m0 ≤ # buf ⊦ m ≤ datasize(buf, m0) ↔ (∃ n. m ≤ n + 1 ∧ n < m0 ∧ buf[n] ≠ empty), m = 0
Used simplifier rules: ⊦ n ≥ m ↔ m ≤ n; (s)