| avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), n0 < n, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(n0, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, n2 ≤ m1, n3 + n ≤ # buf, m1 + n ≤ LEB_SIZE, ⌊err1⌋ , ∀ n0. ¬ n0 < n ∨ ¬ is-aligned(n0, EB_PAGE_SIZE) ⊦ ∃ n1. n1 < n ∧ is-aligned(n1, EB_PAGE_SIZE) ∧ ⟨if n1 ≠ 0 then avol[m2] := mapped(avol[m2].data + mkempbuf(m1 - # avol[m2].data) + subarray(buf, n3, n1))⟩ (avol = abs(avols[default-volid])) |
avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), n0 < n, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(n0, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, n2 ≤ m1, n3 + n ≤ # buf, m1 + n ≤ LEB_SIZE, ⌊err1⌋ , ∀ n0. ¬ n0 < n ∨ ¬ is-aligned(n0, EB_PAGE_SIZE) ⊦ ∃ n1. n1 < n ∧ is-aligned(n1, EB_PAGE_SIZE) ∧ ⟨if n1 ≠ 0 then avol[m2] := mapped(avol[m2].data + mkempbuf(m1 - # avol[m2].data) + subarray(buf, n3, n1))⟩ (avol = abs(avols[default-volid]))
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic