1) = (buf0[m0] = empty ⊃ datasize(buf0, m0);m0 + 1) |
buf0[m0] = empty, m0 < # buf0, ∀ buf0, buf1. m0 ≤ # buf0 → datasize(buf0 + buf1, m0) = datasize(buf0, m0) ⊦ (buf0[m0] = empty ⊃ datasize(buf0 + buf1, m0);m0 + 1) = (buf0[m0] = empty ⊃ datasize(buf0, m0);m0 + 1)
Used simplifier rules: ⊦ m + n = m + n0 ↔ n = n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic Used formulas: buf0[m0] = empty