| # avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, rofs ↔ false, avol1[m5] = mapped(buf), avol = avol0, bleb = buffered(m0), bleb0 = bleb, m = # avol1[m5].data, m0 = m5, plog1 = plog0, wbuf = mkwbuf(buf0, m4, m3), avol1[m5].mapped?, m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, ¬ rofs → bleb ≠ buffered(m0) → bleb = nobuffer ∨ wbuf.nbytes = 0 → m0 < # avol → m0 < # avol ∧ (avol[m0].mapped? → avol[m0].mapped? ∧ m0 < # avol), ¬ rofs → bleb = buffered(m0) ∨ (bleb = nobuffer ∨ wbuf.nbytes = 0) ∧ m0 < # avol ∧ avol[m0].mapped? ∧ m = # avol[m0].data, bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data ⊦ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, false; plog0, bleb0; err1)⟩ (abs(avol1, bleb, wbuf, avol0, false) ∧ bleb0 = bleb ∧ plog0 = plog1 + m5 ' ∧ ESUCCESS = err1) |
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol0[m5] = mapped(buf2), avol1[m5] = mapped(buf), bleb0 = buffered(m5), plog1 = plog0, m5 < # avol1, abs(avol1, buffered(m5), mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, buffered(m5)), ebm-vol-inv(avol0), synced(avol1), wbuf-cons(mkwbuf(buf0, m4, m3), mapped(buf2), false) ⊦ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, false; plog0, bleb0; err1)⟩ (bleb0 = buffered(m5) ∧ plog0 = plog1 + m5 ' ∧ ESUCCESS = err1)
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ mapped(buf) = mapped(buf0) ↔ buf = buf0; (s)%inv-buf-in-vol: ⊦ awbuf-inv(avol, buffered(n)) → n < # avol; (forward) from specification awbuf-inv%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base% ⊦ buffered(m).leb = m; (s)% ⊦ nobuffer ≠ buffered(m); (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)