| # buf3 = EB_PAGE_SIZE, m5 + # lpt = # avol, mksb(adr, m7, m6, m2, m3, m4, m5).main = SB_LPT + 2 * lptlebs(# lpt, LEB_SIZE), avol[0] = mapped(buf2), avol[m2] = mapped(buf0), avol[m6] = mapped(buf1), m6 < # avol, ebm-vol-inv(avol), ebm-vol-inv(avol[m6, mapped(buf1 + buf3)]), is-encoded(log, buf1), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m7, m6, m2, m3, m4, m5), buf2), is-encoded(rnode(m8), buf3), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), # buf1 + EB_PAGE_SIZE ≤ LEB_SIZE, mksb(adr, m7, m6, m2, m3, m4, m5).log = SB_LOG ∧ mksb(adr, m7, m6, m2, m3, m4, m5).orph = SB_ORPH ∧ mksb(adr, m7, m6, m2, m3, m4, m5).lpt = SB_LPT ∨ mksb(adr, m7, m6, m2, m3, m4, m5).log = SB_LOG + 1 ∧ mksb(adr, m7, m6, m2, m3, m4, m5).orph = SB_ORPH + 1 ∧ mksb(adr, m7, m6, m2, m3, m4, m5).lpt = SB_LPT + lptlebs(# lpt, LEB_SIZE) ⊦ # buf1 = LEB_SIZE, mapped-full?(avol[m6, mapped(buf1 + buf3)], m4, lptlebs(# lpt, LEB_SIZE)) |
# buf3 = EB_PAGE_SIZE, (5 + 2 * lptlebs(# lpt, LEB_SIZE)) + # lpt = # avol, avol[m6] = mapped(buf1), avol[m2] = mapped(buf0), avol[0] = mapped(buf2), m6 < # avol, ebm-vol-inv(avol[m6, mapped(buf1 + buf3)]), ebm-vol-inv(avol), is-encoded(rnode(m8), buf3), is-encoded(mksb(adr, m7, m6, m2, m3, m4, 5 + 2 * lptlebs(# lpt, LEB_SIZE)), buf2), is-encoded(lpt, lebs(avol, m4, lptlebs(# lpt, LEB_SIZE))), is-encoded(log, buf1), is-encoded-pad(orphans, m3, buf0), mapped-full?(avol, m4, lptlebs(# lpt, LEB_SIZE)), # buf1 + EB_PAGE_SIZE ≤ LEB_SIZE, m6 = 1 ∧ m2 = 3 ∧ m4 = 5 ∨ m6 = 2 ∧ m2 = 4 ∧ m4 = 5 + lptlebs(# lpt, LEB_SIZE) ⊦ # buf1 = LEB_SIZE, mapped-full?(avol[m6, mapped(buf1 + buf3)], m4, lptlebs(# lpt, LEB_SIZE))
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ mksb(adr, m, m0, m1, m2, m3, m4).lpt = m3; (s)% ⊦ SB_ORPH = 3; (s)% ⊦ mksb(adr, m, m0, m1, m2, m3, m4).orph = m1; (s)% ⊦ SB_LOG = 1; (s)% ⊦ mksb(adr, m, m0, m1, m2, m3, m4).log = m0; (s)% ⊦ SB_LPT = 5; (s)% ⊦ mksb(adr, m, m0, m1, m2, m3, m4).main = m4; (s)