| # buf = PEB_SIZE, m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, EB_PAGE_SIZE, false), n0 < EB_PAGE_SIZE, abs(subarray(pebs, 0, m0), apebs), is-encoded(echdr(n), subarray(buf, 0, EB_PAGE_SIZE)), ubi-io-initial(pebs), ubi-io-initial(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ∀ n2. n2 < LEB_SIZE + EB_PAGE_SIZE → buf[EB_PAGE_SIZE + n2] = empty ⊦ buf[EB_PAGE_SIZE + n0] = empty |
# buf = PEB_SIZE, m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, EB_PAGE_SIZE, false), n0 < EB_PAGE_SIZE, n0 < PEB_SIZE, abs(subarray(pebs, 0, m0), apebs), is-encoded(echdr(n), subarray(buf, 0, EB_PAGE_SIZE)), ubi-io-initial(apebs), ubi-io-initial(pebs), EB_PAGE_SIZE ≤ PEB_SIZE, ∀ n2. n2 < LEB_SIZE + EB_PAGE_SIZE → buf[EB_PAGE_SIZE + n2] = empty ⊦ buf[EB_PAGE_SIZE + n0] = empty
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ EB_PAGE_SIZE ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic