| # buf2 = # buf, # buf0 = # buf, # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, # buf = n1 + (n + NODE_HEADER_SIZE) + node-size-headerless(nd), NODE_HEADER_SIZE + n0 + nd.alignedsize = node-size-headerless(nd) + n1, subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf0, n + NODE_HEADER_SIZE, node-size-headerless(nd) + n1) = subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd) + n1), n2 < n0, is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, ⌊err⌋ , NODE_HEADER_SIZE + n2 + (nd.alignedsize - node-size-headerless(nd)) < n1 → buf2[((n + NODE_HEADER_SIZE) + node-size-headerless(nd)) + NODE_HEADER_SIZE + n2 + (nd.alignedsize - node-size-headerless(nd))] = buf0[((n + NODE_HEADER_SIZE) + node-size-headerless(nd)) + NODE_HEADER_SIZE + n2 + (nd.alignedsize - node-size-headerless(nd))] ⊦ buf2[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n2] = buf[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n2] |
# buf = n1 + (n + NODE_HEADER_SIZE) + node-size-headerless(nd), # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, # buf0 = # buf, # buf2 = # buf, NODE_HEADER_SIZE + n0 + nd.alignedsize = node-size-headerless(nd) + n1, subarray(buf0, n + NODE_HEADER_SIZE, node-size-headerless(nd) + n1) = subarray(buf, n + NODE_HEADER_SIZE, node-size-headerless(nd) + n1), subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), n2 < n0, is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, ⌊err⌋ , NODE_HEADER_SIZE + n2 + (nd.alignedsize - node-size-headerless(nd)) < n1 → buf2[2 * NODE_HEADER_SIZE + n + node-size-headerless(nd) + n2 + (nd.alignedsize - node-size-headerless(nd))] = buf0[2 * NODE_HEADER_SIZE + n + node-size-headerless(nd) + n2 + (nd.alignedsize - node-size-headerless(nd))] ⊦ buf2[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n2] = buf[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n2]
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + m = 2 * m; (s)