| # avol1 = # avol0, n < # avol0, ∀ n0. n0 < # avol0 → (avol0[n, aleb][n0].mapped? → avol1[n0] = mapped(subarray(avol0[n, aleb][n0].data, 0, align↓(# avol0[n, aleb][n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n, aleb][n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)), ∀ n0. n0 < # avol0 → (avol0[n0].mapped? → avol1[n0] = mapped(subarray(avol0[n0].data, 0, align↓(# avol0[n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)) ⊦ (avol0[n].mapped? → avol1[n] = mapped(subarray(avol0[n].data, 0, align↓(# avol0[n].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n].mapped? ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE)) |
Used terms: n