| m5 + # lpt = # avol, avol[0] = mapped(buf), avol[m2] = mapped(buf0), avol[m1] = mapped(buf1), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol[m5 + m6, unmapped]), ebm-vol-inv(avol), is-encoded(log, buf1), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), ⌊err0⌋ , logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ∃ lpt0, log0. m5 + # lpt0 = # avol ∧ avol[m5 + m6, unmapped][0].mapped? ∧ is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), avol[m5 + m6, unmapped][0].data) ∧ avol[m5 + m6, unmapped][m1].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m5 + m6, unmapped][m1].data = logoff) ∧ is-encoded(log0, avol[m5 + m6, unmapped][m1].data) ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE))) |
m5 + # lpt = # avol, avol[m1] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf), m6 < # lpt, disk-layout(mksb(adr, m0, m1, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), ebm-vol-inv(avol[m5 + m6, unmapped]), is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), buf), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), ⌊err0⌋ , logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ 0 = m5 + m6, ∃ lpt0, log0. m5 + # lpt0 = # avol ∧ avol[m5 + m6, unmapped][0].mapped? ∧ is-encoded(mksb(adr, m0, m1, m2, m3, m4, m5), avol[m5 + m6, unmapped][0].data) ∧ avol[m5 + m6, unmapped][m1].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[m5 + m6, unmapped][m1].data = logoff) ∧ is-encoded(log0, avol[m5 + m6, unmapped][m1].data) ∧ mapped-full?(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)) ∧ is-encoded(lpt0, lebs(avol[m5 + m6, unmapped], m4, lptlebs(# lpt0, LEB_SIZE)))
Used simplifier rules: ⊦ m + n = 0 ↔ m = 0 ∧ n = 0; (ws)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ SB_LPT = 5; (s)%n < SB_LPT ⊦ ¬ disk-layout(mksb(adr, n0, n1, n2, m, n3, n), mainareasize); (s) Used formulas: 0 = m5 + m6