| # buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol0[m5] = mapped(buf0), m5 < # avol1, n < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → avol1[bleb0.leb].mapped? ∧ bleb0.leb < # avol1 ∧ bleb0.isbuf?, bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 = nobuffer ∨ m3 = 0, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE) ⊦ avol1[n] = avol0[n], bleb0 = buffered(m5), bleb0 = nobuffer, n = m5 |
# avol0 = # avol1, # lpt0 = # avol1, # buf = EB_PAGE_SIZE, avol0[n0] = mapped(buf2), avol1[n0] = mapped(buf1), avol0[m5] = mapped(buf0), n0 < # avol1, n < # avol1, m5 < # avol1, abs(avol1, buffered(n0), mkwbuf(buf, m4, 0), avol0, false), awbuf-inv(avol1, buffered(n0)), ebm-vol-inv(avol0), is-aligned(# buf1, EB_PAGE_SIZE), wbuf-cons(mkwbuf(buf, m4, 0), mapped(buf2), false) ⊦ avol1[n] = avol0[n], n = m5, n0 = m5
Used simplifier rules: ⊦ mapped(buf).mapped?; (s)%inv-buf-in-vol: ⊦ awbuf-inv(avol, buffered(n)) → n < # avol; (forward) from specification awbuf-inv% ⊦ mapped(buf).data = buf; (s)% ⊦ nobuffer ≠ buffered(m); (s)% ⊦ buffered(m) = buffered(m0) ↔ m = m0; (s)% ⊦ buffered(m).leb = m; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%wbuf-cons-mapped: ⊦ wbuf-cons(wbuf, aleb, boolvar) → aleb.mapped?; (forward) from specification wbuf-base% ⊦ bleb.isbuf? ↔ (∃ n. bleb = buffered(n)); (as)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)