| VFS_PAGE_SIZE = n1 + n0, files2[ino4] = mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0), n0 < VFS_PAGE_SIZE, afs-cons(dirs0, files2), afs-cons (dirs0, files2 [ino4, mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0[m2, fill(content0[m2], zero, n0, n1)] upto (m2 * VFS_PAGE_SIZE + n0)) ]), files2 ~ files2 [ino4, mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0[m2, fill(content0[m2], zero, n0, n1)] upto (m2 * VFS_PAGE_SIZE + n0)) ], ino4 ∈ files2, m2 ∈ content0, m2 * VFS_PAGE_SIZE + n0 ≤ VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE ⊦ ( ( (content0.stream to m2 * VFS_PAGE_SIZE) + ((content0.stream from m2 * VFS_PAGE_SIZE) to n0) + (σ⊥ to n1) + (content0.stream from VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE) from m2 * VFS_PAGE_SIZE + n0) to (VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE - m2 * VFS_PAGE_SIZE + n0)) + σ⊥ = σ⊥, n0 = 0, n1 = 0, # ( (content0.stream to m2 * VFS_PAGE_SIZE) + ((content0.stream from m2 * VFS_PAGE_SIZE) to n0) + (σ⊥ to n1) + (content0.stream from VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE)) < ⌜VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE⌝ |
VFS_PAGE_SIZE = n1 + n0, files2[ino4] = mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0), n0 < VFS_PAGE_SIZE, afs-cons (dirs0, files2 [ino4, mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0[m2, fill(content0[m2], zero, n0, n1)] upto (m2 * VFS_PAGE_SIZE + n0)) ]), afs-cons(dirs0, files2), files2 ~ files2 [ino4, mkfile(m2 * VFS_PAGE_SIZE + n0, md, # links(ino4, dirs0), content0[m2, fill(content0[m2], zero, n0, n1)] upto (m2 * VFS_PAGE_SIZE + n0)) ], m2 ∈ content0, ino4 ∈ files2 ⊦ ( ( (content0.stream to m2 * VFS_PAGE_SIZE) + ((content0.stream from m2 * VFS_PAGE_SIZE) to n0) + (σ⊥ to n1) + (content0.stream from VFS_PAGE_SIZE * m2 + VFS_PAGE_SIZE) from m2 * VFS_PAGE_SIZE + n0) to (VFS_PAGE_SIZE - n0)) + σ⊥ = σ⊥, n0 = 0, n1 = 0
Used simplifier rules: ⊦ ⌜m + n⌝ = ⌜m⌝ + ⌜n⌝ ; (s)%append-assoc: ⊦ (σ0 + σ3) + σ4 = σ0 + σ3 + σ4; from specification stream[buffer-inf]%add-comm: ⊦ n∞1 + n∞2 = n∞2 + n∞1; from specification nat-inf%add-assoc: ⊦ (n∞ + n∞1) + n∞2 = n∞ + n∞1 + n∞2; from specification nat-inf% ⊦ ⌜m⌝ + ∞ = ∞; (s)% ⊦ # σ⊥ = ∞; (s)% ⊦ #(content.stream from n) = ∞; (s)%¬ # σ0 < ⌜n⌝ ⊦ #(σ0 to n) = ⌜n⌝ ; (s)% ⊦ ¬ ∞ < n∞; (s)% ⊦ # content.stream = ∞; (s)% ⊦ #(σ0 + σ2) = # σ0 + # σ2; (s)% ⊦ m < n → m ≤ n; (s)% ⊦ m + n ≤ m + n0 ↔ n ≤ n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n - n + n1 = m - n1; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult