| # buf4 = ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf0 = m0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # vtbl1 = m0 + 1, # buf2 = ENCODED_VOLID_SIZE, # buf1 = ENCODED_NAT_SIZE, 2 * ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * # vtbl + ENCODED_VOLID_SIZE = n0 + # buf4, is-encoded((m0 + 1) + # vtbl, subarray(buf4, 0, ENCODED_NAT_SIZE)), is-encoded(vtbl0, buf4 + (buf2 + buf1 + buf0) + buf3), is-encoded(vtbl1[v], buf1), is-encoded(v, buf2), is-encoded-rec(vtbl, subarray(buf4, ENCODED_NAT_SIZE, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))), is-encoded-rec(vtbl1 -- v, buf0), v ∈ vtbl1, ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * (m0 + # vtbl) ≤ # buf4 + # buf0 + # buf3, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ≤ # buf4 + # buf0 + # buf3, # buf4 ≤ 2 * ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * # vtbl + ENCODED_VOLID_SIZE, vtbl ⊥ vtbl1, err0 = ESUCCESS → n3 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl1 = ∅, v ∈ vtbl, is-encoded-rec (vtbl[v, vtbl1[v]], subarray (buf4 + (buf2 + buf1 + buf0) + buf3, ENCODED_NAT_SIZE, (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * # vtbl + ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE)) ∧ is-encoded-rec(vtbl1 -- v, subarray(buf2 + buf1 + buf0 + buf3, n0, # buf0)) |
# buf4 = ENCODED_NAT_SIZE + # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf0 = m0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # vtbl1 = m0 + 1, # buf2 = ENCODED_VOLID_SIZE, # buf1 = ENCODED_NAT_SIZE, 2 * ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * # vtbl + ENCODED_VOLID_SIZE = n0 + # buf4, is-encoded((m0 + 1) + # vtbl, subarray(buf4, 0, ENCODED_NAT_SIZE)), is-encoded(vtbl0, buf4 + (buf2 + buf1 + buf0) + buf3), is-encoded(vtbl1[v], buf1), is-encoded(v, buf2), is-encoded-rec(vtbl, subarray(buf4, ENCODED_NAT_SIZE, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE))), is-encoded-rec(vtbl1 -- v, buf0), v ∈ vtbl1, ENCODED_NAT_SIZE + (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * (m0 + # vtbl) ≤ # buf4 + # buf0 + # buf3, # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ≤ # buf4 + # buf0 + # buf3, vtbl ⊥ vtbl1, err0 = ESUCCESS → n3 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl1 = ∅, v ∈ vtbl, is-encoded-rec (vtbl[v, vtbl1[v]], subarray (buf4 + (buf2 + buf1 + buf0) + buf3, ENCODED_NAT_SIZE, (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) * # vtbl + ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE)) ∧ is-encoded-rec(vtbl1 -- v, subarray(buf2 + buf1 + buf0 + buf3, n0, # buf0))
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)