| # buf0 = NODE_HEADER_SIZE, # buf1 = nd.alignedsize, n0 < NODE_HEADER_SIZE + nd.alignedsize, is-aligned(n0, NODE_HEADER_SIZE), is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), buf0) ⊦ ∃ buf2, buf3. buf0 + subarray(buf1 + validtrailer, 0, n0) = buf2 + buf3 ∧ # buf2 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf2) ∨ (∃ ndhd. is-encoded(ndhd, buf2) ∧ # buf3 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))) |
⊦ # buf ≤ m ∧ m ≤ # buf + # buf0 → subarray(buf + buf0, 0, m) = buf + subarray(buf0, 0, m - # buf)
# buf1 = nd.alignedsize, # buf0 = NODE_HEADER_SIZE, n0 < NODE_HEADER_SIZE + nd.alignedsize, is-aligned(n0, NODE_HEADER_SIZE), is-encoded(nodeheader(node-size-headerless(nd), false), buf0), is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ⊦ ∃ buf2, buf3. buf0 + subarray(buf1 + validtrailer, 0, n0) = buf2 + buf3 ∧ # buf2 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf2) ∨ (∃ ndhd. is-encoded(ndhd, buf2) ∧ # buf3 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE))), # buf1 ≤ n0 ∧ n0 ≤ # buf1 + # validtrailer
# buf1 = nd.alignedsize, # buf0 = NODE_HEADER_SIZE, n0 < NODE_HEADER_SIZE + nd.alignedsize, is-aligned(n0, NODE_HEADER_SIZE), is-encoded(nodeheader(node-size-headerless(nd), false), buf0), is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))), # buf1 ≤ n0, n0 ≤ # buf1 + # validtrailer ⊦ ∃ buf2, buf3. buf0 + buf1 + subarray(validtrailer, 0, n0 - # buf1) = buf2 + buf3 ∧ # buf2 = NODE_HEADER_SIZE ∧ (is-garbage-header(buf2) ∨ (∃ ndhd. is-encoded(ndhd, buf2) ∧ # buf3 ≤ align↑(ndhd.size, 2 * NODE_HEADER_SIZE)))
Used terms: n0, validtrailer, buf1