| avol[n0] = mapped(buf0), avol[n] = mapped(buf), n0 < # avol, n < # avol, is-aligned(# buf, EB_PAGE_SIZE), ∀ n0. n0 < # avol ∧ avol[n0].mapped? → # avol[n0].data ≤ LEB_SIZE ∧ (n0 ≠ n → is-aligned(# avol[n0].data, EB_PAGE_SIZE)) ⊦ is-aligned(# buf0, EB_PAGE_SIZE) |
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf).data = buf; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic% ⊦ mapped(buf) = mapped(buf0) ↔ buf = buf0; (s) Used terms: n0