| # buf2 = EB_PAGE_SIZE, LEB_SIZE = n1 + logoff0, LEB_SIZE = n0 + # buf0, avol[m5] = mapped(buf0), m5 < # avol, LEB_SIZE < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < logoff0 + EB_PAGE_SIZE, logoff0 < LEB_SIZE, # buf0 + 1 < n1 + logoff0 + EB_PAGE_SIZE, # buf0 < LEB_SIZE, ebm-vol-inv(avol), is-aligned(logoff0, EB_PAGE_SIZE), is-encoded(log0, buf0), is-encoded(log, subarray(buf0, 0, logoff0)), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE)), logoff0 + EB_PAGE_SIZE ≤ LEB_SIZE, logoff0 ≤ # buf0, is-aligned(logoff0, EB_PAGE_SIZE) ∧ logoff0 < # buf0 ∧ # buf0 < logoff0 + EB_PAGE_SIZE → ¬ is-aligned(# buf0, EB_PAGE_SIZE) ⊦ n0 = 0, n1 = 0, subarray(buf0 + mkempbuf(n0), logoff0, EB_PAGE_SIZE) = emptypage, ∃ buf, buf1. subarray(buf0, 0, logoff0 + EB_PAGE_SIZE) = buf + buf1 ∧ is-encoded(log, buf) ∧ is-encoded(rnode(m), buf1), logoff0 = # buf0 ∧ EB_PAGE_SIZE ≤ n0 |
# buf2 = EB_PAGE_SIZE, LEB_SIZE = n1 + # buf0, avol[m5] = mapped(buf0), n1 < EB_PAGE_SIZE, m5 < # avol, LEB_SIZE < n1 + # buf0 + EB_PAGE_SIZE, # buf0 < LEB_SIZE, ebm-vol-inv(avol), is-encoded(log, buf0), is-encoded(rnode(m), subarray(buf0 + mkempbuf(n1), # buf0, EB_PAGE_SIZE)), # buf0 + EB_PAGE_SIZE ≤ LEB_SIZE ⊦ n1 = 0, subarray(buf0 + mkempbuf(n1), # buf0, EB_PAGE_SIZE) = emptypage, ∃ buf, buf1. subarray(buf0, 0, # buf0 + EB_PAGE_SIZE) = buf + buf1 ∧ is-encoded(log, buf) ∧ is-encoded(rnode(m), buf1)
Used simplifier rules: ⊦ m +1 = m + 1; (s)% ⊦ # subarray(buf, m, n) = n; (s)%is-encoded-size: ⊦ is-encoded(rnd, buf) → # buf = EB_PAGE_SIZE; (forward) from specification encoding-page-size-nonempty[encoding-ref-node]%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%transitivity: ⊦ n < n0 ∧ n0 < n1 → n < n1; (forward) from specification oelem[nat-set]%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic% ⊦ m + n = 1 ↔ m = 0 ∧ n = 1 ∨ n = 0 ∧ m = 1; (ws)% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1); (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ EB_PAGE_SIZE + n = 0 ↔ false; (s)% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ m ≤ m; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ m ≤ n → (n ≤ m ↔ m = n); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ is-encoded(nx0, buf) → (is-encoded(nx1, buf) ↔ nx0 = nx1); (s)%# buf = n ⊦ subarray(buf, 0, n) = buf; (s)% ⊦ m < n → ¬ n < m; (s)% ⊦ n ≠ n0 → (n < n0 ↔ ¬ n0 < n); (ss)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)% ⊦ is-encoded(nx, buf) → is-aligned(# buf, EB_PAGE_SIZE); (s)