| buf0 = buf, is-aligned(# buf, 2 * NODE_HEADER_SIZE) ⊦ buf = mkbuf(0), # buf ≥ 2 * NODE_HEADER_SIZE |
Used simplifier rules: ⊦ # buf = 0 ↔ buf = mkbuf(0); (s)%m ≠ 0 ⊦ is-aligned(n, m) → (n < m ↔ n = 0); (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ NODE_HEADER_SIZE ≠ 0; (s)% ⊦ 2 * m = 0 ↔ m = 0; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)