| # buf0 = # buf1, datasize(buf0, m) < datasize(buf1, m), range=(buf0, 0, buf1, 0, datasize(buf1)), m ≤ # buf0 ⊦ |
⊦ datasize(buf) = datasize(buf, # buf)
# buf0 = # buf1, datasize(buf0, m) < datasize(buf1, m), range=(buf0, 0, buf1, 0, datasize(buf1, # buf1)), m ≤ # buf1 ⊦
Used simplifier rules: datasize: ⊦ datasize(buf) = datasize(buf, # buf);% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic