| # buf0 = # buf1, # buf1 = align↑(# lpt * ENCODED_LPROPS_SIZE, LEB_SIZE), subarray(buf0, 0, n * ENCODED_LPROPS_SIZE) = subarray(buf1, 0, n * ENCODED_LPROPS_SIZE), m < # lpt, n < # lpt, is-encoded(lpt[n], subarray(buf1, n * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), is-encoded(lpt[m], subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), m ≤ n, n * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf1 ⊦ is-encoded(lpt[m], subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), # subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE) = # subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE) ∧ (∀ n. n < # subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE) → subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)[n] = subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)[n]) |
# buf0 = # buf1, # buf1 = align↑(# lpt * ENCODED_LPROPS_SIZE, LEB_SIZE), subarray(buf0, 0, n * ENCODED_LPROPS_SIZE) = subarray(buf1, 0, n * ENCODED_LPROPS_SIZE), n0 < ENCODED_LPROPS_SIZE, m < # lpt, n < # lpt, is-encoded(lpt[n], subarray(buf1, n * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), is-encoded(lpt[m], subarray(buf0, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE)), m ≤ n, n * ENCODED_LPROPS_SIZE + ENCODED_LPROPS_SIZE ≤ # buf1 ⊦ buf1[m * ENCODED_LPROPS_SIZE + n0] = buf0[m * ENCODED_LPROPS_SIZE + n0], is-encoded(lpt[m], subarray(buf1, m * ENCODED_LPROPS_SIZE, ENCODED_LPROPS_SIZE))
Used simplifier rules: ⊦ ENCODED_LPROPS_SIZE ≠ 0; (s)%is-encoded-size: ⊦ is-encoded(lp, buf) → # buf = ENCODED_LPROPS_SIZE; (forward) from specification encoding-fixed-size[encoding-lprops]%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ n0 < n → subarray(buf, m, n)[n0] = buf[m + n0]; (s)% ⊦ # subarray(buf, m, n) = n; (s)