| ino ∈ files1, ∀ ino. ino ∈ files0 → valid-content(ino, files0), ∀ ino, n. (ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size) → ino ∈ files1 ∧ n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size ⊦ ∀ n. n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size |
n ∈ files1[ino].content, ino ∈ files1, files1[ino].size ≤ n * VFS_PAGE_SIZE, ∀ ino, n. (ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size) → ino ∈ files1 ∧ n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size, ∀ ino. ino ∈ files0 → valid-content(ino, files0) ⊦
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)