| # lpt = # avol, avol[m3] = mapped(buf1), m3 < # avol, awbuf-inv(avol, bleb), n ≤ # buf, m0 + n ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err0 = ESUCCESS, ∀ buf1. # buf1 = # buf → # buf ≥ n |
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)