| lax.head = @(m0, m1), # buf1 + # buf0 < (2 * NODE_HEADER_SIZE + nd.alignedsize) + x0.flashsize, abs-padding(buf1) ∧ abs-nodes(buf0, m + # buf1, nd ' + x0, lax, false) ∨ lax ≠ [] ∧ m0 = m ∧ m1 = # buf1 ∧ abs-node(buf1, nd) ∧ abs-nodes(buf0, m0 + # buf1, x0, lax.tail, false), ∀ buf2, x, m, lax. # buf2 < #(buf1 + buf0) → # buf2 < x.flashsize ∧ abs-nodes(buf2, m, x, lax, false) → x = [] ⊦ |
lax.head = @(m0, m1), # buf1 + # buf0 < (2 * NODE_HEADER_SIZE + nd.alignedsize) + x0.flashsize, abs-padding(buf1) ∧ abs-nodes(buf0, m + # buf1, nd ' + x0, lax, false) ∨ lax ≠ [] ∧ m0 = m ∧ m1 = # buf1 ∧ abs-node(buf1, nd) ∧ abs-nodes(buf0, m + # buf1, x0, lax.tail, false), ∀ buf2, x, m, lax. # buf2 < #(buf1 + buf0) → # buf2 < x.flashsize ∧ abs-nodes(buf2, m, x, lax, false) → x = [] ⊦