| # avol0 = # avol1, # lpt0 = # avol1, # buf1 = EB_PAGE_SIZE, avol0[m4] = mapped(buf2), avol1[m4] = mapped(buf), align↓(m2 + n3, EB_PAGE_SIZE) = n0 + m2, n < # avol1, m4 < # avol1, m2 < EB_PAGE_SIZE, n1 < n0, n1 < # buf3, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(n1 + m2, EB_PAGE_SIZE), is-aligned(n0 + m2, EB_PAGE_SIZE), is-aligned(# buf2, EB_PAGE_SIZE), # buf + n3 ≤ LEB_SIZE, n3 ≤ # buf3, EB_PAGE_SIZE ≤ m2 + n3, # buf2 + m2 + n3 ≤ LEB_SIZE, n0 ≤ # buf3, # buf2 + n0 + m2 ≤ LEB_SIZE, ⌊err1⌋ , n < # avol1 → (n ≠ m4 → avol1[n] = avol0[n]) ∧ (n = m4 → buf = buf2 + subarray(buf1, 0, m2)) ⊦ n1 + m2 = 0, n3 = 0, (n ≠ m4 → avol1[n] = avol0[n]) ∧ ( n = m4 → n1 ≠ 0 ∧ buf + subarray(buf3, 0, n1) = buf2 + subarray(copy(buf3, 0, copy(buf1, 0, mkbuf(n0 + m2), 0, m2), m2, n0), 0, n1 + m2) ∧ subarray(buf1, 0, m2) = subarray(subarray(copy(buf3, 0, copy(buf1, 0, mkbuf(n0 + m2), 0, m2), m2, n0), 0, n1 + m2), 0, m2)) |
# avol0 = # avol1, # lpt0 = # avol1, # buf1 = EB_PAGE_SIZE, avol0[m4] = mapped(buf2), avol1[m4] = mapped(buf2 + subarray(buf1, 0, m2)), align↓(m2 + n3, EB_PAGE_SIZE) = n0 + m2, m4 < # avol1, m2 < EB_PAGE_SIZE, n1 < n0, n1 < # buf3, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(n1 + m2, EB_PAGE_SIZE), is-aligned(n0 + m2, EB_PAGE_SIZE), is-aligned(# buf2, EB_PAGE_SIZE), n3 ≤ # buf3, EB_PAGE_SIZE ≤ m2 + n3, # buf2 + m2 + n3 ≤ LEB_SIZE, n0 ≤ # buf3, # buf2 + n0 + m2 ≤ LEB_SIZE, (# buf2 + m2) + n3 ≤ LEB_SIZE, ⌊err1⌋ ⊦ n1 + m2 = 0, n3 = 0, n1 ≠ 0 ∧ subarray(buf1, 0, m2) + subarray(buf3, 0, n1) = subarray(copy(buf3, 0, copy(buf1, 0, mkbuf(n0 + m2), 0, m2), m2, n0), 0, n1 + m2) ∧ subarray(buf1, 0, m2) = subarray(subarray(copy(buf3, 0, copy(buf1, 0, mkbuf(n0 + m2), 0, m2), m2, n0), 0, n1 + m2), 0, m2)
Used simplifier rules: ⊦ buf + buf0 = buf + buf1 ↔ buf0 = buf1; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ # subarray(buf, m, n) = n; (s)% ⊦ #(buf + buf0) = # buf + # buf0; (s)%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic