| # buf2 = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf0 = ENCODED_NAT_SIZE, # buf4 = # buf, # buf = n0 + ENCODED_NAT_SIZE, ENCODED_NAT_SIZE + # buf2 + # buf3 = # buf, subarray(buf4, ENCODED_NAT_SIZE, n0) = subarray(buf, ENCODED_NAT_SIZE, n0), is-encoded(# vtbl0, buf0), is-encoded-rec(vtbl0, buf2), # buf2 + ENCODED_NAT_SIZE ≤ # buf, ENCODED_NAT_SIZE ≤ # buf, err0 = ESUCCESS → is-encoded(# vtbl0, subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ is-encoded(vtbl0, buf0 + buf2 + buf3) |
# buf = # buf4, # buf4 = (# buf2 + # buf3) + ENCODED_NAT_SIZE, # buf0 = ENCODED_NAT_SIZE, # buf2 = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), subarray(buf4, ENCODED_NAT_SIZE, # buf2 + # buf3) = subarray(buf, ENCODED_NAT_SIZE, # buf2 + # buf3), is-encoded(# vtbl0, buf0), is-encoded-rec(vtbl0, buf2), err0 = ESUCCESS → is-encoded(# vtbl0, subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ is-encoded(vtbl0, buf0 + buf2 + buf3)
Used simplifier rules: ⊦ m ≤ m + n; (s)% ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s)