| ⊦ subarray(buf0 + buf1, 0, align↓(# buf0 + # buf1, EB_PAGE_SIZE)) = subarray(buf0, 0, align↓(# buf0, EB_PAGE_SIZE)) ↔ # buf0 % EB_PAGE_SIZE + # buf1 < EB_PAGE_SIZE |
⊦ buf = buf0 ↔ # buf = # buf0 ∧ (∀ n. n < # buf → buf[n] = buf0[n])
⊦ # subarray(buf0 + buf1, 0, align↓(# buf0 + # buf1, EB_PAGE_SIZE)) = # subarray(buf0, 0, align↓(# buf0, EB_PAGE_SIZE)) ∧ (∀ n. n < # subarray(buf0 + buf1, 0, align↓(# buf0 + # buf1, EB_PAGE_SIZE)) → subarray(buf0 + buf1, 0, align↓(# buf0 + # buf1, EB_PAGE_SIZE))[n] = subarray(buf0, 0, align↓(# buf0, EB_PAGE_SIZE))[n]) ↔ # buf0 % EB_PAGE_SIZE + # buf1 < EB_PAGE_SIZE
Used terms: subarray(buf0, 0, align↓(# buf0, EB_PAGE_SIZE)), subarray(buf0 + buf1, 0, align↓(# buf0 + # buf1, EB_PAGE_SIZE))