| ∃ buf0, buf1. buf = buf0 + buf1 ∧ ( abs-padding(buf0) ∧ abs-nodes(buf1, m + # buf0, nd ' + x0, lax, weak) ∨ lax ≠ [] ∧ lax.head.off = m ∧ lax.head.size = # buf0 ∧ abs-node(buf0, nd) ∧ abs-nodes(buf1, m + # buf0, x0, lax.tail, weak)), ∀ buf0, m, x, lax, weak. # buf0 < # buf → abs-nodes(buf0, m, x, lax, weak) → is-aligned(# buf0, NODE_HEADER_SIZE) ⊦ is-aligned(# buf, NODE_HEADER_SIZE) |
abs-padding(buf1) ∧ abs-nodes(buf0, m + # buf1, nd ' + x0, lax, weak) ∨ lax ≠ [] ∧ lax.head.off = m ∧ lax.head.size = # buf1 ∧ abs-node(buf1, nd) ∧ abs-nodes(buf0, lax.head.off + # buf1, x0, lax.tail, weak), ∀ buf2, m, x, lax, weak. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x, lax, weak) → is-aligned(# buf2, NODE_HEADER_SIZE) ⊦ is-aligned(# buf1 + # buf0, NODE_HEADER_SIZE)
Used simplifier rules: append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ #(buf + buf0) = # buf + # buf0; (s)