| lpt[n0] = mklp(m, m0, lpf, m1), n0 < # lpt, freelist-cons(subarray(lpt, 0, n0), freelist) ⊦ lpf = LP_FREE, ¬ dups(freelist) ∧ (∀ n. n < # subarray(lpt, 0, n0 + 1) ∧ subarray(lpt, 0, n0 + 1)[n].flags = LP_FREE ↔ n ∈ freelist) |
lpt[n0] = mklp(m, m0, lpf, m1), n0 < # lpt, freelist-cons(subarray(lpt, 0, n0), freelist) ⊦ lpf = LP_FREE, ¬ dups(freelist) ∧ (¬ n0 < n ∧ subarray(lpt, 0, n0 + 1)[n].flags = LP_FREE ↔ n ∈ freelist)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ # subarray(lpt, m, n) = n; (s)