| # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, # buf0 = # buf, m0 = align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE), m3 = n, subarray(buf0, n + NODE_HEADER_SIZE, # buf - n + NODE_HEADER_SIZE) = subarray(buf, n + NODE_HEADER_SIZE, # buf - n + NODE_HEADER_SIZE), subarray(buf0, 0, n) = subarray(buf, 0, n), n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, err = ESUCCESS → is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), err = ESUCCESS ∨ ⌊err⌋ ⊦ err = ESUCCESS, (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # buf0 = # buf ∧ subarray(buf0, 0, n) = subarray(buf, 0, n) ∧ subarray(buf0, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) = subarray(buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) ∧ ( err = ESUCCESS → (∃ buf2, buf1. subarray(buf0, n, 2 * NODE_HEADER_SIZE + nd.alignedsize) = buf2 + buf1 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf2) ∧ is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ∧ # buf1 = nd.alignedsize) ∧ 2 * NODE_HEADER_SIZE + m0 = 2 * NODE_HEADER_SIZE + nd.alignedsize) |
# buf0 = # buf, # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, subarray(buf0, 0, n) = subarray(buf, 0, n), subarray(buf0, n + NODE_HEADER_SIZE, # buf - n + NODE_HEADER_SIZE) = subarray(buf, n + NODE_HEADER_SIZE, # buf - n + NODE_HEADER_SIZE), n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, ⌊err⌋ ⊦ subarray(buf0, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) = subarray(buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0)
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)