| n < m, datasize(buf, m) ≤ n, m ≤ # buf ⊦ buf[n] = empty |
datasize(buf, m) < # buf, n < m, datasize(buf, m) < m, n < # buf, m ≤ # buf, datasize(buf, m) ≤ n ⊦ buf[n] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic