| buf[m1] = empty, datasize(copy(buf0, 0, buf, m, n), m1) < (buf[m1] = empty ⊃ datasize(buf, m1);m1 + 1), m1 < # buf, n ≤ # buf0, m + n ≤ # buf, datasize(buf, # buf) ≤ m, ∀ buf1, buf2, m0, n0. ¬ datasize(copy(buf1, 0, buf2, m0, n0), m1) < datasize(buf2, m1) ∨ ¬ datasize(buf2, # buf2) ≤ m0 ∨ ¬ m0 + n0 ≤ # buf2 ∨ ¬ n0 ≤ # buf1 ∨ ¬ m1 ≤ # buf2, m1 < m ∨ m + n ≤ m1 ⊦ |
buf[m1] = empty, datasize(copy(buf0, 0, buf, m, n), m1) < datasize(buf, m1), m1 < # buf, n ≤ # buf0, m + n ≤ # buf, datasize(buf, # buf) ≤ m, ∀ buf1, buf2, m0, n0. ¬ datasize(copy(buf1, 0, buf2, m0, n0), m1) < datasize(buf2, m1) ∨ ¬ datasize(buf2, # buf2) ≤ m0 ∨ ¬ m0 + n0 ≤ # buf2 ∨ ¬ n0 ≤ # buf1 ∨ ¬ m1 ≤ # buf2, m1 < m ∨ m + n ≤ m1 ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic