| # avol1 = # avol, # avol1 = # lpt4, # lpt4 = n1 + n0, # avol1 = n1 + n0, # lpt3 = n1 + n0, lpt4[n] = mklp(m, m0, lpf, m6), lpt4[n0] = mklp(0, m2, LP_GROUP_NODES, m3), lpt2[n0] = mklp(0, m2, LP_GROUP_NODES, m5), lpt3[n0] = mklp(0, m2, LP_GROUP_NODES, m4), keyset(gch0) = gc-heap(lpt4, []), keyset(bin-heap(kar, m1)) = gc-heap(cleanup-lpt(lpt4, n0), []), keyset(gch1) = gc-heap(cleanup-lpt(lpt4, n0), []) -- key-index(0, n0), n0 < # lpt2, n0 < # avol, awbuf-inv(avol1, nobuffer), awbuf-inv(avol, nobuffer), bin-heap-inv(gch0, lpt4), bin-heap-inv(bin-heap(kar, m1), lpt3), bin-heap-inv(gch1, lpt2), freelist-cons(lpt4, freelist0), freelist-cons(cleanup-lpt(lpt4, n0), freelist), id-idx(cleanup-lpt(lpt4, n0), lpt3), id-idx(lpt3, lpt2), id-idx(cleanup-lpt(lpt4, n0), lpt2), synced(avol1), synced(avol), key-index(0, n0) ∈ gc-heap(cleanup-lpt(lpt4, n0), []), # lpt2 ≤ n1 + n0, ∀ n. n < # avol1 ∧ (lpt4[n].ref-size ≠ 0 ∨ lpt4[n].flags = LP_FREE) → avol1[n] = avol[n] ⊦ # gc-heap(cleanup-lpt(lpt4, n0), []) = 0, gc-heap(cleanup-lpt(lpt4, n0), []) = ∅, m1 = 0, n1 = 0, n1 + n0 = # avol ∧ (n < n1 + n0 ∧ (m ≠ 0 ∨ lpf = LP_FREE) → avol1[n] = avol[n0, unmapped][n]) |
# lpt3 = n1 + n0, # lpt4 = n1 + n0, # avol = n1 + n0, # avol1 = n1 + n0, lpt3[n0] = mklp(0, m2, LP_GROUP_NODES, m4), lpt2[n0] = mklp(0, m2, LP_GROUP_NODES, m5), lpt4[n0] = mklp(0, m2, LP_GROUP_NODES, m3), lpt4[n] = mklp(m, m0, lpf, m6), keyset(gch1) = gc-heap(cleanup-lpt(lpt4, n0), []) -- key-index(0, n0), keyset(bin-heap(kar, m1)) = gc-heap(cleanup-lpt(lpt4, n0), []), keyset(gch0) = gc-heap(lpt4, []), n < n1 + n0, n0 < # lpt2, awbuf-inv(avol, nobuffer), awbuf-inv(avol1, nobuffer), bin-heap-inv(gch1, lpt2), bin-heap-inv(bin-heap(kar, m1), lpt3), bin-heap-inv(gch0, lpt4), freelist-cons(cleanup-lpt(lpt4, n0), freelist), freelist-cons(lpt4, freelist0), id-idx(cleanup-lpt(lpt4, n0), lpt2), id-idx(lpt3, lpt2), id-idx(cleanup-lpt(lpt4, n0), lpt3), synced(avol), synced(avol1), key-index(0, n0) ∈ gc-heap(cleanup-lpt(lpt4, n0), []), # lpt2 ≤ n1 + n0, ∀ n. n < n1 + n0 ∧ (lpt4[n].ref-size ≠ 0 ∨ lpt4[n].flags = LP_FREE) → avol1[n] = avol[n], m ≠ 0 ∨ lpf = LP_FREE ⊦ # gc-heap(cleanup-lpt(lpt4, n0), []) = 0, avol1[n] = avol[n0, unmapped][n], gc-heap(cleanup-lpt(lpt4, n0), []) = ∅, m1 = 0, n1 = 0
Used simplifier rules: nat-stuff0: ⊦ n = n0 + n1 → (n0 < n ↔ n1 ≠ 0);% ⊦ m < m + n ↔ n ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic