| gstore0[maxino2] = groupblock(gndx1, lax, m), remove-refsize0(istore1) = istore1, remove-refsize0(gstore2) = gstore2, elems nx0 ∩ ginval0 = ∅, dom gstore2 ∪ elems nx0 = dom gstore0 ∪ ginval0, btree-inv(rp, adr, istore2, istore1, zh, fi2, fi1), inv(groupblock(gndx1, lax, m)), inv(istore1), inv(istore2), inv(gstore2), inv(gstore0 \ ginval0), ri-inj(fi1), ri-inj(fi2), maxino2 ∈ gstore0, istore1 ⊑ istore2, pstate = unbuffered → syn0, pstate.index? → pstate.lnum ∈ istore2, pstate.journal? → nx0 ≠ [] ∧ pstate.lnum = nx0.last ∧ pstate.lnum ∈ gstore0 ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; gndx := gndx0; ax := ax0; if err = ESUCCESS then ax := ax + gstore0[maxino2].ladrlist.to-adr(maxino2), gndx := gndx + gstore0[maxino2].gndlist else ax := ?, gndx := ?⟩ (ax0 + lax.to-adr(maxino2) = ax ∧ gndx0 + gndx1 = gndx ∧ ESUCCESS = err), dups(nx0), maxino2 ∈ ginval0 |
gstore0[maxino2] = groupblock(gndx1, lax, m), remove-refsize0(gstore2) = gstore2, remove-refsize0(istore1) = istore1, elems nx0 ∩ ginval0 = ∅, dom gstore2 ∪ elems nx0 = dom gstore0 ∪ ginval0, btree-inv(rp, adr, istore2, istore1, zh, fi2, fi1), inv(gstore0 \ ginval0), inv(gstore2), inv(istore2), inv(istore1), inv(groupblock(gndx1, lax, m)), ri-inj(fi2), ri-inj(fi1), maxino2 ∈ gstore0, istore1 ⊑ istore2, ¬ dups(nx0), ¬ maxino2 ∈ ginval0, pstate.journal? → nx0 ≠ [] ∧ pstate.lnum = nx0.last ∧ pstate.lnum ∈ gstore0, pstate.index? → pstate.lnum ∈ istore2, pstate = unbuffered → syn0 ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; gndx := gndx0; ax := ax0; if err = ESUCCESS then ax := ax + gstore0[maxino2].ladrlist.to-adr(maxino2), gndx := gndx + gstore0[maxino2].gndlist else ax := ?, gndx := ?⟩ (ax0 + lax.to-adr(maxino2) = ax ∧ gndx0 + gndx1 = gndx ∧ ESUCCESS = err)