| # buf2 = EB_PAGE_SIZE, LEB_SIZE = n0 + # buf0, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), # buf0 < LEB_SIZE, # buf0 + 1 < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, # buf0 < logoff0 + EB_PAGE_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, m5 < # avol, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE ⊦ n0 = 0, n1 = 0, subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage |
⊦ buf = buf0 ↔ # buf = # buf0 ∧ (∀ n. n < # buf → buf[n] = buf0[n])
# buf2 = EB_PAGE_SIZE, LEB_SIZE = n1 + logoff0, LEB_SIZE = n0 + # buf0, avol[m5] = mapped(buf0), m5 < # avol, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, # buf0 + 1 < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < LEB_SIZE, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log0, buf0), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, logoff0 ≤ # buf0 ⊦ n0 = 0, n1 = 0, # subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = # emptypage ∧ (∀ n. n < # subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) → subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)[n] = (emptypage)[n])
Used terms: emptypage, subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)