| # avol1 = # avol0, avol0[n] = mapped(buf), n0 < # avol0, # buf0 < EB_PAGE_SIZE, n < # avol0, is-aligned(# buf, EB_PAGE_SIZE), n0 < # avol0 → (avol0[n0].mapped? → avol1[n0] = mapped(subarray(avol0[n0].data, 0, align↓(# avol0[n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)) ⊦ ( avol0[n, mapped(buf + buf0)][n0].mapped? → avol1[n0] = mapped(subarray(avol0[n, mapped(buf + buf0)][n0].data, 0, align↓(# avol0[n, mapped(buf + buf0)][n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n, mapped(buf + buf0)][n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)) |
# avol1 = # avol0, avol0[n] = mapped(buf), n < # avol0, # buf0 < EB_PAGE_SIZE, n0 < # avol0, is-aligned(# buf, EB_PAGE_SIZE), avol0[n0].mapped? → avol1[n0] = mapped(subarray(avol0[n0].data, 0, align↓(# avol0[n0].data, EB_PAGE_SIZE))), ¬ avol0[n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE) ⊦ ( avol0[n, mapped(buf + buf0)][n0].mapped? → avol1[n0] = mapped(subarray(avol0[n, mapped(buf + buf0)][n0].data, 0, align↓(# avol0[n, mapped(buf + buf0)][n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n, mapped(buf + buf0)][n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE))