| avol[n] = mapped(buf0), avol[n0] = mapped(buf1), n < # avol, n0 < # avol, is-aligned(# buf, EB_PAGE_SIZE), ∀ n0. n0 < # avol ∧ avol[n0].mapped? → # avol[n0].data ≤ LEB_SIZE ∧ (n0 ≠ n → is-aligned(# avol[n0].data, EB_PAGE_SIZE)) ⊦ n0 = n, is-aligned(# buf1, EB_PAGE_SIZE) |
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf).data = buf; (s) Used terms: n0