| # avol0 = # avol1, # lpt0 = # avol1, # buf2 = EB_PAGE_SIZE, n3 + m0 = n4 + # buf, LEB_SIZE = n1 + # buf1, LEB_SIZE = n0 + # buf, avol1[n2] = mapped(buf1), avol0[n2] = mapped(buf), n3 < n, n3 + m0 < LEB_SIZE, n3 < # buf3, m4 < EB_PAGE_SIZE, n2 < # avol1, # buf < LEB_SIZE, n4 < n0, awbuf-inv(avol1, buffered(n2)), ebm-vol-inv(avol0), is-aligned(m6, EB_PAGE_SIZE), # buf1 ≤ LEB_SIZE, n ≤ # buf3, m0 + n ≤ LEB_SIZE, # buf ≤ n3 + m0, ¬ rofs → # buf = m6, rofs → m6 ≤ # buf, ¬ rofs → buf1 = buf + subarray(buf2, 0, m4), rofs → m6 = # buf ∧ buf1 = buf + subarray(buf2, 0, m4) ∨ m6 < # buf ∧ m6 + m4 < # buf ∧ buf1 = buf ∧ subarray(buf2, 0, m4) = subarray(buf, m6, m4) ⊦ empty = (n3 + m0 < # buf1 ⊃ buf1[n3 + m0];mkempbuf(n1)[n3 + m0 - # buf1]), m0 ≤ m6 + m4 ∧ m6 ≤ m0 + n |
# buf2 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, n3 + m0 = n4 + # buf, LEB_SIZE = n0 + # buf, LEB_SIZE = n1 + # buf1, avol0[n2] = mapped(buf), avol1[n2] = mapped(buf1), n4 < n0, # buf < LEB_SIZE, n2 < # avol1, m4 < EB_PAGE_SIZE, n3 < # buf3, n3 + m0 < LEB_SIZE, n3 < n, n3 + m0 < # buf1, awbuf-inv(avol1, buffered(n2)), ebm-vol-inv(avol0), is-aligned(m6, EB_PAGE_SIZE), # buf ≤ n3 + m0, m0 + n ≤ LEB_SIZE, n ≤ # buf3, # buf1 ≤ LEB_SIZE, rofs → m6 = # buf ∧ buf1 = buf + subarray(buf2, 0, m4) ∨ m6 < # buf ∧ m6 + m4 < # buf ∧ buf1 = buf ∧ subarray(buf2, 0, m4) = subarray(buf, m6, m4), ¬ rofs → buf1 = buf + subarray(buf2, 0, m4), rofs → m6 ≤ # buf, ¬ rofs → # buf = m6 ⊦ empty = buf1[n3 + m0], m0 ≤ m6 + m4 ∧ m6 ≤ m0 + n
# buf2 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, n3 + m0 = n4 + # buf, LEB_SIZE = n0 + # buf, LEB_SIZE = n1 + # buf1, avol0[n2] = mapped(buf), avol1[n2] = mapped(buf1), n4 < n0, # buf < LEB_SIZE, n2 < # avol1, m4 < EB_PAGE_SIZE, n3 < # buf3, n3 + m0 < LEB_SIZE, n3 < n, awbuf-inv(avol1, buffered(n2)), ebm-vol-inv(avol0), is-aligned(m6, EB_PAGE_SIZE), # buf ≤ n3 + m0, m0 + n ≤ LEB_SIZE, n ≤ # buf3, # buf1 ≤ LEB_SIZE, rofs → m6 = # buf ∧ buf1 = buf + subarray(buf2, 0, m4) ∨ m6 < # buf ∧ m6 + m4 < # buf ∧ buf1 = buf ∧ subarray(buf2, 0, m4) = subarray(buf, m6, m4), ¬ rofs → buf1 = buf + subarray(buf2, 0, m4), rofs → m6 ≤ # buf, ¬ rofs → # buf = m6 ⊦ empty = mkempbuf(n1)[n3 + m0 - # buf1], n3 + m0 < # buf1, m0 ≤ m6 + m4 ∧ m6 ≤ m0 + n