| m < # avols[v], ebm-cons(avols), is-aligned(n, EB_PAGE_SIZE), v ∈ avols, n ≤ # buf, n ≤ LEB_SIZE ⊦ ⟪ebm_change#(v, m, n, buf; avols; err)⟫ ebm-cons(avols) |
m < # avols[v], ebm-cons(avols), is-aligned(n, EB_PAGE_SIZE), v ∈ avols, n ≤ # buf, n ≤ LEB_SIZE ⊦ ⟪ebm_change#(v, m, n, buf; avols; err)⟫ ebm-cons(avols)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic