| LEB_SIZE = (n5 + n0) + m1, avols[default-volid][m2] = mapped(buf0, n4), m1 = n1 + n4, m2 < # avols[default-volid], n0 < n, ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(n0, EB_PAGE_SIZE), default-volid ∈ avols, m1 + n ≤ LEB_SIZE, n3 + n ≤ # buf, n4 ≤ LEB_SIZE, m1 ≤ LEB_SIZE, n4 ≤ m1, n3 + n0 ≤ # buf, n0 + m1 ≤ LEB_SIZE, ⌊err1⌋ ⊦ abs(avols[default-volid])[m2, mapped(subarray(buf0, 0, n4) + mkempbuf(n1) + subarray(buf, n3, n0))] = abs(avols[default-volid][m2, mapped(subarray(buf0, 0, m1) + subarray(buf, n3, n0) + mkempbuf(n5), m1 + n0)]), n0 = 0 |
LEB_SIZE = (n5 + n0) + n1 + n4, avols[default-volid][m2] = mapped(buf0, n4), n0 < n, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(n0, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(n1, EB_PAGE_SIZE), default-volid ∈ avols, n0 + n1 + n4 ≤ LEB_SIZE, n3 + n0 ≤ # buf, n1 + n4 ≤ LEB_SIZE, n4 ≤ LEB_SIZE, n3 + n ≤ # buf, (n1 + n4) + n ≤ LEB_SIZE, ⌊err1⌋ ⊦ abs(avols[default-volid])[m2, mapped(subarray(buf0, 0, n4) + mkempbuf(n1) + subarray(buf, n3, n0))] = abs(avols[default-volid][m2, mapped(subarray(buf0, 0, n1 + n4) + subarray(buf, n3, n0) + mkempbuf(n5), (n1 + n4) + n0)]), n0 = 0
Used simplifier rules: ⊦ v ∈ avols ∧ m < # avols[v] ∧ avols[v][m] = mapped(buf, m0) ∧ ebm-cons(avols) → (is-aligned(m0 + m1, EB_PAGE_SIZE) ↔ is-aligned(m1, EB_PAGE_SIZE)); (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)