| # buf = (a ' + x).flashsize ⊦ abs-nodes(buf, m, a ' + x, lax, false) ↔ (∃ buf0, buf1. buf = buf0 + buf1 ∧ lax ≠ [] ∧ lax.head.off = m ∧ lax.head.size = # buf0 ∧ abs-node(buf0, a) ∧ abs-nodes(buf1, m + # buf0, x, lax.tail, false)) |
# buf = (2 * NODE_HEADER_SIZE + a.alignedsize) + x.flashsize ⊦ abs-nodes(buf, m, a ' + x, lax, false) ↔ (∃ buf0, buf1. buf = buf0 + buf1 ∧ lax ≠ [] ∧ lax.head.off = m ∧ lax.head.size = # buf0 ∧ abs-node(buf0, a) ∧ abs-nodes(buf1, lax.head.off + # buf0, x, lax.tail, false))
Used simplifier rules: size-rec: ⊦ (a ' + x).flashsize = a.flashsize + x.flashsize;%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ nd.flashsize = 2 * NODE_HEADER_SIZE + nd.alignedsize; (s)