| # int2bytes(i >> 8) < 3 ∧ bytes2int(int2bytes(i >> 8)) < 0, mklist(i2b(~1), 3 - # int2bytes(i >> 8)) + int2bytes(i >> 8) = by ' + by0 ' + by1 ', 2 = # int2bytes(i >> 8), i < ~128 ∨ 128 ≤ i ⊦ i = b2i(i2b(i)), by = i2b(i >> 24) ∧ by0 = i2b(i >> 16) ∧ by1 = i2b(i >> 8) |
int2bytes(i >> 8) = by0 ' + by1 ', i < 0, i >> 8 < 0, i < ~128 ⊦ i = b2i(i2b(i)), i2b(~1) = i2b(i >> 24) ∧ by0 = i2b(i >> 16) ∧ by1 = i2b(i >> 8)
Used simplifier rules: int2int: ⊦ bytes2int(int2bytes(i)) = i;%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%len-02: ⊦ # by ' = 0 +1; from specification list[bytelist]%len: ⊦ #(bytes + bytes0) = # bytes + # bytes0; from specification list[bytelist]%in-17: ⊦ by ∈ by0 ' ↔ by = by0; from specification list[bytelist]%c-06: ⊦ by ' + bytes = by0 ' + bytes0 ↔ by = by0 ∧ bytes = bytes0; from specification list[bytelist]%mklist-one: ⊦ mklist(by, 1) = by '; from specification list-last[bytelist]%numlsf: ⊦ i < (* j) ∧ j < 0 → i < 0; (forward) from specification int-basic1%numlslsdel: j0 ≠ 0, j < j0 ⊦ i < (* j) → i < (* j0); from specification int-basic1%lels-01: ⊦ ¬ i ≤ j ↔ j < i; from specification int-abs%shiftright-not-neg: ⊦ 0 ≤ i → ¬ i >> j < 0; from specification intops%in-append: ⊦ by ∈ bytes + bytes0 ↔ ¬ ¬(by ∈ bytes ∨ by ∈ bytes0); from specification list[bytelist]%forward-le: ⊦ i ≤ j ∧ 0 < i → 0 < j; (forward) from specification int-abs%forward-le-01: ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward) from specification int-abs%forward-le-02: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward) from specification int-abs%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic1%in-14: ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward) from specification list[bytelist]%a: ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1; from specification list[bytelist]%in-15: ⊦ bytes + by ' = bytes0 → by ∈ bytes0; (forward) from specification list[bytelist]