| m < # avols[v], ebm-cons(avols), v ∈ avols, n0 + n ≤ # buf, m0 + n ≤ LEB_SIZE ⊦ ⟪ebm_read#(v, m, m0, n0, n, avols; buf; err)⟫ true |
m < # avols[v], ebm-cons(avols), v ∈ avols, n0 + n ≤ # buf, m0 + n ≤ LEB_SIZE ⊦ ⟪ebm_read#(v, m, m0, n0, n, avols; buf; err)⟫ true
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic