| # lpt = # avol, pstate = readonly ↔ isbuf0, adr = adr0, isbuf, keyset(gch) = gc-heap(lpt, log0), log = log0, log0 = log1, m0 = LEB_SIZE, maxino = m, ns = ns0, ginval < # lpt, abs-gstore(avol, lpt, gstore, ginval), abs-istore(avol, lpt, istore), bin-heap-inv(gch, lpt), buf-ro-rw-mode(isbuf0, bleb, lpt, avol), bufs-log-only(bleb, log0, lpt), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt, freelist), inv-index(istore, istore0), inv-journal(log, gstore, gstore0, ginval), inv-state(pstate, log, gstore, istore, isbuf), log-group-block(log0, lpt), lpt-free-unref(lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt0), lpt-leb-size(lpt), lpt-ram-flash(lpt, lpt0, log0), pstate ≠ unbuffered ∧ pstate ≠ readonly → bleb = buffered(pstate.lnum), pstate = unbuffered → bleb = nobuffer, isbuf → synced(avol) ⊦ dups(log0), synced(avol) |
Used simplifier rules: ⊦ inv-index(istore, istore0) ↔ inv(istore) ∧ inv(istore0) ∧ istore0 ⊑ istore ∧ remove-refsize0(istore0) = istore0; (s)%⊦ inv-journal(nx, gstore, gstore0, ginval) ↔ inv(gstore \ ginval) ∧ inv(gstore0) ∧ elems nx ∩ ginval = ∅ ∧ ¬ dups(nx) ∧ dom gstore0 ∪ elems nx = dom gstore ∪ ginval ∧ remove-refsize0(gstore0) = gstore0; (s)%⊦ inv-state(pstate, nx, gstore, istore, syn) ↔ ( pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore) ∧ (pstate.index? → pstate.lnum ∈ istore) ∧ (pstate = unbuffered → syn); (s)