| # avol1 = # avol0, avol0[n] = mapped(buf), n < # avol0, n < # avol0 ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE), ∀ m. m < # avol0 → (avol1[m].mapped? → avol0[m] = avol1[m]) ∧ (avol1[m] = unmapped ∧ avol0[m].mapped? → # avol0[m].data ≤ LEB_SIZE ∧ is-aligned(# avol0[m].data, EB_PAGE_SIZE)) ⊦ # buf ≤ LEB_SIZE ∧ is-aligned(# buf, EB_PAGE_SIZE) |
# avol1 = # avol0, avol0[n] = mapped(buf), n < # avol0, avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE), ∀ m. m < # avol0 → (avol1[m].mapped? → avol0[m] = avol1[m]) ∧ (avol1[m] = unmapped ∧ avol0[m].mapped? → # avol0[m].data ≤ LEB_SIZE ∧ is-aligned(# avol0[m].data, EB_PAGE_SIZE)) ⊦ # buf ≤ LEB_SIZE ∧ is-aligned(# buf, EB_PAGE_SIZE)