| # gndx = # lax, # lpt = # avol, # lpt0 = # avol, LEB_SIZE = n0 + # buf1, avol[m5] = mapped(buf1), err = ENOENT, m0 = m1, # buf1 < m1 + 2 * NODE_HEADER_SIZE + align↑(m, 2 * NODE_HEADER_SIZE), m5 < # avol, m1 < LEB_SIZE, LEB_SIZE < m1 + 2 * NODE_HEADER_SIZE + align↑(m, 2 * NODE_HEADER_SIZE), abs-nodes(buf1, gndx, lax, true), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), is-encoded(nodeheader(m, boolvar), subarray(buf1 + mkempbuf(n0), m1, NODE_HEADER_SIZE)), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), read-gblock-inv(m5, m1, ax, gndx0, ax1, gndx2, buf1, false), m1 + NODE_HEADER_SIZE ≤ LEB_SIZE, # buf1 ≤ LEB_SIZE ⊦ isempty(buf1 + mkempbuf(n0), m1, NODE_HEADER_SIZE), (err = ESUCCESS ∨ err = ENOENT ∨ ⌊err⌋ ) ∧ (err = ESUCCESS ∨ err = ENOENT → read-gblock-inv(m5, m0, ax, gndx0, ax1, gndx2, avol[m5].data, err = ENOENT)) ∧ (err ≠ ESUCCESS ⊃ 0;LEB_SIZE - m0) + m1 < LEB_SIZE |
# gndx = # lax, # lpt = # avol, # lpt0 = # avol, LEB_SIZE = n0 + # buf1, avol[m5] = mapped(buf1), # buf1 < m1 + 2 * NODE_HEADER_SIZE + align↑(m, 2 * NODE_HEADER_SIZE), m5 < # avol, m1 < LEB_SIZE, LEB_SIZE < m1 + 2 * NODE_HEADER_SIZE + align↑(m, 2 * NODE_HEADER_SIZE), abs-nodes(buf1, gndx, lax, true), awbuf-inv(avol, bleb), buf-ro-rw-mode(isbuf, bleb, lpt0, avol), bufs-log-only(bleb, log0, lpt0), is-encoded(nodeheader(m, boolvar), subarray(buf1 + mkempbuf(n0), m1, NODE_HEADER_SIZE)), lpt-free-unref(lpt), lpt-leb-size(lpt), lpt-ram-flash(lpt0, lpt, log0), read-gblock-inv(m5, m1, ax, gndx0, ax1, gndx2, buf1, false), m1 + NODE_HEADER_SIZE ≤ LEB_SIZE, # buf1 ≤ LEB_SIZE ⊦ isempty(buf1 + mkempbuf(n0), m1, NODE_HEADER_SIZE), read-gblock-inv(m5, m1, ax, gndx0, ax1, gndx2, buf1, true)
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ ESUCCESS ≠ ENOENT; (s)