| buf[m0] = empty, n < # buf, m0 < # buf, datasize(buf, m0) < # buf, datasize(buf, m0) ≤ n, n ≤ m0, datasize(buf, m0) ≤ m0 ⊦ buf[n] = empty, n < m0 ∧ datasize(buf, m0) < m0 |
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ n → (n ≤ m ↔ m = n); (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat