| # lpt = # avol, # buf = EB_PAGE_SIZE, rofs ↔ false, m = m4, m0 = m3, wbuf = mkwbuf(buf, m1, m2), ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], false), bleb = buffered(m3) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m3 < # avol ∧ avol[m3].mapped? ∧ m4 = # avol[m3].data ⊦ bleb = buffered(m0), # ((wbuf.offset:= m).nbytes:= 0).content = EB_PAGE_SIZE ∧ (buffered(m0) ≠ nobuffer → buffered(m0).leb < # avol ∧ wbuf-cons((wbuf.offset:= m).nbytes:= 0, avol[buffered(m0).leb], false)) |
# lpt = # avol, # buf = EB_PAGE_SIZE, avol[m3] = mapped(buf0), m3 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], false), bleb = nobuffer ∨ m2 = 0 ⊦ bleb = buffered(m3), wbuf-cons(mkwbuf(buf, # buf0, 0), mapped(buf0), false)
Used simplifier rules: ⊦ mapped(buf).data = buf; (s)% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ buffered(m).leb = m; (s)% ⊦ nobuffer ≠ buffered(m); (s)% ⊦ mkwbuf(buf, m, m0).content = buf; (s)% ⊦ mkwbuf(buf, m, m0).nbytes:= m2 = mkwbuf(buf, m, m2); (s)% ⊦ mkwbuf(buf, m, m0).offset:= m1 = mkwbuf(buf, m1, m0); (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)