| # buf = # buf4, # buf4 = (# buf2 + # buf3) + ENCODED_NAT_SIZE, # buf0 = ENCODED_NAT_SIZE, # buf2 = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), subarray(buf4, ENCODED_NAT_SIZE, # buf2 + # buf3) = subarray(buf, ENCODED_NAT_SIZE, # buf2 + # buf3), is-encoded(#(vtbl ∪ vtbl0), buf0), is-encoded-rec(vtbl0, buf2), v ∈ vtbl, #(vtbl ∪ vtbl0) * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) ≤ # buf2 + # buf3, # vtbl * (ENCODED_NAT_SIZE + ENCODED_VOLID_SIZE) ≤ # buf3, vtbl ⊥ vtbl0, err0 = ESUCCESS → is-encoded(#(vtbl ∪ vtbl0), subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ v ∈ vtbl0, ∃ v. v ∈ vtbl |
Used terms: v