| # x = # lax, (lax + @(m, a.flashsize) ')[n] = @(m0, m1), n < # x, n ≤ # lax, ∀ n. n < # lax → lax[n].size = x[n].flashsize ⊦ m1 = (x + a ')[n].flashsize |
# x = # lax, lax[n] = @(m0, m1), n < # lax, ∀ n. n < # lax → lax[n].size = x[n].flashsize ⊦ lax = [], m1 = x[n].flashsize
Used simplifier rules: ⊦ m < n → m ≤ n; (s)% ⊦ # lax = 0 ↔ lax = []; (s)%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ n < # lax → (lax + ladr ')[n] = lax[n]; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ n < # x → (x + a ')[n] = x[n]; (s)