| # lpt2 = # avol1, # avol0 = # avol1, # lpt1 = # avol1, # buf = EB_PAGE_SIZE, adr = adr3, err = err1, lpt = lpt1, m = m5, ns = ns4, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), ⌊err1⌋ , bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs) ⊦ ∃ ns0. abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, true) ∧ adr = adr3 ∧ m = m5 ∧ plog = plog0 ∧ lpt = lpt1 ∧ ns = ns4 ∧ true ∧ ns3 = ns0 ∧ err1 = err |
# lpt2 = # avol1, # avol0 = # avol1, # lpt1 = # avol1, # buf = EB_PAGE_SIZE, avol0[bleb.leb] = mapped(buf0), bleb.leb < # avol1, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), wbuf-cons(mkwbuf(buf, m1, m2), mapped(buf0), rofs), ⌊err1⌋ ⊦ bleb = nobuffer, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, true)
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base% ⊦ abs(avol0, nobuffer, wbuf, avol1, rofs) ↔ avol0 = avol1; (s)