| # buf = (2 * NODE_HEADER_SIZE + a.alignedsize) + x.flashsize, ladr = @(m0, m1), lax = ladr + lax0 ⊦ abs-nodes(buf, m, a ' + x, lax, false) ↔ (∃ buf0, buf1. buf = buf0 + buf1 ∧ lax ≠ [] ∧ m0 = m ∧ m1 = # buf0 ∧ abs-node(buf0, a) ∧ abs-nodes(buf1, m + # buf0, x, lax0, false)), lax = [] |
# buf = (2 * NODE_HEADER_SIZE + a.alignedsize) + x.flashsize ⊦ abs-nodes(buf, m, a ' + x, @(m0, m1) ' + lax0, false) ↔ (∃ buf0, buf1. buf = buf0 + buf1 ∧ m0 = m ∧ m1 = # buf0 ∧ abs-node(buf0, a) ∧ abs-nodes(buf1, m + # buf0, x, lax0, false))
Used simplifier rules: a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ ladr ' + lax ≠ []; (s)% ⊦ ladr + lax = ladr ' + lax; (s)