| abs-nodes(buf1, m + # buf0, [], [], weak), abs-padding(buf0), is-aligned(# buf1, NODE_HEADER_SIZE), ∀ buf2, m, x, lax, weak. # buf2 < #(buf0 + buf1) → abs-nodes(buf2, m, x, lax, weak) → is-aligned(# buf2, NODE_HEADER_SIZE) ⊦ is-aligned(# buf0 + # buf1, NODE_HEADER_SIZE) |
abs-nodes(buf1, m + # buf0, [], [], weak), abs-padding(buf0), is-aligned(# buf1, NODE_HEADER_SIZE), ∀ buf2, m, x, lax, weak. # buf2 < #(buf0 + buf1) → abs-nodes(buf2, m, x, lax, weak) → is-aligned(# buf2, NODE_HEADER_SIZE) ⊦ is-aligned(# buf0, NODE_HEADER_SIZE)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%m ≠ 0, is-aligned(n1, m) ⊦ is-aligned(n0 + n1, m) ↔ is-aligned(n0, m); (s)% ⊦ NODE_HEADER_SIZE ≠ 0; (s)