| istore2[m0] = indexblock(indx, lax, m3), zh[rp] = mkznode(r, zbrar, boolvar, true, m), zh0[rp] = mkznode(r0, zbrar0, boolvar0, false, m4), remove-refsize0(istore1) = istore1, remove-refsize0(gstore1) = gstore1, elems nx ∩ ginval4 = ∅, dom remove-refsize0(gstore2) ∩ ginval4 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval4, btree-inv(rp, adr, istore3[n0, indexblock([], [], 0)], istore1, zh, ri, fi), btree-inv(rp, adr, istore3, istore1, zh, ri, fi), btree-inv(rp, @(m0, m1, m2), istore2, istore2, zh0, ri, ri), btree-inv(rp, adr, istore2[m0, indexblock(indx, lax, m3 - m2)], istore1, zh0[rp, mkznode(r0, zbrar0, boolvar0, true, m4)], ri, fi), inv(indexblock(indx, lax, m3)), inv(istore3[n0, indexblock([], [], 0)]), inv(istore1), inv(istore3), inv(gstore1), inv(gstore2 \ ginval4), inv(istore2), inv(istore2[m0, indexblock(indx, lax, m3 - m2)]), rp ∈ zh, m0 ∈ istore2, m2 ≤ m3, istore1 ⊑ istore2, istore1 ⊑ istore2[m0, indexblock(indx, lax, m3 - m2)], istore1 ⊑ istore3[n0, indexblock([], [], 0)], istore1 ⊑ istore3, istore3[n0, indexblock([], [], 0)] ⊑ istore2, ⌊err⌋ , pstate1.index? → pstate1.lnum ∈ istore2, pstate1.journal? → nx ≠ [] ∧ pstate1.lnum = nx.last ∧ pstate1.lnum ∈ gstore2 ⊦ pstate1 = unbuffered, pstate1 = readonly, dups(nx), n0 ∈ istore3, ∃ ri0, fi0. btree-inv(rp, adr, istore2[m0, indexblock(indx, lax, m3 - m2)], istore1, zh0[rp, mkznode(r0, zbrar0, boolvar0, true, m4)], ri0, fi0) |
Used terms: ri, fi