| adr0 ∈ as ↔ ¬ dirty0, ((r => mkznode(rp, zbrar, false, dirty0, nused) * bnode(r, zbrar, 0, nused, nused, height0 + 1, dirty0, fi, iast, as -- adr0, alladrs -- adr0) * P) )(zh0), nsize(nused, nstat), unmodified(adr0, mkznode(rp, zbrar, false, dirty0, nused), iast), adr0 ∈ alladrs, as ⊆ alladrs, dirty0 → dirty, (rp0 = null ⊃ adr0 ∈ as ∧ P(zh);r = rp0 ∧ zh0 = zh), ∀ rp, rp0, adr0, dirty, fi, iast, as, alladrs, nstat, P, zh. ((btree(rp, rp0, adr0, height0, dirty, fi, iast, as, alladrs, nstat) * P))(zh) → as ⊆ dom iast ⊦ # alladrs = 0, alladrs = ∅, alladrs ⊆ dom iast, as ⊆ dom iast |
⊦ ((P * P2))(zh) ↔ (∃ zh0, zh1. zh0 ⊥ zh1 ∧ zh = zh0 ∪ zh1 ∧ P(zh0) ∧ P2(zh1))
adr0 ∈ as ↔ ¬ dirty0, nsize(nused, nstat), unmodified(adr0, mkznode(rp, zbrar, false, dirty0, nused), iast), adr0 ∈ alladrs, as ⊆ alladrs, dirty0 → dirty, (rp0 = null ⊃ adr0 ∈ as ∧ P(zh);r = rp0 ∧ zh0 = zh), ∀ rp, rp0, adr0, dirty, fi, iast, as, alladrs, nstat, P, zh. ((btree(rp, rp0, adr0, height0, dirty, fi, iast, as, alladrs, nstat) * P))(zh) → as ⊆ dom iast, ∃ zh2, zh1. zh2 ⊥ zh1 ∧ zh0 = zh2 ∪ zh1 ∧ ((r => mkznode(rp, zbrar, false, dirty0, nused)))(zh2) ∧ ((bnode(r, zbrar, 0, nused, nused, height0 + 1, dirty0, fi, iast, as -- adr0, alladrs -- adr0) * P))(zh1) ⊦ # alladrs = 0, alladrs = ∅, as ⊆ dom iast, alladrs ⊆ dom iast
Used terms: zh0, bnode (r, zbrar, 0, nused, nused, height0 + 1, dirty0, fi, iast, as -- adr0, alladrs -- adr0) * P, r => mkznode(rp, zbrar, false, dirty0, nused)