| # buf2 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, # buf3 = n4 + n2, n1 + n5 = n4 + n2, (n0 + # buf4) + n3 + n2 = LEB_SIZE, avol1[m2] = mapped(buf4 + subarray(buf2, 0, n2 + n0)), avol0[m2] = mapped(buf4), n < n4 + n2, n < n2 + n4, n0 < EB_PAGE_SIZE, n2 + n0 < EB_PAGE_SIZE, m2 < # avol1, n < n2, awbuf-inv(avol1, buffered(m2)), ebm-vol-inv(avol0), is-aligned(# buf4, EB_PAGE_SIZE), n2 ≤ n1, # buf4 ≤ LEB_SIZE, n1 ≤ n2 + n3 ⊦ EB_PAGE_SIZE = 1, buf2[n0 + n] = (n < n1 ⊃ (subarray(buf2, 0, n2 + n0) + mkempbuf(n3))[n0 + n];subarray(buf3, n1, n5)[n - n1]), n0 = 0 |
# buf2 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, # buf3 = n4 + n2, n1 + n5 = n4 + n2, (n0 + # buf4) + n3 + n2 = LEB_SIZE, avol1[m2] = mapped(buf4 + subarray(buf2, 0, n2 + n0)), avol0[m2] = mapped(buf4), n < n1, n < n4 + n2, n < n2 + n4, n0 < EB_PAGE_SIZE, n2 + n0 < EB_PAGE_SIZE, m2 < # avol1, n < n2, n < n2 + n3, awbuf-inv(avol1, buffered(m2)), ebm-vol-inv(avol0), is-aligned(# buf4, EB_PAGE_SIZE), n2 ≤ n1, # buf4 ≤ LEB_SIZE, n1 ≤ n2 + n3 ⊦ EB_PAGE_SIZE = 1, buf2[n0 + n] = (subarray(buf2, 0, n2 + n0) + mkempbuf(n3))[n0 + n], n0 = 0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic