| # vtbl1 = # vtbl + 1, # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf3 = ENCODED_NAT_SIZE, # buf4 = ENCODED_VOLID_SIZE, vtbl[v, n] -- v0 = vtbl1 -- v0, vtbl1[v0] = vtbl[v, n][v0], is-encoded(v0, buf4), is-encoded(vtbl1[v0], buf3), is-encoded-rec(vtbl1 -- v0, buf), is-encoded-rec(vtbl[v, n] -- v0, buf), v0 ∈ vtbl1, v0 ∈ vtbl[v, n], ∀ vtbl2, buf, vtbl1. # vtbl2 < # vtbl[v, n] → # buf = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ # buf = # vtbl2 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ is-encoded-rec(vtbl2, buf) ∧ is-encoded-rec(vtbl1, buf) → vtbl2 = vtbl1 ⊦ ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE = 0, vtbl[v, n] = vtbl1, vtbl1 = ∅, v ∈ vtbl |
# buf4 = ENCODED_VOLID_SIZE, # buf3 = ENCODED_NAT_SIZE, # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # vtbl1 = # vtbl + 1, vtbl[v, n] -- v0 = vtbl1 -- v0, vtbl1[v0] = vtbl[v, n][v0], is-encoded(vtbl1[v0], buf3), is-encoded(v0, buf4), is-encoded-rec(vtbl1 -- v0, buf), v0 ∈ vtbl[v, n], v0 ∈ vtbl1, ∀ vtbl2, buf, vtbl1. # vtbl2 < # vtbl[v, n] → # buf = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ # buf = # vtbl2 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ is-encoded-rec(vtbl2, buf) ∧ is-encoded-rec(vtbl1, buf) → vtbl2 = vtbl1 ⊦ ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE = 0, vtbl[v, n] = vtbl1, vtbl1 = ∅, v ∈ vtbl