| n < # avol1, n0 < n + m, n0 < # avol1, n ≤ n0, avol0 ⊆ avol1, n ≤ n0 ∧ n0 < n + m ∧ n0 < # avol0 → avol0[n0].mapped? ∧ # avol0[n0].data = LEB_SIZE ⊦ m = 0, avol1[n0].mapped? ∧ # avol1[n0].data = LEB_SIZE |
# buf = LEB_SIZE, avol0[n0] = mapped(buf), n < # avol0, n0 < # avol0, n0 < # avol1, n0 < n + m, n < # avol1, n ≤ n0, avol0 ⊆ avol1 ⊦ m = 0, avol1[n0].mapped? ∧ # avol1[n0].data = LEB_SIZE
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)% ⊦ mapped(buf).data = buf; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)% ⊦ avol0 ⊆ avol1 → ¬ # avol0 < # avol1; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ m < n ↔ ¬ n ≤ m; (ss)