| # buf2 = (n4 + n2) + n3, LEB_SIZE = n0 + n1, avols[default-volid][m2] = mapped(buf0, n1), n < # buf2, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, n3 ≤ # buf2, n1 ≤ LEB_SIZE, n3 + n2 ≤ # buf2, m1 + n2 ≤ LEB_SIZE, n2 + n3 ≤ # buf2 ⊦ buf0[n + m1 - n3] = (n < n3 ⊃ buf2[n];(n < n2 + n3 ⊃ subarray(subarray(buf0, 0, n1) + mkempbuf(n0), m1, n2)[n - n3];subarray(buf2, n3 + n2, n4)[n - n3 - n2])), n < n3, n3 + n2 ≤ n |
# buf2 = (n4 + n2) + n3, LEB_SIZE = n0 + n1, avols[default-volid][m2] = mapped(buf0, n1), m2 < # avols[default-volid], n < n3 + n2, n < # buf2, n3 < # buf2, ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, n2 + n3 ≤ # buf2, m1 + n2 ≤ LEB_SIZE, n3 + n2 ≤ # buf2, n1 ≤ LEB_SIZE, n3 ≤ n ⊦ n4 + n2 = 0, buf0[(n - n3) + m1] = subarray(subarray(buf0, 0, n1) + mkempbuf(n0), m1, n2)[n - n3], n2 = 0
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m < n → m ≤ n; (s)% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n ≤ m → m + n0 - n = (m - n) + n0; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)