| # wlar = # apebs, wlar[m, wl-entry(m0, stat)][m1] = wl-entry(m6, used), recs[avhdr.vol × avhdr.leb] = recovery-entry(m3, m4), apebs[m1] = mkpeb(aehdr, avhdr, buf, m5, boolvar), m < # apebs, m1 < # apebs, m1 ≤ m, ∀ ladr, m1. ladr ∈ recs ∧ recs[ladr].pnum = m1 ↔ wlar[m1].status = used ∧ m1 < m ∧ apebs[m1].vidhdr.vol = ladr.vol ∧ apebs[m1].vidhdr.leb = ladr.leb ⊦ m1 = m, stat = used, avhdr.vol × avhdr.leb ∈ recs ∧ m3 = m1 |
# wlar = # apebs, apebs[m1] = mkpeb(aehdr, avhdr, buf, m5, boolvar), recs[avhdr.vol × avhdr.leb] = recovery-entry(m3, m4), wlar[m1] = wl-entry(m6, used), m1 + 1 < # apebs, m1 < # apebs, m < # apebs, m1 < m, ∀ ladr, m1. ladr ∈ recs ∧ recs[ladr].pnum = m1 ↔ wlar[m1].status = used ∧ m1 < m ∧ apebs[m1].vidhdr.vol = ladr.vol ∧ apebs[m1].vidhdr.leb = ladr.leb ⊦ m1 = m, stat = used, avhdr.vol × avhdr.leb ∈ recs ∧ m3 = m1
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m +1 = m + 1; (s)% ⊦ m < n → n ≠ 0; (s)%lf: ⊦ m < n ∧ n < n0 → m +1 < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)% ⊦ m ≠ n → wlar[n, wle][m] = wlar[m]; (s)