| avols[v][m] = mapped(buf, m0), m < # avols[v], v ∈ avols, ∀ m. m < # avols[v] → valid-leb(avols[v][m]) ⊦ is-aligned(m0, EB_PAGE_SIZE) |
avols[v][m] = mapped(buf, m0), m < # avols[v], v ∈ avols, ∀ m1. m1 < # avols[v] → avols[v][m1].mapped? → # avols[v][m1].data = LEB_SIZE ∧ avols[v][m1].fill ≤ LEB_SIZE ∧ is-aligned(avols[v][m1].fill, EB_PAGE_SIZE) ∧ range=(avols[v][m1].data, avols[v][m1].fill, emptyleb, 0, LEB_SIZE - avols[v][m1].fill) ⊦ is-aligned(m0, EB_PAGE_SIZE)
Used simplifier rules: ⊦ valid-leb(leb) ↔ leb.mapped? → # leb.data = LEB_SIZE ∧ leb.fill ≤ LEB_SIZE ∧ is-aligned(leb.fill, EB_PAGE_SIZE) ∧ range=(leb.data, leb.fill, emptyleb, 0, LEB_SIZE - leb.fill); (s)