| avols[default-volid][m2] = mapped(buf1, n1), avol = abs(avols[default-volid]), buf = buf2, buf0 = buf2, m = m1, m0 = m2, n = n2, n0 = n3, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, n3 + n2 ≤ # buf2, m1 + n2 ≤ LEB_SIZE ⊦ ⟨if m0 < # avol ∧ avol[m0].mapped? ∧ n0 + n ≤ # buf0 ∧ m + n ≤ LEB_SIZE then {fail_or_success#(; ; err); if err = ESUCCESS then buf0 := copy(avol[m0].data + mkempbuf(LEB_SIZE - # avol[m0].data), m, buf0, n0, n) else choose buf with # buf = # buf0 ∧ range=(buf0, 0, buf, 0, n0) ∧ range=(buf0, n0 + n, buf, n0 + n, # buf0 - n0 + n) in buf0 := buf} else abort⟩ (copy(avols[default-volid][m2].data, m1, buf, n3, n2) = buf0 ∧ ESUCCESS = err) |
avols[default-volid][m2] = mapped(buf1, n1), avol = abs(avols[default-volid]), buf = buf2, buf0 = buf2, m = m1, m0 = m2, n = n2, n0 = n3, avol[m0].mapped?, m0 < # avol, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, n0 + n ≤ # buf0, m + n ≤ LEB_SIZE, m1 + n2 ≤ LEB_SIZE, n3 + n2 ≤ # buf2, m0 < # avol → m0 < # avol ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then buf0 := copy(avol[m0].data + mkempbuf(LEB_SIZE - # avol[m0].data), m, buf0, n0, n) else choose buf with # buf = # buf0 ∧ range=(buf0, 0, buf, 0, n0) ∧ range=(buf0, n0 + n, buf, n0 + n, # buf0 - n0 + n) in buf0 := buf⟩ (copy(avols[default-volid][m2].data, m1, buf, n3, n2) = buf0 ∧ ESUCCESS = err)
avols[default-volid][m2] = mapped(buf1, n1), avol = abs(avols[default-volid]), buf = buf2, buf0 = buf2, m = m1, m0 = m2, n = n2, n0 = n3, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, m1 + n2 ≤ LEB_SIZE, n3 + n2 ≤ # buf2, m0 < # avol → m0 < # avol ⊦ ⟨abort⟩ (copy(avols[default-volid][m2].data, m1, buf, n3, n2) = buf0 ∧ ESUCCESS = err), m0 < # avol ∧ avol[m0].mapped? ∧ n0 + n ≤ # buf0 ∧ m + n ≤ LEB_SIZE
avols[default-volid][m2] = mapped(buf1, n1), avol = abs(avols[default-volid]), buf = buf2, buf0 = buf2, m = m1, m0 = m2, n = n2, n0 = n3, m0 < # avol, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), default-volid ∈ avols, m1 + n2 ≤ LEB_SIZE, n3 + n2 ≤ # buf2 ⊦ m0 < # avol