| # avol0 = # avol1, # lpt0 = # avol1, # buf1 = EB_PAGE_SIZE, avol0[m4] = mapped(buf2), m2 < EB_PAGE_SIZE, m2 + n < EB_PAGE_SIZE, m4 < # avol1, abs(avol1, buffered(m4), mkwbuf(buf1, # buf2, m2), avol0, false), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), # avol1[m4].data + n ≤ LEB_SIZE, n ≤ # buf, # buf2 + m2 + n ≤ LEB_SIZE ⊦ (⌊ESUCCESS⌋ ∨ ESUCCESS = ESUCCESS) ∧ ⟨err := ESUCCESS; let m = buffered(m4).leb in {rofs := false; if err = ESUCCESS then avol1[m] := mapped(avol1[m].data + subarray(buf, 0, n)) else { {n0 := n; choose n1 with n1 ≠ 0 ∧ n1 < n0 ∧ is-aligned(# avol1[m].data + n1, EB_PAGE_SIZE) in avol1[m] := mapped(avol1[m].data + subarray(buf, 0, n1)) ifnone skip} or skip; rofs := true}}⟩ (abs(avol1, buffered(m4), mkwbuf(copy(buf, 0, buf1, m2, n), # buf2, m2 + n), avol0, false) ∧ ¬ rofs ∧ ESUCCESS = err) |
# buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol0[m4] = mapped(buf2), m4 < # avol1, m2 + n < EB_PAGE_SIZE, m2 < EB_PAGE_SIZE, abs(avol1, buffered(m4), mkwbuf(buf1, # buf2, m2), avol0, false), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), # buf2 + m2 + n ≤ LEB_SIZE, n ≤ # buf, # avol1[m4].data + n ≤ LEB_SIZE ⊦ ⟨err := ESUCCESS; let m = buffered(m4).leb in {rofs := false; if err = ESUCCESS then avol1[m] := mapped(avol1[m].data + subarray(buf, 0, n)) else { {n0 := n; choose n1 with n1 ≠ 0 ∧ n1 < n0 ∧ is-aligned(# avol1[m].data + n1, EB_PAGE_SIZE) in avol1[m] := mapped(avol1[m].data + subarray(buf, 0, n1)) ifnone skip} or skip; rofs := true}}⟩ (abs(avol1, buffered(m4), mkwbuf(copy(buf, 0, buf1, m2, n), # buf2, m2 + n), avol0, false) ∧ ¬ rofs ∧ ESUCCESS = err)
Used simplifier rules: ⊦ ¬ ⌊ESUCCESS⌋ ; (s)