| m + n0 < # buf + n, n0 < NODE_HEADER_SIZE, is-aligned(# buf, NODE_HEADER_SIZE), is-aligned(m, NODE_HEADER_SIZE), m + NODE_HEADER_SIZE ≤ # buf, m + NODE_HEADER_SIZE ≤ # buf + n, ∀ n1. n1 < NODE_HEADER_SIZE → buf[m + n1] = (validtrailer)[n1] ⊦ buf[m + n0] = (validtrailer)[n0] |
Used terms: n0