| # buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs ↔ true, adr = adr0, avol = avol1, bleb = bleb0, bleb1 = bleb0, lpt = lpt0, m = m2, m0 = m4, m1 = m5, ns = ns0, plog = plog0, abs(avol1, bleb0, mkwbuf(buf, m6, m3), avol0, true), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m6, m3), avol0[bleb0.leb], true), bleb0 = buffered(m5) ∨ (bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE)) ∧ m5 < # avol1 ∧ avol1[m5].mapped? ∧ m4 = # avol1[m5].data ⊦ bleb = buffered(m1), (bleb ≠ nobuffer → avol[bleb.leb].mapped? ∧ bleb.leb < # avol ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE) → m1 < # avol → m1 < # avol ∧ (avol[m1].mapped? → avol[m1].mapped? ∧ m1 < # avol)) |
Used simplifier rules: ⊦ bleb.isbuf? ↔ bleb ≠ nobuffer; (ss)%n < # avol ⊦ abs(avol, bleb, wbuf, avol0, rofs) ∧ avol0[n] = mapped(buf) → (avol[n].mapped? ↔ true); (ss)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)