| # buf = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), # buf = # vtbl0 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), vtbl0 = ∅, is-encoded-rec(vtbl0, buf), is-encoded-rec(vtbl1, buf), ∀ vtbl, buf, vtbl1. # vtbl < # vtbl0 → # buf = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ is-encoded-rec(vtbl, buf) ∧ is-encoded-rec(vtbl1, buf) → vtbl = vtbl1 ⊦ vtbl0 = vtbl1 |
# buf = 0, 0 = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE), is-encoded-rec(vtbl1, buf), ∀ vtbl, buf, vtbl1. # vtbl < # ∅ → # buf = # vtbl1 * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ # buf = # vtbl * (ENCODED_VOLID_SIZE + ENCODED_NAT_SIZE) ∧ is-encoded-rec(vtbl, buf) ∧ is-encoded-rec(vtbl1, buf) → vtbl = vtbl1 ⊦ ∅ = vtbl1
Used simplifier rules: is-encoded-base: ⊦ is-encoded-rec(∅, buf) ↔ # buf = 0;%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ 0 * n = 0; (s)% ⊦ # ∅ = 0; (s)