| # buf0 = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, buf0 = buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf0 ⊦ ⟪encode_node#(nd, n; m, buf; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # buf = # buf0 ∧ subarray(buf, 0, n) = subarray(buf0, 0, n) ∧ subarray(buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) = subarray(buf0, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) ∧ ( err = ESUCCESS → (∃ buf0, buf1. subarray(buf, n, 2 * NODE_HEADER_SIZE + nd.alignedsize) = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf0) ∧ is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ∧ # buf1 = nd.alignedsize) ∧ m = 2 * NODE_HEADER_SIZE + nd.alignedsize)) |
# buf = n0 + n + 2 * NODE_HEADER_SIZE + nd.alignedsize, buf0 = buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize ≤ # buf ⊦ ⟪encode_node#(nd, n; m, buf; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # buf = # buf0 ∧ subarray(buf, 0, n) = subarray(buf0, 0, n) ∧ subarray(buf, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) = subarray(buf0, n + 2 * NODE_HEADER_SIZE + nd.alignedsize, n0) ∧ ( err = ESUCCESS → (∃ buf0, buf1. subarray(buf, n, 2 * NODE_HEADER_SIZE + nd.alignedsize) = buf0 + buf1 + validtrailer ∧ is-encoded(nodeheader(node-size-headerless(nd), false), buf0) ∧ is-encoded(nd, subarray(buf1, 0, node-size-headerless(nd))) ∧ # buf1 = nd.alignedsize) ∧ m = 2 * NODE_HEADER_SIZE + nd.alignedsize))