[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem crash-neutral-read
m < # avol, avol[m].mapped?, n + n0 ≤ # buf, m0 + n0 ≤ LEB_SIZE, ebm-vol-inv(avol), avol ⊆ avol0 ⊦ ⟨ebm_avol_read#(m, m0, n, n0, avol; buf; err)⟩ (avol ⊆ avol0)
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 17
Used lemmas:
read
,
Used spec theorems:
Used simplifier rules:
aleb
/
ex
aleb
/
test-02
error-class
/
eio
error
/
disj-66
nat
/
ge
nat
/
elim-sub
nat-basic
/
l-05
nat
/
fle-01
nat-basic
/
lf-02
nat-basic
/
f
nat
/
le-def
nat
/
ler
nat-basic
/
c
nat-basic
/
a
nat-basic
/
add-base
array-splice
/buffer/
range-eq-refl