| buf0 + buf1 = buf2 + buf3, is-encoded(a, buf0) ⊦ is-encoded(b, buf2) ↔ # buf0 = # buf2 ∧ a = b |
buf0 + buf1 = buf2 + buf3, is-encoded(a, buf0), # buf0 ≤ # buf2 ⊦ is-encoded(b, buf2) ↔ # buf0 = # buf2 ∧ a = b
buf0 + buf1 = buf2 + buf3, is-encoded(a, buf0) ⊦ is-encoded(b, buf2) ↔ # buf0 = # buf2 ∧ a = b, # buf0 ≤ # buf2
Used formulas: # buf0 ≤ # buf2