| wbuf-cons(bleb, wbuf, avol, rofs) ⊦ ⟪wbuf_destroy_buf#(rofs; bleb; err)⟫ wbuf-cons(bleb, wbuf, avol, rofs) |
# wbuf.content = EB_PAGE_SIZE, bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs) ⊦ ⟪wbuf_destroy_buf#(rofs; bleb; err)⟫ (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs))
Used simplifier rules: ⊦ wbuf-cons(bleb, wbuf, avol, rofs) ↔ # wbuf.content = EB_PAGE_SIZE ∧ ( bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs)); (s)