| # buf1 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs0 ↔ rofs, avol0[m4] = mapped(buf2), adr = adr0, avol = avol0, bleb = buffered(m4), buf0 = buf, lpt = lpt0, m = m3, m0 = EB_PAGE_SIZE, n2 = n, ns = ns0, plog = plog0, wbuf = mkwbuf(buf1, m1, m2), m4 < # avol1, m2 < EB_PAGE_SIZE, abs(avol1, buffered(m4), mkwbuf(buf1, m1, m2), avol0, rofs), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(m1, EB_PAGE_SIZE), n ≤ # buf, # avol1[m4].data + n ≤ LEB_SIZE, rofs → m1 ≤ # buf2, ¬ rofs → # buf2 = m1 ⊦ bleb ≠ nobuffer ∧ (¬ rofs → wbuf.offset + wbuf.nbytes + n2 ≤ LEB_SIZE ∧ n2 ≤ # buf0) |
# avol0 = # avol1, # lpt0 = # avol1, # buf1 = EB_PAGE_SIZE, avol0[m4] = mapped(buf2), m4 < # avol1, m2 < EB_PAGE_SIZE, LEB_SIZE < # buf2 + m2 + n, # avol1[m4].data < # buf2 + m2, abs(avol1, buffered(m4), mkwbuf(buf1, # buf2, m2), avol0, false), awbuf-inv(avol1, buffered(m4)), ebm-vol-inv(avol0), is-aligned(# buf2, EB_PAGE_SIZE), # avol1[m4].data + n ≤ LEB_SIZE, n ≤ # buf ⊦
Used simplifier rules: ⊦ m + n < m + n0 ↔ n < n0; (s)% ⊦ m < n → n ≠ 0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat%inv-buf-in-vol: ⊦ awbuf-inv(avol, buffered(n)) → n < # avol; (forward) from specification awbuf-inv%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ n ↔ ¬ n < m; (ss)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ mkwbuf(buf, m, m0).nbytes = m0; (s)% ⊦ mkwbuf(buf, m, m0).offset = m; (s)% ⊦ nobuffer ≠ buffered(m); (s)