| m2 < # avols[v], ebm-cons(avols0), ebm-cons(avols), v ∈ avols, n0 + n ≤ # buf, m1 + n ≤ LEB_SIZE, avols ⊆ avols0 ⊦ ∃ buf1. (# buf1 = # buf → range=(buf1, 0, buf, 0, n0) → # buf ≥ n0 + n) ∧ (# buf1 = # buf ∧ range=(buf1, 0, buf, 0, n0) ∧ range=(buf1, n0 + n, buf, n0 + n, # buf - n0 + n)) ∧ ⟨buf := buf1⟩ true |
m2 < # avols[v], ebm-cons(avols), ebm-cons(avols0), v ∈ avols, m1 + n ≤ LEB_SIZE, n0 + n ≤ # buf, avols ⊆ avols0 ⊦ ∃ buf0. # buf0 = # buf ∧ range=(buf0, 0, buf, 0, n0) ∧ range=(buf0, n0 + n, buf, n0 + n, # buf - n0 + n) ∧ ⟨buf := buf0⟩ true
Used simplifier rules: ⊦ n ≥ m ↔ m ≤ n; (s)