| # buf = n0 + n1, buf[n2] = empty, n2 < n0 + n1, n0 < datasize(buf, n2), range=(buf, n0, emptyleb, 0, n1), ∀ buf0, n, n3. # buf0 ≠ n + n3 ∨ ¬ n < datasize(buf0, n2) ∨ ¬ range=(buf0, n, emptyleb, 0, n3) ∨ ¬ n2 ≤ n + n3 ⊦ |
Used simplifier rules: ⊦ m < n → m ≤ n; (s) Used terms: buf, n0, n1