| m8 + # lpt0 = # avol1, avol1[m10] = mapped(buf1), avol1[m5] = mapped(buf0), avol1[0] = mapped(buf2), m10 < # avol2, disk-layout(mksb(adr0, m9, m10, m5, m6, m7, m8), # lpt0), ebm-vol-inv(avol1), is-encoded(lpt0, lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE))), is-encoded(log0, buf1), is-encoded(mksb(adr0, m9, m10, m5, m6, m7, m8), buf2), is-encoded-pad(orphans0, m6, buf0), mapped-full?(avol1, m7, lptlebs(# lpt0, LEB_SIZE)), m7 + lptlebs(# lpt0, LEB_SIZE) ≤ # avol1, m8 ≤ # avol1, avol1 ⊆ avol2, m3 ≠ LEB_SIZE → # buf1 = m3 ⊦ # lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE)) = lptsize(# lpt0, LEB_SIZE) |
n + m < # avol ⊦ mapped-full?(avol, n, m) → # lebs(avol, n, m) = m * LEB_SIZE
m8 + # lpt0 = # avol1, avol1[0] = mapped(buf2), avol1[m5] = mapped(buf0), avol1[m10] = mapped(buf1), m10 < # avol2, disk-layout(mksb(adr0, m9, m10, m5, m6, m7, m8), # lpt0), ebm-vol-inv(avol1), is-encoded(mksb(adr0, m9, m10, m5, m6, m7, m8), buf2), is-encoded(log0, buf1), is-encoded(lpt0, lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE))), is-encoded-pad(orphans0, m6, buf0), mapped-full?(avol1, m7, lptlebs(# lpt0, LEB_SIZE)), m8 ≤ # avol1, m7 + lptlebs(# lpt0, LEB_SIZE) ≤ # avol1, avol1 ⊆ avol2, m3 ≠ LEB_SIZE → # buf1 = m3 ⊦ # lebs(avol1, m7, lptlebs(# lpt0, LEB_SIZE)) = lptsize(# lpt0, LEB_SIZE), m7 + lptlebs(# lpt0, LEB_SIZE) < # avol1 ∧ mapped-full?(avol1, m7, lptlebs(# lpt0, LEB_SIZE))
Used simplifier rules: ⊦ lptlebs(n, LEB_SIZE) * LEB_SIZE = lptsize(n, LEB_SIZE) ↔ true; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult Used terms: lptlebs(# lpt0, LEB_SIZE), m7, avol1