| avol[n] = mapped(buf0), n < # avol, ∀ n. n < # avol ∧ avol[n].mapped? → # avol[n].data ≤ LEB_SIZE ∧ is-aligned(# avol[n].data, EB_PAGE_SIZE) ⊦ # buf ≤ LEB_SIZE ∧ is-aligned(# buf, EB_PAGE_SIZE), # buf0 ≤ LEB_SIZE ∧ is-aligned(# buf0, EB_PAGE_SIZE) |
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf).data = buf; (s) Used terms: n