| # buf0 = EB_PAGE_SIZE, buf + emptypage = buf0 + buf1, is-aligned(# buf, EB_PAGE_SIZE), is-encoded(rnode(m), buf0), is-encoded(nx0, buf1), # buf ≠ 0 → buf = buf2 + buf3 ∧ # buf2 = EB_PAGE_SIZE, ∀ buf2. ¬ is-aligned(# buf2, EB_PAGE_SIZE) ∨ ¬ is-encoded(nx0, buf2 + emptypage) ⊦ |
# buf0 = EB_PAGE_SIZE, buf + emptypage = buf0 + buf1, is-aligned(# buf, EB_PAGE_SIZE), is-encoded(nx0, buf1), is-encoded(rnode(m), buf0), EB_PAGE_SIZE ≤ # buf, # buf ≠ 0 → buf = buf2 + buf3 ∧ # buf2 = EB_PAGE_SIZE, ∀ buf2. ¬ is-aligned(# buf2, EB_PAGE_SIZE) ∨ ¬ is-encoded(nx0, buf2 + emptypage) ⊦
# buf0 = EB_PAGE_SIZE, buf + emptypage = buf0 + buf1, is-aligned(# buf, EB_PAGE_SIZE), is-encoded(nx0, buf1), is-encoded(rnode(m), buf0), # buf ≠ 0 → buf = buf2 + buf3 ∧ # buf2 = EB_PAGE_SIZE, ∀ buf2. ¬ is-aligned(# buf2, EB_PAGE_SIZE) ∨ ¬ is-encoded(nx0, buf2 + emptypage) ⊦ EB_PAGE_SIZE ≤ # buf
Used formulas: EB_PAGE_SIZE ≤ # buf