| # buf1 = NODE_HEADER_SIZE, buf1 + buf0 + validtrailer = buf2 + buf, abs-nodes(buf, m + # buf2, nd ' + x0, @(m0, m1) ' + lax0, weak), is-aligned(# buf0, 2 * NODE_HEADER_SIZE), is-encoded(nodeheader(# buf0, true), buf1), ∃ buf0, buf1. buf2 = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(# buf1, true), buf0) ∧ is-aligned(# buf1, 2 * NODE_HEADER_SIZE) ⊦ |
# buf1 = NODE_HEADER_SIZE, # buf4 = NODE_HEADER_SIZE, buf1 + buf0 + validtrailer = (buf4 + buf3 + validtrailer) + buf, abs-nodes(buf, 2 * NODE_HEADER_SIZE + m + # buf3, nd ' + x0, @(m0, m1) ' + lax0, weak), is-aligned(# buf3, 2 * NODE_HEADER_SIZE), is-aligned(# buf0, 2 * NODE_HEADER_SIZE), is-encoded(nodeheader(# buf3, true), buf4), is-encoded(nodeheader(# buf0, true), buf1) ⊦
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + m = 2 * m; (s)%lfw-is-encoded-nodeheader-size: ⊦ is-encoded(ndhd, buf) → # buf = NODE_HEADER_SIZE; (forward) from specification abs-node%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ # validtrailer = NODE_HEADER_SIZE; (s)% ⊦ #(buf + buf0) = # buf + # buf0; (s)