| avol[0] = mapped(buf1), ebm-vol-inv(avol), is-encoded(sb0, buf1), LEB_SIZE ≤ # buf1 + (LEB_SIZE - # buf1), # buf1 ≤ LEB_SIZE ⊦ # avol = 0, ∀ sb, m, err. is-encoded(sb, subarray(avol[0].data + mkempbuf(LEB_SIZE - # avol[0].data), 0, encoding-size(sb, EB_PAGE_SIZE))) ∧ encoding-size(sb, EB_PAGE_SIZE) ≤ # avol[0].data + (LEB_SIZE - # avol[0].data) ∧ m = encoding-size(sb, EB_PAGE_SIZE) → err = ESUCCESS → sb = sb0 |
avol[0] = mapped(buf1), ebm-vol-inv(avol), is-encoded(sb0, buf1), is-encoded(sb, subarray(buf1 + mkempbuf(LEB_SIZE - # buf1), 0, encoding-size(sb, EB_PAGE_SIZE))), LEB_SIZE ≤ # buf1 + (LEB_SIZE - # buf1), # buf1 ≤ LEB_SIZE, encoding-size(sb, EB_PAGE_SIZE) ≤ # buf1 + (LEB_SIZE - # buf1) ⊦ # avol = 0, sb = sb0
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)