| # apebs0 = # wlar0, # wlar = # wlar0, mapped(apebs0[vols0[v][m].pnum].data, (avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[vols0[v][m].pnum].fill)) = mapped(buf, m0), m < # vols0[v], m < # absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v]), abs(avols0, apebs0, vols, q), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs0, vtblpnum0), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar0), v ∈ vols0, q0.lebrefs ⊆ q.lebrefs, vols ⊆ vols0, vols0⌈vols, q⌉ ⊦ vols0[v][m] = unmapped, VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols, # buf = LEB_SIZE ∧ m0 ≤ LEB_SIZE ∧ is-aligned(m0, EB_PAGE_SIZE) ∧ range=(buf, m0, emptyleb, 0, LEB_SIZE - m0) |
# apebs0 = # wlar0, # wlar = # wlar0, vols0[v][m] = ⌜n⌝ , m < # vols0[v], m < # absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v]), n < # wlar0, abs(avols0, apebs0, vols, q), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs0, vtblpnum0), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar0), v ∈ vols0, q0.lebrefs ⊆ q.lebrefs, vols ⊆ vols0, vols0⌈vols, q⌉ ⊦ VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols, # apebs0[n].data = LEB_SIZE ∧ (avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[n].fill) ≤ LEB_SIZE ∧ is-aligned((avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[n].fill), EB_PAGE_SIZE) ∧ range= (apebs0[n].data, (avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[n].fill), emptyleb, 0, LEB_SIZE - (avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[n].fill))
Used simplifier rules: lf-elim-unmapped: ⊦ vols[v][m] ≠ unmapped → (∃ n. vols[v][m] = ⌜n⌝ );%lf-mapped-in-apebs: ⊦ v ∈ vols ∧ m < # vols[v] ∧ vols[v][m] = ⌜n⌝ ∧ valid-ebatbl(apebs, wlar, vols, n0) → n < # apebs;% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ⌜m⌝ .pnum = m; (s)% ⊦ unmapped ≠ ⌜m⌝ ; (s)% ⊦ mapped(buf, m) = mapped(buf0, m0) ↔ buf = buf0 ∧ m = m0; (ws)