| # gndx = # lax, # lpt = # avol, # lpt0 = # avol, LEB_SIZE = n0 + # buf1, avol[m5] = mapped(buf1), m5 < # avol, abs-nodes(buf1, gndx, lax, true), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), read-gblock-inv(m5, m0, ax, gndx0, ax0, gndx1, buf1, false), LEB_SIZE ≤ m0, LEB_SIZE ≤ # buf1 + n0, # buf1 ≤ LEB_SIZE, # buf1 ≤ m0 ⊦ ax = ax0 + lax.to-adr(m5) ∧ gndx0 = gndx1 + gndx |
# gndx = # lax, # lpt = # avol, # lpt0 = # avol, LEB_SIZE = n0 + # buf1, avol[m5] = mapped(buf1), m5 < # avol, abs-nodes(buf1, gndx, lax, true), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), read-gblock-inv(m5, m0, ax, gndx0, ax0, gndx1, buf1, false), LEB_SIZE ≤ m0, # buf1 ≤ LEB_SIZE, # buf1 ≤ m0 ⊦ ax = ax0 + lax.to-adr(m5) ∧ gndx0 = gndx1 + gndx
Used simplifier rules: ⊦ m ≤ m; (s)%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat%c: ⊦ m + n = n + m; from specification nat-basic