| # avol1 = # avol0, avol1[n] = mapped(buf), n < # avol0, n < # avol0 ∧ avol0[n].mapped? → is-aligned(# avol0[n].data, EB_PAGE_SIZE), ∀ n0. n0 < # avol0 → (avol0[n0].mapped? → avol1[n0] = mapped(subarray(avol0[n0].data, 0, align↓(# avol0[n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)) ⊦ is-aligned(# buf, EB_PAGE_SIZE) |
# avol1 = # avol0, avol1[n] = mapped(buf), n < # avol0, avol0[n].mapped? → is-aligned(# avol0[n].data, EB_PAGE_SIZE), ∀ n0. n0 < # avol0 → (avol0[n0].mapped? → avol1[n0] = mapped(subarray(avol0[n0].data, 0, align↓(# avol0[n0].data, EB_PAGE_SIZE)))) ∧ (¬ avol0[n0].mapped? ∧ avol1[n0].mapped? → # avol1[n0].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n0].data, EB_PAGE_SIZE)) ⊦ is-aligned(# buf, EB_PAGE_SIZE)