| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # lpt = # avol, err = err0, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err = ESUCCESS, (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], true)) ∧ # lpt = # avol |
# lpt = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, avol[bleb.leb] = mapped(buf0), bleb.leb < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf, m1, m2), mapped(buf0), rofs), ⌊err0⌋ ⊦ bleb = nobuffer, wbuf-cons(mkwbuf(buf, m1, m2), mapped(buf0), true)
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base% ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)