Function vstd::bits::lemma_u16_pow2_no_overflow
source · pub broadcast proof fn lemma_u16_pow2_no_overflow(n: nat)
Expand description
requires
0 <= n < <u16>::BITS,
ensures#[trigger] pow2(n) <= <u16>::MAX,
Proof that 2^n does not overflow u16 for an exponent n.