| # buf = (n2 + n1) * LEB_SIZE, avol[n3 + n1] = unmapped, subarray(buf, 0, n1 * LEB_SIZE) = lebs(avol, n3, n1), n3 + n1 < # avol, ebm-vol-inv(avol), n1 * LEB_SIZE + LEB_SIZE ≤ # buf, n3 + n2 + n1 ≤ # avol, ∀ n0. n3 ≤ n0 ∧ n0 < n3 + n2 + n1 ∧ n0 < # avol → avol[n0].mapped? ∧ # avol[n0].data = LEB_SIZE ⊦ n2 = 0 |
Used simplifier rules: ⊦ m ≤ m + n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)% ⊦ unmapped ≠ mapped(buf); (s) Used terms: n3 + n1