| avol[n, mapped(buf)][n0] = mapped(buf0), n0 < # avol, n < # avol, bleb ≠ nobuffer → bleb.leb < # avol ∧ avol[bleb.leb].mapped?, (avol[n].mapped? → # avol[n].data ≤ LEB_SIZE ∧ is-aligned(# avol[n].data, EB_PAGE_SIZE)) → # buf ≤ LEB_SIZE ∧ is-aligned(# buf, EB_PAGE_SIZE), avol[n0].mapped? → # avol[n0].data ≤ LEB_SIZE ∧ (buffered(n0) ≠ bleb → is-aligned(# avol[n0].data, EB_PAGE_SIZE)) ⊦ bleb = buffered(n), # buf0 ≤ LEB_SIZE ∧ (buffered(n0) ≠ bleb → is-aligned(# buf0, EB_PAGE_SIZE)) |
Used simplifier rules: ⊦ m ≠ n → avol[n, aleb][m] = avol[m]; (s)% ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf).data = buf; (s)% ⊦ m < # avol → avol[m, aleb][m] = aleb; (s)% ⊦ mapped(buf) = mapped(buf0) ↔ buf = buf0; (s) Used formulas: n0 = n