| avol[m2] = mapped(buf1), m2 < # avol, ebm-vol-inv(avol), m1 + n1 ≤ LEB_SIZE, n2 + n1 ≤ # buf, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err0 = ESUCCESS, ∀ buf1. # buf1 = # buf → range=(buf, 0, buf1, 0, n2) → # buf ≥ n2 + n1 |
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)