| # buf = nd.alignedsize, # buf2 = NODE_HEADER_SIZE, n < 2 * NODE_HEADER_SIZE + nd.alignedsize, abs-nodes(buf0, 2 * NODE_HEADER_SIZE + m + nd.alignedsize, x1, lax1, true), is-aligned(n, NODE_HEADER_SIZE), is-encoded(nodeheader(node-size-headerless(nd), false), buf2), is-encoded(nd, subarray(buf, 0, node-size-headerless(nd))), n ≤ 2 * NODE_HEADER_SIZE + nd.alignedsize + # buf0, ∀ buf3, m, x, lax, n. # buf3 < #((buf2 + buf + validtrailer) + buf0) → abs-nodes(buf3, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf3 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf3, 0, n), m, x0, lax0, true)) ⊦ n = 0, abs-failed(subarray((buf2 + buf + validtrailer) + buf0, 0, n)), ∃ buf3, buf1. subarray((buf2 + buf + validtrailer) + buf0, 0, n) = buf3 + buf1 ∧ abs-padding(buf3) ∧ abs-nodes(buf1, m + # buf3, [], [], true) |
# buf2 = NODE_HEADER_SIZE, # buf = nd.alignedsize, n < 2 * NODE_HEADER_SIZE + nd.alignedsize, abs-nodes(buf0, 2 * NODE_HEADER_SIZE + m + nd.alignedsize, x1, lax1, true), is-aligned(n, NODE_HEADER_SIZE), is-encoded(nd, subarray(buf, 0, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), buf2), n ≤ 2 * NODE_HEADER_SIZE + nd.alignedsize + # buf0, ∀ buf3, m, x, lax, n. # buf3 < #((buf2 + buf + validtrailer) + buf0) → abs-nodes(buf3, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf3 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf3, 0, n), m, x0, lax0, true)) ⊦ n = 0, abs-failed(subarray((buf2 + buf + validtrailer) + buf0, 0, n))