| # vtbl1 = m0 + 1, is-encoded((m0 + 1) + # vtbl, subarray(buf, 0, ENCODED_NAT_SIZE)), is-encoded(vtbl0, buf), is-encoded(v, subarray(buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), ENCODED_VOLID_SIZE)), is-encoded(m, subarray(buf, (ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE)) + ENCODED_VOLID_SIZE, ENCODED_NAT_SIZE)), is-encoded-rec(vtbl, subarray(buf, ENCODED_NAT_SIZE, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))), 2 * ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * (m0 + # vtbl) + ENCODED_VOLID_SIZE ≤ # buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) + ENCODED_VOLID_SIZE ≤ # buf, 2 * ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) + ENCODED_VOLID_SIZE ≤ # buf, vtbl ⊥ vtbl1, err0 = ESUCCESS → ENCODED_NAT_SIZE ≤ # buf ∧ n3 = ENCODED_NAT_SIZE, ∃ v, buf0, buf1, buf2. v ∈ vtbl1 ∧ subarray (buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * m0 + ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) = buf0 + buf1 + buf2 ∧ is-encoded(v, buf0) ∧ is-encoded(vtbl1[v], buf1) ∧ is-encoded-rec(vtbl1 -- v, buf2), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl1 = ∅, # vtbl[v, m] = 1 + # vtbl ∧ #(vtbl1 -- v) = m0 ∧ ENCODED_NAT_SIZE + (#(vtbl1 -- v) + # vtbl[v, m]) * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ≤ # buf ∧ is-encoded-rec(vtbl[v, m], subarray(buf, ENCODED_NAT_SIZE, # vtbl[v, m] * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))) ∧ is-encoded-rec (vtbl1 -- v, subarray (buf, ENCODED_NAT_SIZE + # vtbl[v, m] * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), #(vtbl1 -- v) * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))) |
# buf1 = ENCODED_NAT_SIZE, # buf2 = ENCODED_VOLID_SIZE, # vtbl1 = m0 + 1, # buf0 = m0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), subarray(buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf0 + ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) = buf2 + buf1 + buf0, is-encoded(v0, buf2), is-encoded(vtbl1[v0], buf1), is-encoded(m, subarray(buf, (ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE)) + ENCODED_VOLID_SIZE, ENCODED_NAT_SIZE)), is-encoded(v, subarray(buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), ENCODED_VOLID_SIZE)), is-encoded(vtbl0, buf), is-encoded((m0 + 1) + # vtbl, subarray(buf, 0, ENCODED_NAT_SIZE)), is-encoded-rec(vtbl1 -- v0, buf0), is-encoded-rec(vtbl, subarray(buf, ENCODED_NAT_SIZE, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))), v0 ∈ vtbl1, 2 * ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) + ENCODED_VOLID_SIZE ≤ # buf, ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) + ENCODED_VOLID_SIZE ≤ # buf, 2 * ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * (m0 + # vtbl) + ENCODED_VOLID_SIZE ≤ # buf, vtbl ⊥ vtbl1, err0 = ESUCCESS → ENCODED_NAT_SIZE ≤ # buf ∧ n3 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl1 = ∅, v0 ∈ vtbl, # vtbl[v, m] = 1 + # vtbl ∧ #(vtbl1 -- v) = m0 ∧ ENCODED_NAT_SIZE + (#(vtbl1 -- v) + # vtbl[v, m]) * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ≤ # buf ∧ is-encoded-rec(vtbl[v, m], subarray(buf, ENCODED_NAT_SIZE, # vtbl[v, m] * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))) ∧ is-encoded-rec (vtbl1 -- v, subarray (buf, ENCODED_NAT_SIZE + # vtbl[v, m] * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), #(vtbl1 -- v) * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE)))
Used simplifier rules: is-encoded-rec-size: ⊦ is-encoded-rec(vtbl, buf) → # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE);%mult-c: ⊦ m * n = n * m; from specification nat-mult%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ n ≤ m → m + n0 - n = (m - n) + n0; (s)% ⊦ n -1 = n - 1; (s)% ⊦ v ∈ vtbl → #(vtbl -- v) = (# vtbl)-1; (s)%disjoint-in-right: ⊦ v ∈ vtbl ∧ vtbl0 ⊥ vtbl → ¬ v ∈ vtbl0; (forward) from specification store-union[vtbl]%is-encoded-size: ⊦ is-encoded(v, buf) → # buf = ENCODED_VOLID_SIZE; (forward) from specification encoding-fixed-size[encoding-volid]%is-encoded-size: ⊦ is-encoded(n, buf) → # buf = ENCODED_NAT_SIZE; (forward) from specification encoding-fixed-size[encoding-nat]