| # buf1 = EB_PAGE_SIZE, # lpt = # avol, avol[m4] = mapped(buf2), bleb = buffered(m4), buf0 = buf, m = m3, m0 = EB_PAGE_SIZE, n1 = align↓(wbuf.nbytes + n2, m0), n2 = n, ¬ rofs, wbuf = mkwbuf(buf1, m1, m2), m4 < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf1, m1, m2), mapped(buf2), rofs), wbuf.nbytes + n2 ≥ m0, ¬ rofs → m1 + m2 + n ≤ LEB_SIZE ∧ n ≤ # buf ⊦ n1 ≥ wbuf.nbytes |
# buf1 = EB_PAGE_SIZE, # lpt = # avol, avol[m4] = mapped(buf2), align↓(m2 + n, EB_PAGE_SIZE) < m2, m4 < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf1, m1, m2), mapped(buf2), false), n ≤ # buf, m1 + m2 + n ≤ LEB_SIZE, EB_PAGE_SIZE ≤ m2 + n ⊦
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ m < n → n ≠ 0; (s)%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ mkwbuf(buf, m, m0).nbytes = m0; (s)