| # buf = VFS_PAGE_SIZE, m0 * VFS_PAGE_SIZE + n1 = n0 + n * VFS_PAGE_SIZE, n1 < VFS_PAGE_SIZE, n ≤ m0, n * VFS_PAGE_SIZE ≤ m0 * VFS_PAGE_SIZE + n1 ⊦ (m0 = n ∨ m0 ∈ content ⊃ content[n, buf][m0];zeropage)[n1] = (⌜buf⌝ + ⌜(λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage)[n % VFS_PAGE_SIZE]) from VFS_PAGE_SIZE * n + VFS_PAGE_SIZE⌝ )[n0 ] |
# buf = VFS_PAGE_SIZE, m0 * VFS_PAGE_SIZE + n1 = n0 + n * VFS_PAGE_SIZE, n1 < VFS_PAGE_SIZE, n ≤ m0 ⊦ (m0 = n ∨ m0 ∈ content ⊃ content[n, buf][m0];zeropage)[n1] = (⌜buf⌝ + ⌜(λ n. (n / VFS_PAGE_SIZE ∈ content ⊃ content[n / VFS_PAGE_SIZE];zeropage)[n % VFS_PAGE_SIZE]) from VFS_PAGE_SIZE * n + VFS_PAGE_SIZE⌝ )[n0 ]
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)