| # buf2 = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf0 = ENCODED_NAT_SIZE, # buf4 = (# buf2 + # buf3) + ENCODED_NAT_SIZE, # buf = # buf4, subarray(buf4, ENCODED_NAT_SIZE, # buf2 + # buf3) = subarray(buf, ENCODED_NAT_SIZE, # buf2 + # buf3), is-encoded(# vtbl0, buf0), is-encoded-rec(vtbl0, buf2), err0 = ESUCCESS → is-encoded(# vtbl0, subarray(buf4, 0, ENCODED_NAT_SIZE)) ∧ n1 = ENCODED_NAT_SIZE, err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ ∃ buf4, buf1, buf5. buf0 + buf2 + buf3 = buf4 + buf1 + buf5 ∧ is-encoded(# vtbl0, buf4) ∧ is-encoded-rec(vtbl0, buf1) |
Used simplifier rules: is-encoded-rec-unique: ⊦ is-encoded-rec(vtbl0, buf) → (is-encoded-rec(vtbl1, buf) ↔ vtbl0 = vtbl1);%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[encoding-nat-buffer]% ⊦ is-encoded(n, buf) → (is-encoded(n0, buf) ↔ n = n0); (s) Used terms: buf0, buf2, buf3