| # bytes ≤ 1 ∧ bytes ≠ [], fillsgn(2, int2bytes(s2i(sho))) = by + bytes, fillsgn(2, int2bytes(s2i(sho))) ≠ [], 1 + 1 = 2 ⊦ fillsgn(2, int2bytes(s2i(sho))) = i2b(s2i(sho) i>> 8) ' + i2b(s2i(sho)) ' |
fillsgn(2, int2bytes(s2i(sho))) = by ' + bytes, # bytes = 1 ⊦ by ' + bytes = i2b(s2i(sho) i>> 8) ' + i2b(s2i(sho)) ', bytes = []
Used simplifier rules: fillsgn-not-empty: ⊦ fillsgn(n, int2bytes(i)) ≠ [];%in-17: ⊦ by ∈ by0 ' ↔ by = by0; from specification list[bytelist]%in-append: ⊦ by ∈ bytes + bytes0 ↔ ¬ ¬(by ∈ bytes ∨ by ∈ bytes0); from specification list[bytelist]%not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat%le-one: ⊦ # bytes ≤ 1 ∧ bytes ≠ [] → # bytes = 1; (forward) from specification list-data[bytelist]%a: ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1; from specification list[bytelist]%in-14: ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward) from specification list[bytelist]%c: ⊦ by + bytes = by ' + bytes; from specification list[bytelist]