| # buf = (n2 + n1) * LEB_SIZE, avol[n3 + n1] = unmapped, subarray(buf, 0, n1 * LEB_SIZE) = lebs(avol, n3, n1), n3 + n1 < # avol, ebm-vol-inv(avol), n3 + n2 + n1 ≤ # avol, n1 * LEB_SIZE + LEB_SIZE ≤ # buf, ∀ n0. n3 ≤ n0 ∧ n0 < n3 + n2 + n1 ∧ n0 < # avol → avol[n0].mapped? ∧ # avol[n0].data = LEB_SIZE ⊦ n2 = 0 |
# buf = (n2 + n1) * LEB_SIZE, avol[n3 + n1] = unmapped, subarray(buf, 0, n1 * LEB_SIZE) = lebs(avol, n3, n1), n3 + n1 < # avol, ebm-vol-inv(avol), n1 * LEB_SIZE + LEB_SIZE ≤ # buf, n3 + n2 + n1 ≤ # avol, ∀ n0. n3 ≤ n0 ∧ n0 < n3 + n2 + n1 ∧ n0 < # avol → avol[n0].mapped? ∧ # avol[n0].data = LEB_SIZE ⊦ n2 = 0