| # buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m4] = mapped(buf2 + subarray(buf1, 0, m2)), avol0[m4] = mapped(buf2), align↓(m2 + n3, EB_PAGE_SIZE) = n0 + m2, n1 < # buf3, n1 < n0, m2 < EB_PAGE_SIZE, m4 < # avol1, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), is-aligned(n0 + m2, EB_PAGE_SIZE), is-aligned(n1 + m2, EB_PAGE_SIZE), (# buf2 + m2) + n3 ≤ LEB_SIZE, # buf2 + n0 + m2 ≤ LEB_SIZE, n0 ≤ # buf3, # buf2 + m2 + n3 ≤ LEB_SIZE, EB_PAGE_SIZE ≤ m2 + n3, n3 ≤ # buf3, 0 + m2 ≤ # buf1, 0 + m2 ≤ # mkbuf(n0 + m2), ⌊err1⌋ ⊦ n1 + m2 = 0, subarray(buf1, 0, m2) + subarray(buf3, 0, n1) = subarray (copy(buf3, 0, subarray(mkbuf(n0 + m2), 0, 0) + subarray(buf1, 0, m2) + subarray(mkbuf(n0 + m2), 0 + m2, # mkbuf(n0 + m2) - 0 - m2), m2, n0), 0, n1 + m2), n1 = 0, n3 = 0 |
# buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m4] = mapped(buf2 + subarray(buf1, 0, m2)), avol0[m4] = mapped(buf2), align↓(m2 + n3, EB_PAGE_SIZE) = n0 + m2, n1 < # buf3, n1 < n0, m2 < EB_PAGE_SIZE, m4 < # avol1, awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), is-aligned(n0 + m2, EB_PAGE_SIZE), is-aligned(n1 + m2, EB_PAGE_SIZE), (# buf2 + m2) + n3 ≤ LEB_SIZE, # buf2 + n0 + m2 ≤ LEB_SIZE, n0 ≤ # buf3, # buf2 + m2 + n3 ≤ LEB_SIZE, EB_PAGE_SIZE ≤ m2 + n3, n3 ≤ # buf3, ⌊err1⌋ ⊦ subarray(buf1, 0, m2) + subarray(buf3, 0, n1) = subarray(subarray(buf1, 0, m2) + copy(buf3, 0, subarray(mkbuf(n0 + m2), m2, n0), 0, n0), 0, n1 + m2), n1 + m2 = 0, n1 = 0, n3 = 0
Used simplifier rules: ⊦ m < n → m ≤ n; (s)% ⊦ m ≤ m + n; (s)% ⊦ m - m = 0; (s)%# buf ≤ m0 ⊦ copy(buf0, m, buf + buf1, m0, m1) = buf + copy(buf0, m, buf1, m0 - # buf, m1); (s)% ⊦ ¬ n < n; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ # subarray(buf, m, n) = n; (s)%append-a: ⊦ (buf + buf0) + buf1 = buf + buf0 + buf1; from specification array-splice[buffer]% ⊦ mkbuf(0) + buf = buf; (s)% ⊦ m + n - m = n; (s)% ⊦ m - 0 = m; (s)% ⊦ # mkbuf(n) = n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ subarray(buf, n, 0) = mkbuf(0); (s)