| persistence_io_decode_lpt#(BUF; LPT, ERR) {ERR := ESUCCESS; let N = 0 in while ERR = ESUCCESS ∧ N < # LPT do {/* (prepost-decode-lpt : invariant N ≤ # LPT ∧ # BUF = lptsize(# LPT, LEB_SIZE) ∧ # LPT = # LPT` ∧ (ERR = ESUCCESS ∨ ⌊ERR⌋ ) ∧ (ERR = ESUCCESS → is-encoded(LPT, BUF, N)) wfbound # LPT - N) */; let SIZE = ? in decode_lprops#(N * ENCODED_LPROPS_SIZE, BUF; LPT[N], SIZE; ERR); N := N + 1} } |