| avol[n] = mapped(buf0), # buf0 < # buf, LEB_SIZE < # buf, n < # avol, # buf0 ≤ LEB_SIZE, ∀ n0. n0 < # avol ∧ avol[n0].mapped? → # avol[n0].data ≤ LEB_SIZE ∧ (n0 ≠ n → is-aligned(# avol[n0].data, EB_PAGE_SIZE)), ∀ n0. n0 < # avol ∧ avol[n, mapped(buf)][n0].mapped? → # avol[n, mapped(buf)][n0].data ≤ LEB_SIZE ∧ (n0 ≠ n → is-aligned(# avol[n0].data, EB_PAGE_SIZE)) ⊦ |
Used simplifier rules: ⊦ m < # avol → avol[m, aleb][m] = aleb; (s)% ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf).data = buf; (s)% ⊦ m < n → (n ≤ m ↔ false); (s) Used terms: n