| # buf2 = # buf, # buf0 = # buf, # buf = n0 + n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd), buf2[2 * NODE_HEADER_SIZE + n + node-size-headerless(nd) + n1 + n2] = buf0[2 * NODE_HEADER_SIZE + n + node-size-headerless(nd) + n1 + n2], align↑(node-size-headerless(nd), 2 * NODE_HEADER_SIZE) = n2 + node-size-headerless(nd), subarray(buf2, 0, n + NODE_HEADER_SIZE) = subarray(buf0, 0, n + NODE_HEADER_SIZE), subarray(buf0, 0, n) = subarray(buf, 0, n), n1 < n0, is-encoded(nodeheader(node-size-headerless(nd), false), subarray(buf0, n, NODE_HEADER_SIZE)), is-encoded(nd, subarray(buf2, n + NODE_HEADER_SIZE, node-size-headerless(nd))), n + NODE_HEADER_SIZE + node-size-headerless(nd) ≤ # buf, (n + NODE_HEADER_SIZE + node-size-headerless(nd)) + n2 ≤ # buf, (n + NODE_HEADER_SIZE) + node-size-headerless(nd) ≤ # buf, n + NODE_HEADER_SIZE ≤ # buf, n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd) ≤ # buf, (n2 + node-size-headerless(nd)) + n + NODE_HEADER_SIZE ≤ # buf, 2 * NODE_HEADER_SIZE + n + n2 + node-size-headerless(nd) ≤ # buf, ∀ n3. n3 < node-size-headerless(nd) + NODE_HEADER_SIZE + n0 + n2 → buf0[(n + NODE_HEADER_SIZE) + n3] = buf[(n + NODE_HEADER_SIZE) + n3] ⊦ buf0[2 * NODE_HEADER_SIZE + n + node-size-headerless(nd) + n1 + n2] = buf[(n + 2 * NODE_HEADER_SIZE + n2 + node-size-headerless(nd)) + n1] |
Used simplifier rules: ⊦ m + n < m + n0 ↔ n < n0; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + m = 2 * m; (s) Used terms: NODE_HEADER_SIZE + node-size-headerless(nd) + n1 + n2