| # lpt0 = # avol0, # lpt = # avol, rofs0 ↔ rofs, adr = adr0, bleb0 = bleb, lpt = lpt0, m0 = # avol[m].data, m1 = m2, m3 = EB_PAGE_SIZE, ns = ns0, plog = plog0, avol[m].mapped?, m < # avol, abs(avol, bleb, wbuf, avol0, rofs), awbuf-inv(avol, bleb0), ebm-vol-inv(avol0), synced(avol), wbuf-cons(bleb, wbuf, avol0, rofs) ⊦ ⟪wbuf_add_log_leb#(m, m0, rofs, adr0, m2, avol0, lpt0, ns0; bleb, wbuf, plog0; err)⟫ ⟨awbuf_add_log_leb#(m, m0, adr, m1, avol, lpt, ns, rofs0; plog, bleb0; err0)⟩ ( (abs(avol, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ adr = adr0 ∧ m1 = m2 ∧ plog = plog0 ∧ lpt = lpt0 ∧ ns = ns0 ∧ (rofs0 ↔ rofs)) ∧ err = err0) |
# wbuf.content = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, avol[m] = mapped(buf), bleb0 = bleb, plog = plog0, m < # avol, abs(avol, bleb, wbuf, avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol0[bleb.leb], rofs) ⊦ ⟪wbuf_add_log_leb#(m, # avol[m].data, rofs, adr0, m2, avol0, lpt0, ns0; bleb, wbuf, plog0; err)⟫ ⟨awbuf_add_log_leb#(m, # avol[m].data, adr0, m2, avol, lpt0, ns0, rofs; plog, bleb0; err0)⟩ (abs(avol, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog = plog0 ∧ err = err0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)%⊦ wbuf-cons(bleb, wbuf, avol, rofs) ↔ # wbuf.content = EB_PAGE_SIZE ∧ ( bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs)); (s)