| # buf1 = a.alignedsize + 2 * NODE_HEADER_SIZE, n0 < # buf2 + # buf1, abs-node(buf1, a), abs-nodes(buf2, m + # buf, [], [], false), abs-nodes(subarray(buf2 + buf1, 0, n0), m + # buf, a ', @(m + # buf + # buf2, # buf1) ', boolvar), abs-padding(buf), is-aligned(n0 + # buf, NODE_HEADER_SIZE), is-aligned(m, NODE_HEADER_SIZE), ∀ buf3, buf1, a, n, m, x, lax, boolvar. # buf3 < #(buf + buf2) → # buf1 = a.alignedsize + 2 * NODE_HEADER_SIZE ∧ n < # buf3 + # buf1 ∧ abs-node(buf1, a) ∧ abs-nodes(subarray(buf3 + buf1, 0, n), m, x + a ', lax + @(m + # buf3, # buf1) ', boolvar) ∧ abs-nodes(buf3, m, x, lax, false) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ is-aligned(m, NODE_HEADER_SIZE) → n = # buf3 + # buf1 ⊦ n0 = # buf2 + # buf1, is-aligned(n0, NODE_HEADER_SIZE) ∧ is-aligned(# buf, NODE_HEADER_SIZE) |
⊦ abs-padding(buf) ↔ (∃ buf0, buf1. buf = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(# buf1, true), buf0) ∧ is-aligned(# buf1, 2 * NODE_HEADER_SIZE))
Used simplifier rules: ⊦ #(buf + buf0) = # buf + # buf0; (s)% ⊦ # validtrailer = NODE_HEADER_SIZE; (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ NODE_HEADER_SIZE ≠ 0; (s)%n ≠ 0 ⊦ is-aligned(n, n); (s)%m ≠ 0, is-aligned(n1, m) ⊦ is-aligned(n0 + n1, m) ↔ is-aligned(n0, m); (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult%m ≠ 0, n0 ≠ 0 ⊦ is-aligned(n, n0 * m) → is-aligned(n, m); (ss)%c: ⊦ m + n = n + m; from specification nat-basic%lfw-is-encoded-nodeheader-size: ⊦ is-encoded(ndhd, buf) → # buf = NODE_HEADER_SIZE; (forward) from specification abs-node% ⊦ m + m = 2 * m; (s) Used terms: buf