| wlar[n1] = wl-entry(m2, stat), apebs[n1] = mkpeb(aehdr, avhdr, buf, m3, boolvar), vols[v][m] = ⌜n⌝ , m1 = m, m < # vols[v], v ∈ vols, ∀ v, m, n1. vols[v][m] = ⌜n1⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n1].status = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ apebs[n1].vidhdr.valid? ∧ apebs[n1].vidhdr.vol = v ∧ apebs[n1].vidhdr.leb = m ∧ n1 ≠ n0 ⊦ vols[v][m, unmapped][m1] = ⌜n1⌝ ∧ m1 < # vols[v] ↔ stat = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ avhdr.valid? ∧ avhdr.vol = v ∧ avhdr.leb = m1 ∧ n1 ≠ n0, n1 = n |
vols[avhdr.vol][avhdr.leb] = ⌜n⌝ , apebs[n1] = mkpeb(aehdr, avhdr, buf, m3, boolvar), wlar[n1] = wl-entry(m2, used), avhdr.valid?, n1 < # apebs, n1 < # wlar, avhdr.leb < # vols[avhdr.vol], avhdr.vol ∈ vols, ∀ v, m, n1. vols[v][m] = ⌜n1⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n1].status = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ apebs[n1].vidhdr.valid? ∧ apebs[n1].vidhdr.vol = v ∧ apebs[n1].vidhdr.leb = m ∧ n1 ≠ n0 ⊦ n1 = n, n1 = n0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ unmapped ≠ ⌜m⌝ ; (s)% ⊦ m < # ebatbl → ebatbl[m, ebae][m] = ebae; (s)