| # vols[v0] = # avols[v0], wlar[n].status = used, avols[v0][m0] = mapped(buf0, m1), vols[v0][m0] = ⌜n⌝ , apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), vols[v1][m4] = ⌜n⌝ , avhdr0 = avidhdr(v1, m4, m5, m6, m7), avhdr0.valid?, m4 < # vols[v1], n < # wlar, n < # apebs, m0 < # avols[v0], v0 ∈ vols, v0 ∈ avols, v1 ∈ vols, m3 ≤ m1, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs ∧ n < # wlar ∧ apebs[n].vidhdr.valid? ∧ apebs[n].vidhdr.vol = v ∧ apebs[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v1 ∨ m0 ≠ m4 ⊦ n = n0, buf0 = buf ∧ m2 ≤ m1 |
# vols[v0] = # avols[v0], wlar[n].status = used, avols[v0][m0] = mapped(buf0, m1), vols[v0][m0] = ⌜n⌝ , apebs[n] = mkpeb(aehdr0, avidhdr(v1, m4, m5, m6, m7), buf0, m3, boolvar0), vols[v1][m4] = ⌜n⌝ , m4 < # vols[v1], n < # wlar, n < # apebs, m0 < # avols[v0], v0 ∈ vols, v0 ∈ avols, v1 ∈ vols, m3 ≤ m1, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs ∧ n < # wlar ∧ apebs[n].vidhdr.valid? ∧ apebs[n].vidhdr.vol = v ∧ apebs[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v1 ∨ m0 ≠ m4 ⊦ n = n0, buf0 = buf ∧ m2 ≤ m1
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ avidhdr(v, m, m0, m1, m2).valid?; (s)