| # lpt = # avol, # lpt0 = # avol, LEB_SIZE = n0 + # buf1, LEB_SIZE = n1 + # avol[m4].data, avol[m4] = mapped(buf1), m4 < # avol, abs-node(subarray(buf1, m3, m2), gnd), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), m3 + m2 ≤ # buf1, m3 + m2 ≤ LEB_SIZE, # buf1 ≤ LEB_SIZE, # avol[m4].data ≤ LEB_SIZE ⊦ ⟪decode_group_node#(0, m2, copy(avol[m4].data + mkempbuf(n1), m3, mkbuf(m2), 0, m2); gnd0; err0)⟫ ((err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → gnd = gnd0)) |
# lpt0 = # avol, # lpt = # avol, LEB_SIZE = n0 + # buf1, avol[m4] = mapped(buf1), m4 < # avol, abs-node(subarray(buf1, m3, m2), gnd), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), # buf1 ≤ LEB_SIZE, m3 + m2 ≤ LEB_SIZE, m3 + m2 ≤ # buf1 ⊦ ⟪decode_group_node#(0, m2, copy(avol[m4].data + mkempbuf(n0), m3, mkbuf(m2), 0, m2); gnd0; err0)⟫ ((err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → gnd = gnd0))
Used simplifier rules: eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ mapped(buf).data = buf; (s)