| # buf = EB_PAGE_SIZE, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), buf1 = buf, err = err0, n = EB_PAGE_SIZE, n0 = 0, logoff0 < LEB_SIZE, m5 < # avol, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err = ESUCCESS, n1 = 0, ∀ buf. # buf = # buf1 → range=(buf1, 0, buf, 0, n0) → # buf1 ≥ n0 + n |
Used simplifier rules: ⊦ m < n → ¬ n < m; (s)% ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)% ⊦ is-encoded(nx0, buf) → (is-encoded(nx1, buf) ↔ nx0 = nx1); (s)%# buf = n ⊦ subarray(buf, 0, n) = buf; (s)% ⊦ ¬ n < n; (s)% ⊦ m < n → n ≠ 0; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)% ⊦ 0 ≤ m; (s)% ⊦ range=(buf, n0, buf0, n1, 0) ↔ n0 ≤ # buf ∧ n1 ≤ # buf0; (s)