| # buf1 = nd.alignedsize + 2 * NODE_HEADER_SIZE, nd ' + x = nd0 ' + x2, @(m, # buf1) ' + lax2 = @(m0, m1) ' + lax3, abs-node(buf1, nd), abs-nodes(buf0, m + # buf1, x, lax2, false), ∀ buf2, m, x0, lax0, x1, lax1, boolvar1. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x0, lax0, false) → (abs-nodes(buf2, m, x1, lax1, boolvar1) ↔ x0 = x1 ∧ lax0 = lax1) ⊦ m0 = m ∧ m1 = # buf1 ∧ nd = nd0 ∧ abs-nodes(buf0, m + # buf1, x2, lax3, boolvar1) |
# buf1 = nd.alignedsize + 2 * NODE_HEADER_SIZE, abs-node(buf1, nd), abs-nodes(buf0, m + # buf1, x2, lax3, false), ∀ buf2, m, x0, lax0, x1, lax1, boolvar1. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, x0, lax0, false) → (abs-nodes(buf2, m, x1, lax1, boolvar1) ↔ x0 = x1 ∧ lax0 = lax1) ⊦ abs-nodes(buf0, m + # buf1, x2, lax3, boolvar1)
Used simplifier rules: ⊦ @(m, m0) = @(m1, m2) ↔ m = m1 ∧ m0 = m2; (ws)%a: ⊦ (x + y) + z = x + y + z; from specification list% ⊦ a ' + x = b ' + y ↔ a = b ∧ x = y; (ws)%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ ladr ' + lax = ladr0 ' + lax0 ↔ ladr = ladr0 ∧ lax = lax0; (ws)