| # apebs1 = # apebs0, # vols[v] = # avols[v], vols[v][m] = ⌜m3⌝ , avols[v][m] = mapped(buf0, m1), apebs1[m3] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs0[m3] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), m < # avols[v], v ∈ avols, v ∈ vols, # apebs0 ≤ m3, m2 ≤ m1, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs0 ∧ n < # wlar ∧ apebs0[n].vidhdr.valid? ∧ apebs0[n].vidhdr.vol = v ∧ apebs0[n].vidhdr.leb = m ∧ n ≠ n0 ⊦ buf0 = buf ∧ m0 ≤ m1 |
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat% ⊦ ¬ n < n; (s) Used terms: v, m, m3