| # buf1 = (y + a ').flashsize, abs-nodes(buf0, 0, x, lax, false), ∃ buf3, buf2. buf1 = buf3 + buf2 ∧ abs-nodes(buf3, # buf0, y, lax1, false) ∧ abs-node(buf2, a) ∧ ladr = @(# buf3 + # buf0, a.flashsize) ⊦ abs-nodes((buf0 + buf1).align↓, 0, x + y + a ', lax + lax1 + ladr ', boolvar) ↔ is-aligned(# buf0 + # buf1, EB_PAGE_SIZE) |
# buf = a.alignedsize + 2 * NODE_HEADER_SIZE, # buf2 + # buf = (y + a ').flashsize, abs-node(buf, a), abs-nodes(buf0, 0, x, lax, false), abs-nodes(buf2, # buf0, y, lax1, false) ⊦ abs-nodes((buf0 + buf2 + buf).align↓, 0, x + y + a ', lax + lax1 + @(# buf2 + # buf0, # buf) ', boolvar) ↔ is-aligned(# buf0 + # buf2 + # buf, EB_PAGE_SIZE)
Used simplifier rules: ls-abs-node-buf-size: ⊦ abs-node(buf, nd) → # buf = nd.alignedsize + 2 * NODE_HEADER_SIZE;%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ nd.flashsize = 2 * NODE_HEADER_SIZE + nd.alignedsize; (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ #(buf + buf0) = # buf + # buf0; (s)