(read-16ule channel state) reads a 16-bit, unsigned, little-endian value from the input channel.
Function:
(defun read-16ule (channel state) (declare (xargs :guard (and (state-p state) (symbolp channel) (open-input-channel-p channel :byte state)))) (b* (((mv x1 state) (read-byte$ channel state)) ((mv x2 state) (read-byte$ channel state)) ((unless x1) (mv nil state)) ((unless x2) (mv 'fail state))) (mv (combine16u x2 x1) state)))
Theorem:
(defthm read-16ule-unsigned-byte (implies (and (force (state-p1 state)) (force (open-input-channel-p1 channel :byte state)) (force (symbolp channel)) (mv-nth 0 (read-16ule channel state)) (not (equal (mv-nth 0 (read-16ule channel state)) 'fail))) (unsigned-byte-p 16 (mv-nth 0 (read-16ule channel state)))))
Theorem:
(defthm read-16ule-integer (implies (and (mv-nth 0 (read-16ule channel state)) (not (equal (mv-nth 0 (read-16ule channel state)) 'fail))) (integerp (mv-nth 0 (read-16ule channel state)))))
Theorem:
(defthm read-16ule-range (implies (and (force (state-p1 state)) (force (open-input-channel-p1 channel :byte state)) (force (symbolp channel)) (mv-nth 0 (read-16ule channel state)) (not (equal (mv-nth 0 (read-16ule channel state)) 'fail))) (and (<= 0 (mv-nth 0 (read-16ule channel state))) (< (mv-nth 0 (read-16ule channel state)) 65536) (< (mv-nth 0 (read-16ule channel state)) (expt 2 16)))) :rule-classes :linear)
Theorem:
(defthm read-16ule-state (implies (and (force (state-p1 state)) (force (open-input-channel-p1 channel :byte state)) (force (symbolp channel))) (state-p1 (mv-nth 1 (read-16ule channel state)))))
Theorem:
(defthm read-16ule-open-input-channel-p1 (implies (and (force (state-p1 state)) (force (open-input-channel-p1 channel :byte state)) (force (symbolp channel))) (open-input-channel-p1 channel :byte (mv-nth 1 (read-16ule channel state)))))