| # wbuf.content = EB_PAGE_SIZE, # lpt = # avol, avol[m] = mapped(buf0), m < # avol, ebm-vol-inv(avol), m0 + n ≤ LEB_SIZE, n ≤ # buf, bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs) ⊦ ⟪wbuf_read_buf#(m, m0, n, bleb, wbuf, adr, m1, plog, avol, lpt, ns; buf; err)⟫ true |
# lpt = # avol, # buf1 = EB_PAGE_SIZE, avol[m] = mapped(buf0), wbuf = mkwbuf(buf1, m2, m3), m < # avol, ebm-vol-inv(avol), n ≤ # buf, m0 + n ≤ LEB_SIZE, bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs) ⊦ ⟪wbuf_read_buf#(m, m0, n, bleb, wbuf, adr, m1, plog, avol, lpt, ns; buf; err)⟫ true
Used simplifier rules: ⊦ (buf = wbuf.content ∧ m = wbuf.offset) ∧ m0 = wbuf.nbytes ↔ wbuf = mkwbuf(buf, m, m0); (elim) Used terms: wbuf, buf1, m1, m2