| # buf2 = EB_PAGE_SIZE, LEB_SIZE = n0 + # buf0, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage, logoff0 < # buf0, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, m5 < # avol, logoff0 < LEB_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log0, buf0), is-encoded(log, subarray(buf0, 0, logoff0)), # buf0 ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ # buf0 → buf0 = buf + buf1 + buf3 ∧ # buf = logoff0 ∧ # buf1 = EB_PAGE_SIZE ⊦ # buf0 = logoff0, log0 = log, n1 = 0 |
# buf2 = EB_PAGE_SIZE, LEB_SIZE = n1 + logoff0, LEB_SIZE = n0 + # buf0, avol[m5] = mapped(buf0), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, m5 < # avol, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < # buf0, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, # buf0 ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ # buf0 → buf0 = buf + buf1 + buf3 ∧ # buf = logoff0 ∧ # buf1 = EB_PAGE_SIZE ⊦ # buf0 = logoff0, log0 = log, n1 = 0
# buf2 = EB_PAGE_SIZE, LEB_SIZE = n1 + logoff0, LEB_SIZE = n0 + # buf0, avol[m5] = mapped(buf0), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, m5 < # avol, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < # buf0, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, # buf0 ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ # buf0 → buf0 = buf + buf1 + buf3 ∧ # buf = logoff0 ∧ # buf1 = EB_PAGE_SIZE ⊦ # buf0 = logoff0, log0 = log, n1 = 0, logoff0 + EB_PAGE_SIZE ≤ # buf0
Used formulas: logoff0 + EB_PAGE_SIZE ≤ # buf0