| avol[n] = unmapped, n < # avol, awbuf-inv(avol, buffered(n)) ⊦ |
⊦ awbuf-inv(avol, bleb) ↔ ¬ ¬ ( (∀ n. n < # avol ∧ avol[n].mapped? → # avol[n].data ≤ LEB_SIZE ∧ (buffered(n) ≠ bleb → is-aligned(# avol[n].data, EB_PAGE_SIZE))) ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ avol[bleb.leb].mapped?))
Used simplifier rules: ⊦ buffered(m) = buffered(m0) ↔ m = m0; (s)% ⊦ nobuffer ≠ buffered(m); (s)% ⊦ buffered(m).leb = m; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)% ⊦ unmapped ≠ mapped(buf); (s) Used terms: buffered(n), avol