| # avol0 = # lpt + m6, # buf1 = # buf5, # buf5 = n3 + n2 + n1, # buf5 = n0 + n2 + n1, avol0[m6 + m8] = mapped(buf0), avol0[m2] = mapped(buf4), avol0[m3] = mapped(buf3), avol0[0] = mapped(buf2), m8 < # lpt, disk-layout(mksb(adr, m9, m2, m3, m4, m5, m6), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m6, # lpt)), is-encoded(log, buf4), is-encoded(lpt, lebs(avol0, m5, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m9, m2, m3, m4, m5, m6), buf2), is-encoded-pad(orphans, m4, buf3), mapped-full?(avol0, m5, lptlebs(# lpt, LEB_SIZE)), range=(buf5, n2 + n1, buf1, n2 + n1, n3), range=(buf5, 0, buf1, 0, n2), m6 ≤ # avol0, m7 + n1 ≤ LEB_SIZE, n2 + n1 ≤ # buf5, ⌊err1⌋ , logoff ≠ LEB_SIZE → # buf4 = logoff ⊦ ∃ buf. # buf = # buf5 ∧ range=(buf5, 0, buf, 0, n2) ∧ range=(buf5, n2 + n1, buf, n2 + n1, n0) ∧ ⟨buf5 := buf⟩ (buf1 = buf5) |
# avol0 = # lpt + m6, # buf1 = # buf5, # buf5 = n0 + n2 + n1, avol0[m6 + m8] = mapped(buf0), avol0[m2] = mapped(buf4), avol0[m3] = mapped(buf3), avol0[0] = mapped(buf2), m8 < # lpt, disk-layout(mksb(adr, m9, m2, m3, m4, m5, m6), # lpt), ebm-vol-inv(avol0), ebm-vol-inv(subarray(avol0, m6, # lpt)), is-encoded(log, buf4), is-encoded(lpt, lebs(avol0, m5, lptlebs(# lpt, LEB_SIZE))), is-encoded(mksb(adr, m9, m2, m3, m4, m5, m6), buf2), is-encoded-pad(orphans, m4, buf3), mapped-full?(avol0, m5, lptlebs(# lpt, LEB_SIZE)), range=(buf5, n2 + n1, buf1, n2 + n1, n0), range=(buf5, 0, buf1, 0, n2), m6 ≤ # avol0, m7 + n1 ≤ LEB_SIZE, n2 + n1 ≤ # buf5, ⌊err1⌋ , logoff ≠ LEB_SIZE → # buf4 = logoff ⊦ ∃ buf. # buf = # buf5 ∧ range=(buf5, 0, buf, 0, n2) ∧ range=(buf5, n2 + n1, buf, n2 + n1, n0) ∧ ⟨buf5 := buf⟩ (buf1 = buf5)
Used simplifier rules: eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic