| # lpt = # avol, avol[m3] = mapped(buf0), err0 = ESUCCESS, n = 0, m3 < # avol, ebm-vol-inv(avol), is-aligned(m0, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), # buf0 ≤ m0, m0 + n ≤ LEB_SIZE, n2 + n ≤ # buf, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ (ebm-vol-inv(avol) ∧ # lpt = # avol) |
Used simplifier rules: ⊦ n + 0 = n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ EB_PAGE_SIZE ≠ 0; (s)%n ≠ 0 ⊦ is-aligned(0, n); (s)% ⊦ ¬ ⌊ESUCCESS⌋ ; (s)