| EB_PAGE_SIZE = # buf1 + # buf0 % EB_PAGE_SIZE, avol[n] = mapped(buf0), LEB_SIZE < # buf0 + # buf1, n < # avol, awbuf-inv(avol, bleb) ⊦ is-aligned(# buf0, EB_PAGE_SIZE) |
EB_PAGE_SIZE = # buf1 + # buf0 % EB_PAGE_SIZE, avol[n] = mapped(buf0), LEB_SIZE < # buf0 + # buf1, n < # avol, awbuf-inv(avol, bleb) ⊦ is-aligned(# buf0, EB_PAGE_SIZE)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic