| # buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, # buf0 = # buf, subarray(buf0, 0, n) = subarray(buf, 0, n), n1 < n0, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, ⌊err⌋ , ∀ n2. n2 < NODE_HEADER_SIZE + n0 + nd.alignedsize → buf0[(n + NODE_HEADER_SIZE) + n2] = buf[(n + NODE_HEADER_SIZE) + n2] ⊦ buf0[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n1] = buf[(n + 2 * NODE_HEADER_SIZE + nd.alignedsize) + n1] |
Used simplifier rules: ⊦ m + n < m + n0 ↔ n < n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + m = 2 * m; (s) Used terms: NODE_HEADER_SIZE + nd.alignedsize + n1