| # buf1 = nd.alignedsize + 2 * NODE_HEADER_SIZE, # buf0 = x0.flashsize, abs-node(buf1, nd), abs-nodes(buf0, m0 + # buf1, x0, [], false), ∀ buf2, x, n, m, lax. # buf2 < #(buf1 + buf0) → # buf2 = x.flashsize ∧ n < x.flashsize ∧ abs-nodes(buf2, m, x, lax, false) ∧ is-aligned(n, NODE_HEADER_SIZE) → n = 0 ∨ x = [] ∨ (∃ n0. n0 < # lax ∧ abs-nodes(subarray(buf2, 0, n), m, prefixn(n0, x), prefixn(n0, lax), true)) ⊦ buf1 + buf0 = mkbuf(0), buf1 = mkbuf(0), ∀ a, y. x0 ≠ a ' + y |
# buf1 = nd.alignedsize + 2 * NODE_HEADER_SIZE, # buf0 = (2 * NODE_HEADER_SIZE + a.alignedsize) + y.flashsize, abs-node(buf1, nd), abs-nodes(buf0, m0 + # buf1, a ' + y, [], false), ∀ buf2, x, n, m, lax. # buf2 < #(buf1 + buf0) → # buf2 = x.flashsize ∧ n < x.flashsize ∧ abs-nodes(buf2, m, x, lax, false) ∧ is-aligned(n, NODE_HEADER_SIZE) → n = 0 ∨ x = [] ∨ (∃ n0. n0 < # lax ∧ abs-nodes(subarray(buf2, 0, n), m, prefixn(n0, x), prefixn(n0, lax), true)) ⊦ buf1 + buf0 = mkbuf(0), buf1 = mkbuf(0)
Used simplifier rules: size-rec: ⊦ (a ' + x).flashsize = a.flashsize + x.flashsize;%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ nd.flashsize = 2 * NODE_HEADER_SIZE + nd.alignedsize; (s)