| # buf = n0 + n1, range=(buf, n0, emptyleb, 0, n1), n ≤ # buf ⊦ n0 < datasize(buf, n) ↔ false |
# buf = n0 + n1, n0 < datasize(buf, n), range=(buf, n0, emptyleb, 0, n1), n ≤ n0 + n1 ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic