m0 ≤ # buf ⊦ datasize(buf, m0) < m ↔ ¬(∃ n. m ≤ n + 1 ∧ n < m0 ∧ buf[n] ≠ empty), m = 0
Used simplifier rules: ⊦ n ≥ m ↔ m ≤ n; (s)