| # buf3 = EB_PAGE_SIZE, m5 + # lpt = # avol, avol[m6] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf2), avol0 = avol, disk-layout(mksb(adr, m7, m6, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), is-encoded(rnode(m8), buf3), is-encoded(mksb(adr, m7, m6, m2, m3, m4, m5), buf2), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), # buf1 + EB_PAGE_SIZE ≤ LEB_SIZE ⊦ # buf1 = LEB_SIZE, ebm-vol-inv(avol) ∧ m6 < # avol ∧ avol[m6].mapped? ∧ # avol[m6].data ≤ # buf1 ∧ is-aligned(# buf1, EB_PAGE_SIZE) ∧ is-aligned(EB_PAGE_SIZE, EB_PAGE_SIZE) ∧ # buf1 + EB_PAGE_SIZE ≤ LEB_SIZE ∧ 0 + EB_PAGE_SIZE ≤ # buf3 |
# buf3 = EB_PAGE_SIZE, m5 + # lpt = # avol, avol[m6] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf2), disk-layout(mksb(adr, m7, m6, m2, m3, m4, m5), # lpt), ebm-vol-inv(avol), is-encoded(rnode(m8), buf3), is-encoded(mksb(adr, m7, m6, m2, m3, m4, m5), buf2), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), # buf1 + EB_PAGE_SIZE ≤ LEB_SIZE, # avol ≤ m6 ⊦ # buf1 = LEB_SIZE
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ m; (s)% ⊦ mapped(buf).data = buf; (s)% ⊦ mapped(buf).mapped?; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)%n ≠ 0 ⊦ is-aligned(n, n); (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)% ⊦ is-encoded(nx, buf) → is-aligned(# buf, EB_PAGE_SIZE); (s)