| # lebs(avol1, m7, lptlebs(# lpt1, LEB_SIZE)) = lptsize(# lpt1, LEB_SIZE), m8 + # lpt1 = # avol1, avol1[0] = mapped(buf2), avol1[m5] = mapped(buf0), avol1[m10] = mapped(buf1), m10 < # avol2, disk-layout(mksb(adr0, m9, m10, m5, m6, m7, m8), # lpt1), ebm-vol-inv(avol1), is-encoded(mksb(adr0, m9, m10, m5, m6, m7, m8), buf2), is-encoded(log0, buf1), is-encoded(lpt1, lebs(avol1, m7, lptlebs(# lpt1, LEB_SIZE))), is-encoded-pad(orphans0, m6, buf0), mapped-full?(avol1, m7, lptlebs(# lpt1, LEB_SIZE)), m8 ≤ # avol1, m7 + lptlebs(# lpt1, LEB_SIZE) ≤ # avol1, avol1 ⊆ avol2, m3 ≠ LEB_SIZE → # buf1 = m3 ⊦ ∃ lpt. m8 + # lpt = # avol1 ∧ mapped-full?(avol2, m7, lptlebs(# lpt, LEB_SIZE)) ∧ is-encoded(lpt, lebs(avol2, m7, lptlebs(# lpt, LEB_SIZE))) |
Used simplifier rules: ⊦ avol0 ⊆ avol1 ∧ mapped-full?(avol0, n, m) → mapped-full?(avol1, n, m); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ m ≤ n → (n < m ↔ false); (s)%n + m ≤ # avol0 ⊦ mapped-full?(avol0, n, m) ∧ avol0 ⊆ avol1 → lebs(avol1, n, m) = lebs(avol0, n, m); (s) Used terms: lpt1