| # buf2 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, n3 + n5 + n1 = # buf3, min(n1, n2) + n4 = n1 + n5, LEB_SIZE = n0 + # buf0 + # buf, avol1[m2] = mapped(buf0 + buf), avol0[m2] = mapped(buf0 + buf), n6 + n3 < # buf, n6 < min(n1, n2), n6 < n5 + n1, n3 < n0 + # buf, (n3 + # buf0) + n2 < LEB_SIZE, # buf0 < LEB_SIZE, n2 < EB_PAGE_SIZE, m2 < # avol1, n3 < # buf, n3 + n2 < # buf, n3 < # buf3, n6 < n1 + n5, n6 < EB_PAGE_SIZE, awbuf-inv(avol1, buffered(m2)), ebm-vol-inv(avol0), is-aligned(n3 + # buf0, EB_PAGE_SIZE), n1 + n3 ≤ # buf + n0, min(n1, n2) ≤ n1 + n5, min(n1, n2) ≤ EB_PAGE_SIZE, ∀ n. n < n2 → buf2[n] = buf[n3 + n] ⊦ buf2[n6] = buf[n6 + n3] |
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic% ⊦ EB_PAGE_SIZE ≠ 0; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ ¬ m < min(n, m); (s)%m ≠ 0, is-aligned(n1, m) ⊦ is-aligned(n0 + n1, m) ↔ is-aligned(n0, m); (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic Used terms: n6