| # buf2 = EB_PAGE_SIZE, LEB_SIZE = n0 + # buf0, LEB_SIZE = n1 + logoff0, avol[m5] = mapped(buf0), # buf0 < n1 + logoff0 + EB_PAGE_SIZE, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, m5 < # avol, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(log0, buf0), # buf0 ≤ LEB_SIZE, logoff0 ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, logoff0 + EB_PAGE_SIZE ≤ # buf0, logoff0 + EB_PAGE_SIZE ≤ # buf0 → buf0 = buf + buf1 + buf3 ∧ # buf = logoff0 ∧ # buf1 = EB_PAGE_SIZE ⊦ copy(buf0 + mkempbuf(n0), logoff0, buf2, 0, EB_PAGE_SIZE) = emptypage, n1 = 0, ∃ buf, buf1. subarray(buf0, 0, logoff0 + EB_PAGE_SIZE) = buf + buf1 ∧ is-encoded(log, buf) ∧ is-encoded(rnode(m), buf1) |
# buf1 = EB_PAGE_SIZE, # buf2 = EB_PAGE_SIZE, LEB_SIZE = (n0 + EB_PAGE_SIZE + # buf3) + # buf, avol[m5] = mapped(buf + buf1 + buf3), LEB_SIZE < 2 * EB_PAGE_SIZE + n0 + # buf3 + # buf, m5 < # avol, # buf < LEB_SIZE, EB_PAGE_SIZE < 2 * EB_PAGE_SIZE, ebm-vol-inv(avol), is-encoded(rnode(m), buf1), is-encoded(log, buf), is-encoded(log0, buf + buf1 + buf3), # buf + EB_PAGE_SIZE + # buf3 ≤ LEB_SIZE, # buf + EB_PAGE_SIZE ≤ LEB_SIZE ⊦ 2 * EB_PAGE_SIZE + n0 + # buf3 = 0, copy(buf1 + buf3 + mkempbuf(n0), 0, buf2, 0, EB_PAGE_SIZE) = emptypage, ∃ buf0, buf4. buf + buf1 = buf0 + buf4 ∧ is-encoded(log, buf0) ∧ is-encoded(rnode(m), buf4)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ 2 * m ≠ 1; (s)% ⊦ 2 * m = 0 ↔ m = 0; (s)% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1; (ws)% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1); (s)% ⊦ m +1 = m + 1; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ m0 * 1 = m0; (s)%m1 ≠ 0 ⊦ m < (* m1) * m + n0 ↔ (m1 - 1) * m + n0 ≠ 0; (s)% ⊦ m + m = 2 * m; (s)%m ≤ # buf ⊦ subarray(buf0 + buf, 0, # buf0 + m) = buf0 + subarray(buf, 0, m); (s)% ⊦ is-encoded(nx, buf) → is-aligned(# buf, EB_PAGE_SIZE); (s)% ⊦ m - m = 0; (s)%# buf ≤ n, n + m1 ≤ # buf + # buf0 ⊦ copy(buf + buf0, n, buf1, m0, m1) = copy(buf0, n - # buf, buf1, m0, m1); (s)% ⊦ m + m0 < n → ¬ n + n0 < m; (s)% ⊦ EB_PAGE_SIZE + n = 0 ↔ false; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)% ⊦ # subarray(buf, m, n) = n; (s)%transitivity: ⊦ n < n0 ∧ n0 < n1 → n < n1; (forward) from specification oelem[nat-set]%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic% ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ # mkempbuf(n) = n; (s)% ⊦ m ≤ m; (s)%n = # buf ⊦ subarray(buf + buf0, 0, n) = buf; (s)%m ≤ # buf ⊦ subarray(buf0 + buf, # buf0, m) = subarray(buf, 0, m); (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ m ≤ m + n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ #(buf + buf0) = # buf + # buf0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%is-encoded-size: ⊦ is-encoded(rnd, buf) → # buf = EB_PAGE_SIZE; (forward) from specification encoding-page-size-nonempty[encoding-ref-node]%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]%n + m ≤ # buf ⊦ subarray(buf + buf0, n, m) = subarray(buf, n, m); (s)% ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)