| str0 = "persistence: decode_node no validtrailer", is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf, n, NODE_HEADER_SIZE)), is-encoded(nd, subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd))), n + NODE_HEADER_SIZE ≤ # buf, n + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + 2 * NODE_HEADER_SIZE ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf ⊦ ∀ . true → ⟪err := EIO⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → (∃ buf0, buf1. subarray(buf, n, 2 * NODE_HEADER_SIZE + nd.alignedsize) = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf0) ∧ is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ∧ # buf1 = nd.alignedsize) ∧ align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) = nd.alignedsize)), range=(buf, n + NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), validtrailer, 0, NODE_HEADER_SIZE) |
is-encoded(nd, subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf, n, NODE_HEADER_SIZE)), (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, n + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + 2 * NODE_HEADER_SIZE ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, ¬ range=(buf, n + NODE_HEADER_SIZE + align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), validtrailer, 0, NODE_HEADER_SIZE) ⊦ ⟪err := EIO⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ( err = ESUCCESS → (∃ buf0, buf1. subarray(buf, n, 2 * NODE_HEADER_SIZE + nd.alignedsize) = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf0) ∧ is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ∧ # buf1 = nd.alignedsize) ∧ align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) = nd.alignedsize))