| ⟪lp := lpt1[n0]; decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # buf = lptsize(n1 + n0, LEB_SIZE), # lpt1 = n1 + n0, # lpt2 = n1 + n0, is-encoded(lpt1, buf, n0) ⊦ ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lpt1[n0], m; err); n := n0 + 1⟫ ( n ≤ # lpt1 ∧ # buf = lptsize(# lpt1, LEB_SIZE) ∧ # lpt1 = # lpt2 ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lpt1, buf, n)) ∧ # lpt1 < n1 + n), n1 = 0 |
⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # lpt2 = n1 + n0, # lpt1 = n1 + n0, # buf = lptsize(n1 + n0, LEB_SIZE), lp = lpt1[n0], n0 < # lpt1, is-encoded(lpt1, buf, n0) ⊦ ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lpt1[n0], m; err); n := n0 + 1⟫ ( n ≤ # lpt1 ∧ # buf = lptsize(# lpt1, LEB_SIZE) ∧ # lpt1 = # lpt2 ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lpt1, buf, n)) ∧ # lpt1 < n1 + n), n1 = 0