| ⟨decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟩ (lp = lp0 ∧ m = m0 ∧ err = err0), ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # buf = lptsize(n1 + n0, LEB_SIZE), # lpt1 = n1 + n0, # lpt2 = n1 + n0, lp = lpt1[n0], n0 < # lpt1, is-encoded(lpt1, buf, n0), err0 = ESUCCESS → is-encoded(lp0, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m0)) ∧ n0 * ENCODED_LPROPS_SIZE + m0 ≤ # buf ∧ m0 = encoding-size(lp0), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ ⟪n := n0 + 1⟫ ( n ≤ # lpt1[n0, lp0] ∧ # buf = lptsize(# lpt1[n0, lp0], LEB_SIZE) ∧ # lpt1[n0, lp0] = # lpt2 ∧ (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → is-encoded(lpt1[n0, lp0], buf, n)) ∧ # lpt1[n0, lp0] < n1 + n), n1 = 0 |
⟨decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟩ (lp = lp0 ∧ m = m0 ∧ err = err0), ⟪decode_lprops#(n0 * ENCODED_LPROPS_SIZE, buf; lp, m; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → is-encoded(lp, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m)) ∧ n0 * ENCODED_LPROPS_SIZE + m ≤ # buf ∧ m = encoding-size(lp))), # lpt2 = n1 + n0, # lpt1 = n1 + n0, # buf = lptsize(n1 + n0, LEB_SIZE), lp = lpt1[n0], n0 < # lpt1, is-encoded(lpt1, buf, n0), err0 = ESUCCESS → is-encoded(lp0, subarray(buf, n0 * ENCODED_LPROPS_SIZE, m0)) ∧ n0 * ENCODED_LPROPS_SIZE + m0 ≤ # buf ∧ m0 = encoding-size(lp0), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ n1 = 0, n0 + 1 ≤ # lpt1[n0, lp0] ∧ # buf = lptsize(# lpt1[n0, lp0], LEB_SIZE) ∧ # lpt1[n0, lp0] = # lpt2 ∧ (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → is-encoded(lpt1[n0, lp0], buf, n0 + 1)) ∧ # lpt1[n0, lp0] < n1 + n0 + 1