| # lpt0 = # avol0, # lpt = # avol, rofs0 ↔ rofs, adr = adr0, bleb = bleb0, lpt = lpt0, m0 = m1, m2 = EB_PAGE_SIZE, ns = ns0, plog = plog0, m < # avol, abs(avol, bleb0, wbuf, avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), wbuf-cons(bleb0, wbuf, avol0, rofs) ⊦ ⟪wbuf_remap#(m, bleb0, adr0, m1, plog0, lpt0, ns0; avol0; err)⟫ ⟨awbuf_remap#(m, adr, m0, plog, lpt, ns, bleb, rofs0; avol; err0)⟩ ( (abs(avol, bleb0, wbuf, avol0, rofs) ∧ bleb = bleb0 ∧ adr = adr0 ∧ m0 = m1 ∧ plog = plog0 ∧ lpt = lpt0 ∧ ns = ns0 ∧ (rofs0 ↔ rofs)) ∧ err = err0), buffered(m) = bleb |
# wbuf.content = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, buffered(m) ≠ bleb0, m < # avol, abs(avol, bleb0, wbuf, avol0, rofs), awbuf-inv(avol, bleb0), ebm-vol-inv(avol0), synced(avol), bleb0 ≠ nobuffer → bleb0.leb < # avol ∧ wbuf-cons(wbuf, avol0[bleb0.leb], rofs) ⊦ ⟪wbuf_remap#(m, bleb0, adr0, m1, plog0, lpt0, ns0; avol0; err)⟫ ⟨awbuf_remap#(m, adr0, m1, plog0, lpt0, ns0, bleb0, rofs; avol; err0)⟩ (abs(avol, bleb0, wbuf, avol0, rofs) ∧ err = err0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%⊦ wbuf-cons(bleb, wbuf, avol, rofs) ↔ # wbuf.content = EB_PAGE_SIZE ∧ ( bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs)); (s)