| m = LEB_SIZE, ∃ lpt, log, orphans. persistence-io-inv(sb, logoff, avol, lpt, log, orphans) ⊦ ⟪persistence_io_requires_commit#(logoff, m; ; boolvar)⟫ true |
sb.main + # lpt = # avol, avol[sb.log] = mapped(buf1), avol[sb.orph] = mapped(buf0), avol[0] = mapped(buf), disk-layout(sb, # lpt), is-encoded(sb, buf), is-encoded(lpt, lebs(avol, sb.lpt, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, sb.orphsize, buf0), mapped-full?(avol, sb.lpt, lptlebs(# lpt, LEB_SIZE)), logoff ≠ LEB_SIZE → # buf1 = logoff ⊦ ⟪persistence_io_requires_commit#(logoff, LEB_SIZE; ; boolvar)⟫ true
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)%⊦ persistence-io-inv(sb, logoff, avol, lpt, log, orphans) ↔ (∃ mainareasize. disk-layout(sb, mainareasize) ∧ sb.main + mainareasize = # avol ∧ avol[0].mapped? ∧ is-encoded(sb, avol[0].data) ∧ avol[sb.orph].mapped? ∧ is-encoded-pad(orphans, sb.orphsize, avol[sb.orph].data) ∧ avol[sb.log].mapped? ∧ (logoff ≠ LEB_SIZE → # avol[sb.log].data = logoff) ∧ is-encoded(log, avol[sb.log].data) ∧ mapped-full?(avol, sb.lpt, lptlebs(mainareasize, LEB_SIZE)) ∧ # lpt = mainareasize ∧ is-encoded (lpt, lebs(avol, sb.lpt, lptlebs(mainareasize, LEB_SIZE)))); (s)