| # vols[v0] = # avols[v0], # apebs1 = # apebs0, apebs0[m4] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), vols[v][m] = ⌜n⌝ , apebs1[m4] = mkpeb(aehdr, avhdr, buf, m1, boolvar), avols[v0][m0] = mapped(buf0, m2), vols[v0][m0] = ⌜m4⌝ , m < # vols[v], m0 < # avols[v0], v ∈ vols, v0 ∈ avols, v0 ∈ vols, # apebs0 ≤ m4, m3 ≤ m2, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs0 ∧ n < # wlar ∧ apebs0[n].vidhdr.valid? ∧ apebs0[n].vidhdr.vol = v ∧ apebs0[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v ∨ m0 ≠ m ⊦ buf0 = buf ∧ m1 ≤ m2 |
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat% ⊦ ¬ n < n; (s) Used terms: v0, m0, m4