| # buf = (n2 + n1) * LEB_SIZE, avol[n3 + n1] = mapped(buf0), subarray(buf, 0, n1 * LEB_SIZE) = lebs(avol, n3, n1), n3 + n1 < # avol, ebm-vol-inv(avol), mapped-full?(avol, n3, n2 + n1), n3 + n2 + n1 ≤ # avol, n1 * LEB_SIZE + LEB_SIZE ≤ # buf ⊦ n2 = 0, ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS |
Used simplifier rules: ⊦ ESUCCESS ≠ ECOMMIT; (s)% ⊦ ⌊ECOMMIT⌋ ; (s)%# buf = n ⊦ subarray(buf, 0, n) = buf; (s) Used terms: ECOMMIT