| # buf1 = NODE_HEADER_SIZE, is-aligned(n0, NODE_HEADER_SIZE), is-aligned(# buf0, NODE_HEADER_SIZE), is-encoded(nodeheader(m0, boolvar), buf1), n0 ≤ # buf0, # buf0 ≤ align↑(m0, 2 * NODE_HEADER_SIZE), ∀ buf2, m, x, lax, n. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf2 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf2, 0, n), m, x0, lax0, true)) ⊦ ∃ buf3, buf2. buf1 + subarray(buf0, 0, n0) = buf3 + buf2 ∧ abs-padding(buf3) ∧ abs-nodes(buf2, m + # buf3, [], [], true), ∃ buf3, buf2. buf1 + subarray(buf0, 0, n0) = buf3 + buf2 ∧ # buf3 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf3) ∨ (∃ ndhd. is-encoded(ndhd, buf3) ∧ # buf2 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))) |
# buf1 = NODE_HEADER_SIZE, is-aligned(# buf0, NODE_HEADER_SIZE), is-aligned(n0, NODE_HEADER_SIZE), is-encoded(nodeheader(m0, boolvar), buf1), # buf0 ≤ align↑(m0, 2 * NODE_HEADER_SIZE), n0 ≤ # buf0, n0 ≤ align↑(m0, 2 * NODE_HEADER_SIZE), ∀ buf2, m, x, lax, n. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x, lax, true) ∧ is-aligned(n, NODE_HEADER_SIZE) ∧ n ≤ # buf2 → (∃ x0, lax0. x0 ⊑ x ∧ lax0 ⊑ lax ∧ abs-nodes(subarray(buf2, 0, n), m, x0, lax0, true)) ⊦ ∃ buf3, buf2. buf1 + subarray(buf0, 0, n0) = buf3 + buf2 ∧ # buf3 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf3) ∨ (∃ ndhd. is-encoded(ndhd, buf3) ∧ # buf2 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))), ∃ buf3, buf2. buf1 + subarray(buf0, 0, n0) = buf3 + buf2 ∧ abs-padding(buf3) ∧ abs-nodes(buf2, m + # buf3, [], [], true)
Used simplifier rules: let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%lfw-is-encoded-nodeheader-size: ⊦ is-encoded(ndhd, buf) → # buf = NODE_HEADER_SIZE; (forward) from specification abs-node