| # gndx0 = # lax0, ladr = @(m0, m1), abs-padding(buf1) ∧ abs-nodes(buf0, m + # buf1, gnd ' + gndx0, ladr ' + lax0, weak) ∨ m0 = m ∧ m1 = # buf1 ∧ abs-node(buf1, gnd) ∧ abs-nodes(buf0, m0 + # buf1, gndx0, lax0, weak), ∀ buf2, m, gndx, lax, weak. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, gndx, lax, weak) → inv-flashsize(gndx, lax) ⊦ 2 * NODE_HEADER_SIZE + gnd.alignedsize = m1 ∧ inv-flashsize(gndx0, lax0) |
# gndx0 = # lax0, abs-padding(buf1) ∧ abs-nodes(buf0, m + # buf1, gnd ' + gndx0, @(m0, m1) ' + lax0, weak) ∨ m0 = m ∧ m1 = # buf1 ∧ abs-node(buf1, gnd) ∧ abs-nodes(buf0, m + # buf1, gndx0, lax0, weak), ∀ buf2, m, gndx, lax, weak. # buf2 < #(buf1 + buf0) → abs-nodes(buf2, m, gndx, lax, weak) → inv-flashsize(gndx, lax) ⊦ 2 * NODE_HEADER_SIZE + gnd.alignedsize = m1 ∧ inv-flashsize(gndx0, lax0)