| # buf2 = nd.alignedsize + 2 * NODE_HEADER_SIZE, ladr = @(m + # buf0, # buf2), lax1 = ladr + lax2, abs-node(buf2, nd), abs-nodes(buf2 + buf, m + # buf0, [], [], true), abs-nodes(buf, (m + # buf0) + # buf2, x2, lax2, true), abs-padding(buf0), ∀ buf3, m, x0, lax0, x1, lax1. # buf3 < #(buf0 + buf2 + buf) → abs-nodes(buf3, m, x0, lax0, true) ∧ abs-nodes(buf3, m, x1, lax1, true) → x0 = x1 ∧ lax0 = lax1 ⊦ lax1 = [] |
# buf2 = nd.alignedsize + 2 * NODE_HEADER_SIZE, abs-node(buf2, nd), abs-nodes(buf, (m + # buf0) + # buf2, x2, lax2, true), abs-nodes(buf2 + buf, m + # buf0, [], [], true), abs-padding(buf0), ∀ buf3, m, x0, lax0, x1, lax1. # buf3 < #(buf0 + buf2 + buf) → abs-nodes(buf3, m, x0, lax0, true) ∧ abs-nodes(buf3, m, x1, lax1, true) → x0 = x1 ∧ lax0 = lax1 ⊦
Used simplifier rules: a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ ladr ' + lax ≠ []; (s)% ⊦ ladr + lax = ladr ' + lax; (s)