| # buf2 = EB_PAGE_SIZE, LEB_SIZE = n0 + # buf0, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), # buf0 < LEB_SIZE, # buf0 + 1 < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, # buf0 < logoff0 + EB_PAGE_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, m5 < # avol, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ #(buf0 + mkempbuf(n0)), 0 + EB_PAGE_SIZE ≤ # buf2 ⊦ subarray(buf2, 0, 0) + subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) + subarray(buf2, 0 + EB_PAGE_SIZE, # buf2 - 0 - EB_PAGE_SIZE) = emptypage, n0 = 0, n1 = 0 |
# buf2 = EB_PAGE_SIZE, LEB_SIZE = n0 + # buf0, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), # buf0 < LEB_SIZE, # buf0 + 1 < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, # buf0 < logoff0 + EB_PAGE_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, m5 < # avol, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE ⊦ n0 = 0, n1 = 0, subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage
Used simplifier rules: ⊦ m ≤ m; (s)% ⊦ buf + mkbuf(0) = buf; (s)% ⊦ m - m = 0; (s)% ⊦ # mkempbuf(n) = n; (s)% ⊦ #(buf + buf0) = # buf + # buf0; (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ mkbuf(0) + buf = buf; (s)% ⊦ m - 0 = m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ subarray(buf, n, 0) = mkbuf(0); (s)