| # buf1 = # buf4, # buf4 = # buf, err = ESUCCESS, n2 = n1, subarray(buf4, ENCODED_NAT_SIZE, # buf - ENCODED_NAT_SIZE) = subarray(buf, ENCODED_NAT_SIZE, # buf - ENCODED_NAT_SIZE), vtbl = vtbl1, vtbl0 = vtbl2, # vtbl2 * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) + ENCODED_NAT_SIZE ≤ # buf, ENCODED_NAT_SIZE ≤ # buf, err = ESUCCESS → (∃ buf0, buf3, buf2, vtbl0. buf1 = buf0 + buf3 + buf2 ∧ vtbl2 = vtbl ∪ vtbl0 ∧ vtbl ⊥ vtbl0 ∧ # buf0 + # buf3 = n0 ∧ # buf2 ≥ # vtbl * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) ∧ is-encoded(# vtbl2, buf0) ∧ is-encoded-rec(vtbl0, buf3)), err0 = ESUCCESS → is-encoded(# vtbl2, subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err = ESUCCESS ∨ ⌊err⌋ , err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl = ∅, ∃ v. v ∈ vtbl |
# buf4 = # buf, # buf0 = ENCODED_NAT_SIZE, # buf2 = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), ENCODED_NAT_SIZE + # buf2 + # buf3 = # buf, subarray(buf4, ENCODED_NAT_SIZE, # buf - ENCODED_NAT_SIZE) = subarray(buf, ENCODED_NAT_SIZE, # buf - ENCODED_NAT_SIZE), is-encoded(#(vtbl ∪ vtbl0), buf0), is-encoded-rec(vtbl0, buf2), # vtbl * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) ≤ # buf3, #(vtbl ∪ vtbl0) * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) + ENCODED_NAT_SIZE ≤ # buf, ENCODED_NAT_SIZE ≤ # buf, vtbl ⊥ vtbl0, err0 = ESUCCESS → is-encoded(#(vtbl ∪ vtbl0), subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ vtbl = ∅, ∃ v. v ∈ vtbl
Used simplifier rules: is-encoded-rec-size: ⊦ is-encoded-rec(vtbl, buf) → # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE);%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[encoding-nat-buffer]% ⊦ #(buf + buf0) = # buf + # buf0; (s)%is-encoded-size: ⊦ is-encoded(n, buf) → # buf = ENCODED_NAT_SIZE; (forward) from specification encoding-fixed-size[encoding-nat]% ⊦ n ≥ m ↔ m ≤ n; (s)