| # lpt = # avol, # buf1 = EB_PAGE_SIZE, avol[m4] = mapped(buf2), bleb = buffered(m4), buf0 = buf, m = m3, m0 = EB_PAGE_SIZE, n2 = n, ¬ rofs, wbuf = mkwbuf(buf1, m1, m2), m4 < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf1, m1, m2), mapped(buf2), rofs), 0 + n2 ≤ # buf0, wbuf.nbytes + n2 ≤ # wbuf.content, ¬ rofs → m1 + m2 + n ≤ LEB_SIZE ∧ n ≤ # buf ⊦ wbuf.nbytes + n2 ≥ m0, # ( (wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)) .nbytes:= ((wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)).nbytes + n2) ).content = EB_PAGE_SIZE ∧ m4 < # avol ∧ wbuf-cons ( (wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)) .nbytes:= ((wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)).nbytes + n2), avol[m4], rofs) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol |
# lpt = # avol, # buf1 = EB_PAGE_SIZE, avol[m4] = mapped(buf2), m2 + n < EB_PAGE_SIZE, m4 < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf1, m1, m2), mapped(buf2), false), m1 + m2 + n ≤ LEB_SIZE, n ≤ # buf ⊦ wbuf-cons(mkwbuf(copy(buf, 0, buf1, m2, n), m1, m2 + n), mapped(buf2), false)
Used simplifier rules: ⊦ m < n → m ≤ n; (s)% ⊦ mapped(buf).mapped?; (s)% ⊦ EB_PAGE_SIZE ≠ 0; (s)%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ # copy(buf, m, buf0, m0, n) = # buf0; (s)% ⊦ mkwbuf(buf, m, m0).nbytes:= m2 = mkwbuf(buf, m, m2); (s)% ⊦ mkwbuf(buf, m, m0).content:= buf0 = mkwbuf(buf0, m, m0); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ mkwbuf(buf, m, m0).content = buf; (s)% ⊦ mkwbuf(buf, m, m0).nbytes = m0; (s)