| ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # lpt2 = n1 + n0, # lpt1 = n1 + n0, # buf = lptsize(n1 + n0, LEB_SIZE), lp = lpt1[n0], n0 < # lpt1, is-encoded(lpt1, buf, n0) ⊦ ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lpt1[n0], m; err); n := n0 + 1⟫ ( n ≤ # lpt1 ∧ # buf = lptsize(# lpt1, LEB_SIZE) ∧ # lpt1 = # lpt2 ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lpt1, buf, n)) ∧ # lpt1 < n1 + n), n1 = 0 |
⟨decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟩ (lp = lp0 ∧ m = m0 ∧ err = err0), ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # buf = lptsize(n1 + n0, LEB_SIZE), # lpt1 = n1 + n0, # lpt2 = n1 + n0, lp = lpt1[n0], n0 < # lpt1, is-encoded(lpt1, buf, n0), err0 = ESUCCESS → is-encoded(lp0, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m0)) ∧ n0 * ENCODED_LPROPS_SIZE + m0 ≤ # buf ∧ m0 = encoding-size(lp0), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ ⟪n := n0 + 1⟫ ( n ≤ # lpt1[n0, lp0] ∧ # buf = lptsize(# lpt1[n0, lp0], LEB_SIZE) ∧ # lpt1[n0, lp0] = # lpt2 ∧ (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → is-encoded(lpt1[n0, lp0], buf, n)) ∧ # lpt1[n0, lp0] < n1 + n), n1 = 0