| # buf2 = # buf, # buf0 = # buf, # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), subarray(buf2, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), # buf - (n + NODE_HEADER_SIZE) + node-size-headerless(nd)) = subarray(buf0, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), # buf - (n + NODE_HEADER_SIZE) + node-size-headerless(nd)), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf0, n + NODE_HEADER_SIZE, NODE_HEADER_SIZE + n0 + nd.alignedsize) = subarray(buf, n + NODE_HEADER_SIZE, NODE_HEADER_SIZE + n0 + nd.alignedsize), node-size-headerless(nd) < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), NODE_HEADER_SIZE + nd.alignedsize < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), NODE_HEADER_SIZE + n0 + nd.alignedsize < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), # buf < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + n + NODE_HEADER_SIZE, is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), is-encoded(nd, subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd))), (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf ⊦ |
# buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, # buf0 = # buf, # buf2 = # buf, # buf = n1 + (n + NODE_HEADER_SIZE) + node-size-headerless(nd), subarray(buf0, n + NODE_HEADER_SIZE, NODE_HEADER_SIZE + n0 + nd.alignedsize) = subarray(buf, n + NODE_HEADER_SIZE, NODE_HEADER_SIZE + n0 + nd.alignedsize), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf2, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), n1) = subarray(buf0, (n + NODE_HEADER_SIZE) + node-size-headerless(nd), n1), subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), # buf < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) + n + NODE_HEADER_SIZE, NODE_HEADER_SIZE + n0 + nd.alignedsize < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), NODE_HEADER_SIZE + nd.alignedsize < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), node-size-headerless(nd) < align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), is-encoded(nd, subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd))), is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf ⊦
Used simplifier rules: a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%n ≤ m ⊦ n0 = m - n ↔ m = n0 + n; (elim) Used terms: (n + NODE_HEADER_SIZE) + node-size-headerless(nd), # buf, n1