| # buf1 = NODE_HEADER_SIZE, is-aligned(n, NODE_HEADER_SIZE), is-aligned(# buf0, NODE_HEADER_SIZE), n ≤ NODE_HEADER_SIZE + # buf0, # buf1 ≤ n, n ≤ # buf1 + # buf0, is-garbage-header(buf1) ∨ is-encoded(nodeheader(m0, boolvar), buf1) ∧ # buf0 ≤ align↑(m0, 2 * NODE_HEADER_SIZE), ∀ buf2, m, x, lax, n. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf2 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf2, 0, n), m, x0, lax0, true)) ⊦ n = 0, ∃ buf3, buf2. buf1 + subarray(buf0, 0, n - # buf1) = buf3 + buf2 ∧ # buf3 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf3) ∨ (∃ ndhd. is-encoded(ndhd, buf3) ∧ # buf2 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))), ∃ buf3, buf2. buf1 + subarray(buf0, 0, n - # buf1) = buf3 + buf2 ∧ abs-padding(buf3) ∧ abs-nodes(buf2, m + # buf3, [], [], true) |
# buf1 = NODE_HEADER_SIZE, is-aligned(n, NODE_HEADER_SIZE), is-aligned(# buf0, NODE_HEADER_SIZE), n ≤ NODE_HEADER_SIZE + # buf0, is-garbage-header(buf1) ∨ is-encoded(nodeheader(m0, boolvar), buf1) ∧ # buf0 ≤ align↑(m0, 2 * NODE_HEADER_SIZE), ∀ buf2, m, x, lax, n. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf2 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf2, 0, n), m, x0, lax0, true)) ⊦ n = 0, ∃ buf3, buf2. buf1 + subarray(buf0, 0, n - NODE_HEADER_SIZE) = buf3 + buf2 ∧ # buf3 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf3) ∨ (∃ ndhd. is-encoded(ndhd, buf3) ∧ # buf2 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))), ∃ buf3, buf2. buf1 + subarray(buf0, 0, n - NODE_HEADER_SIZE) = buf3 + buf2 ∧ abs-padding(buf3) ∧ abs-nodes(buf2, m + # buf3, [], [], true)
Used simplifier rules: m ≠ 0 ⊦ is-aligned(n, m) → (m ≤ n ↔ n ≠ 0); (s)% ⊦ NODE_HEADER_SIZE ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat