| lpt[n, mklp(n0, n1, lpf, n2)][n] = mklp(m, m3, lpf0, m4), lpt[n] = mklp(m0, m1, lpf, m2), n < # lpt, ∀ n. n < # lpt ∧ lpt[n].flags = LP_FREE ↔ n ∈ freelist ⊦ n < # lpt ∧ lpf0 = LP_FREE ↔ n ∈ freelist, dups(freelist) |
lpt[n] = mklp(m0, m1, lpf0, m2), n < # lpt, ∀ n. n < # lpt ∧ lpt[n].flags = LP_FREE ↔ n ∈ freelist ⊦ lpf0 = LP_FREE ↔ n ∈ freelist, dups(freelist)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%⊦ mklp(m, m0, lpf, m1) = mklp(m2, m3, lpf0, m4) ↔ m = m2 ∧ m0 = m3 ∧ lpf = lpf0 ∧ m1 = m4; (ws)% ⊦ m < # lpt → lpt[m, lp][m] = lp; (s)