| # lpt = # avol, avol[m3] = mapped(buf1), m3 < # avol, awbuf-inv(avol, bleb), n ≤ # buf, m0 + n ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err0 = ESUCCESS, ∃ buf1. # buf1 = # buf ∧ range=(buf1, n, buf, n, # buf - n) |
# lpt = # avol, avol[m3] = mapped(buf1), m3 < # avol, awbuf-inv(avol, bleb), m0 + n ≤ LEB_SIZE, n ≤ # buf, ⌊err0⌋ ⊦ ∃ buf1. # buf1 = # buf ∧ range=(buf1, n, buf, n, # buf - n)
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)