Right shift of a value of type
Function:
(defun shr-uint-ulong (x y) (declare (xargs :guard (and (uintp x) (ulongp y) (shr-uint-ulong-okp x y)))) (shr-uint x (integer-from-ulong y)))
Theorem:
(defthm uintp-of-shr-uint-ulong (uintp (shr-uint-ulong x y)))
Theorem:
(defthm shr-uint-ulong-of-uint-fix-x (equal (shr-uint-ulong (uint-fix x) y) (shr-uint-ulong x y)))
Theorem:
(defthm shr-uint-ulong-uint-equiv-congruence-on-x (implies (uint-equiv x x-equiv) (equal (shr-uint-ulong x y) (shr-uint-ulong x-equiv y))) :rule-classes :congruence)
Theorem:
(defthm shr-uint-ulong-of-ulong-fix-y (equal (shr-uint-ulong x (ulong-fix y)) (shr-uint-ulong x y)))
Theorem:
(defthm shr-uint-ulong-ulong-equiv-congruence-on-y (implies (ulong-equiv y y-equiv) (equal (shr-uint-ulong x y) (shr-uint-ulong x y-equiv))) :rule-classes :congruence)