| apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n1 < # apebs, n0 < # apebs, m1 < # apebs, n0 < m1, n1 < m1, valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n1 ≤ m1, n0 ≤ m1, n1 < m1 ∧ n0 < m1 → valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn ++ avhdr0.sqn |
apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn, n1 < # apebs, n0 < # apebs, m1 < # apebs, n0 < m1, n1 < m1, n0 + 1 < # apebs, n1 + 1 < # apebs, valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn ++ avhdr0.sqn
Used simplifier rules: ⊦ m +1 = m + 1; (s)% ⊦ m < n → n ≠ 0; (s)%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → m ≤ n; (s)