[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem inv-change
ebm-cons(avols), v ∈ avols, m < # avols[v], n ≤ LEB_SIZE, n ≤ # buf, is-aligned(n, EB_PAGE_SIZE) ⊦ ⟪ebm_change#(v, m, n, buf; avols; err)⟫ ebm-cons(avols)
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 17
Used lemmas:
change
,
Used spec theorems:
array-splice
/buffer/
range-eq-ext
array-splice
/buffer/
append-at
Used simplifier rules:
error-class
/
esuccess
leb
/
sel-01
nat
/
add
leb
/
sel
leb
/
test-03
ebm-base
/
valid-leb-def
ebm-base
/
ebm-cons-write
nat
/
ge
nat
/
elim-sub
eraseblock
/
lebsize-neq-zero
nat-basic
/
lf-01
nat-basic
/
lf-02
nat
/
le-def
eraseblock
/
emptyleb-at
nat
/
fle-01
nat
/
fle
nat-basic
/
f
nat
/
let
eraseblock
/
emptyleb-size
nat-basic
/
add-base
nat
/
ler
nat
/
lep-02
array-splice
/buffer/
append-a
array-splice
/buffer/
append-len
array-copy
/buffer/
size-subarray
nat-basic
/
l-02
nat-basic
/
a
nat-basic
/
c
nat
/
eq-01
array-splice
/buffer/
emparray-at
nat
/
lels-02
array-splice
/buffer/
emparray-len
nat-basic
/
l
nat
/
lels
nat
/
ls-le-simp
array-copy
/buffer/
subarray-elim
error
/
disj-91
error-class
/
ecommit