| # buf2 = nd.alignedsize + 2 * NODE_HEADER_SIZE, (buf2 + buf) + buf1 = buf3 + buf0, lax1.head = @(m0, m1), abs-node(buf2, nd), abs-nodes(buf, m + # buf2, x, lax2, boolvar0), abs-nodes(buf0, m + # buf3, nd0 ' + x2, lax1, boolvar1), abs-padding(buf3), ∀ buf3, buf1, m, x1, lax1, boolvar1, x0, lax0, boolvar0. # buf3 < #(buf2 + buf) → abs-nodes(buf3 + buf1, m, x1, lax1, boolvar1) ∧ abs-nodes(buf3, m, x0, lax0, boolvar0) → x0 ⊑ x1 ∧ lax0 ⊑ lax1 ⊦ nd ' + x ⊑ nd0 ' + x2 ∧ @(m, # buf2) ' + lax2 ⊑ lax1 |
# buf2 = nd.alignedsize + 2 * NODE_HEADER_SIZE, (buf2 + buf) + buf1 = buf3 + buf0, abs-node(buf2, nd), abs-nodes(buf, m + # buf2, x, lax2, boolvar0), abs-nodes(buf0, m + # buf3, nd0 ' + x2, @(m0, m1) ' + lax, boolvar1), abs-padding(buf3), ∀ buf3, buf1, m, x1, lax1, boolvar1, x0, lax0, boolvar0. # buf3 < #(buf2 + buf) → abs-nodes(buf3 + buf1, m, x1, lax1, boolvar1) ∧ abs-nodes(buf3, m, x0, lax0, boolvar0) → x0 ⊑ x1 ∧ lax0 ⊑ lax1 ⊦ nd ' + x ⊑ nd0 ' + x2 ∧ @(m, # buf2) ' + lax2 ⊑ @(m0, m1) ' + lax
Used simplifier rules: abs-nodes-first-adr-explicit: ⊦ abs-nodes(buf, m, a ' + x, lax, weak) → (lax.head = ladr ↔ (∃ lax0. lax = ladr + lax0));% ⊦ ladr ∈ ladr0 ' + lax ↔ ladr = ladr0 ∨ ladr ∈ lax; (s)%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]%in-14: ⊦ ladr ' + lax = lax0 → ladr ∈ lax0; (forward) from specification list[laddress-list]% ⊦ ladr + lax = ladr ' + lax; (s)%a: ⊦ (x + y) + z = x + y + z; from specification list