| # buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs0 ↔ rofs, avol0[m4] = mapped(buf2), adr = adr0, avol = avol0, bleb = buffered(m4), buf0 = buf, lpt = lpt0, m = m3, m0 = EB_PAGE_SIZE, n2 = n, ns = ns0, plog = plog0, ¬ rofs, wbuf = mkwbuf(buf1, m1, m2), m4 < # avol1, m2 < EB_PAGE_SIZE, abs(avol1, buffered(m4), mkwbuf(buf1, m1, m2), avol0, rofs), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(m1, EB_PAGE_SIZE), 0 + n2 ≤ # buf0, wbuf.nbytes + n2 ≤ # wbuf.content, n ≤ # buf, # avol1[m4].data + n ≤ LEB_SIZE, rofs → m1 ≤ # buf2, ¬ rofs → # buf2 = m1, ¬ rofs → wbuf.offset + wbuf.nbytes + n2 ≤ LEB_SIZE ∧ n2 ≤ # buf0 ⊦ ⟨awbuf_write_buf#(n, buf, adr0, m3, plog0, lpt0, ns0, buffered(m4); avol1, rofs0; err0)⟩ ( abs (avol1, buffered(m4), (wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)) .nbytes:= ((wbuf.content:= copy(buf0, 0, wbuf.content, wbuf.nbytes, n2)).nbytes + n2), avol, rofs) ∧ (rofs0 ↔ rofs) ∧ ESUCCESS = err0), bleb = nobuffer, wbuf.nbytes + n2 ≥ m0 |
# buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol0[m4] = mapped(buf2), ¬ rofs0, m4 < # avol1, m2 + n < EB_PAGE_SIZE, m2 < EB_PAGE_SIZE, abs(avol1, buffered(m4), mkwbuf(buf1, # buf2, m2), avol0, false), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), # buf2 + m2 + n ≤ LEB_SIZE, n ≤ # buf, # avol1[m4].data + n ≤ LEB_SIZE ⊦ ⟨awbuf_write_buf#(n, buf, adr0, m3, plog0, lpt0, ns0, buffered(m4); avol1, rofs0; err0)⟩ (abs(avol1, buffered(m4), mkwbuf(copy(buf, 0, buf1, m2, n), # buf2, m2 + n), avol0, false) ∧ ¬ rofs0 ∧ ESUCCESS = err0)
Used simplifier rules: ⊦ m < n → m ≤ n; (s)% ⊦ m < n → n ≠ 0; (s)%inv-buf-in-vol: ⊦ awbuf-inv(avol, buffered(n)) → n < # avol; (forward) from specification awbuf-inv%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ mkwbuf(buf, m, m0).nbytes:= m2 = mkwbuf(buf, m, m2); (s)% ⊦ mkwbuf(buf, m, m0).content:= buf0 = mkwbuf(buf0, m, m0); (s)% ⊦ mkwbuf(buf, m, m0).offset = m; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)% ⊦ n ≥ m ↔ m ≤ n; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)% ⊦ mkwbuf(buf, m, m0).content = buf; (s)% ⊦ mkwbuf(buf, m, m0).nbytes = m0; (s)% ⊦ nobuffer ≠ buffered(m); (s)