| avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), m = m1, m0 = m2, n0 = 0, n1 = n3, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, n2 ≤ LEB_SIZE, n3 ≤ # buf, m1 ≤ LEB_SIZE, n2 ≤ m1 ⊦ ⟨if m0 < # avol ∧ avol[m0].mapped? ∧ # avol[m0].data ≤ m ∧ is-aligned(m, EB_PAGE_SIZE) ∧ is-aligned(n0, EB_PAGE_SIZE) ∧ m + n0 ≤ LEB_SIZE ∧ n1 + n0 ≤ # buf then {fail_or_success#(; ; err); if err = ESUCCESS then if n0 ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n0)) else choose n with n < n0 ∧ is-aligned(n, EB_PAGE_SIZE) in if n ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n)) ifnone skip} else abort⟩ (avol = abs(avols[default-volid]) ∧ ESUCCESS = err) |
avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), m = m1, m0 = m2, n0 = 0, n1 = n3, avol[m0].mapped?, m0 < # avol, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(m, EB_PAGE_SIZE), is-aligned(n0, EB_PAGE_SIZE), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, # avol[m0].data ≤ m, m + n0 ≤ LEB_SIZE, n1 + n0 ≤ # buf, n2 ≤ m1, m1 ≤ LEB_SIZE, n3 ≤ # buf, n2 ≤ LEB_SIZE, m0 < # avol → m0 < # avol ∧ (avol[m0].mapped? → avol[m0].mapped? ∧ m0 < # avol) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then if n0 ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n0)) else choose n with n < n0 ∧ is-aligned(n, EB_PAGE_SIZE) in if n ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n)) ifnone skip⟩ (avol = abs(avols[default-volid]) ∧ ESUCCESS = err)
avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), m = m1, m0 = m2, n0 = 0, n1 = n3, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, n2 ≤ m1, m1 ≤ LEB_SIZE, n3 ≤ # buf, n2 ≤ LEB_SIZE, m0 < # avol → m0 < # avol ∧ (avol[m0].mapped? → avol[m0].mapped? ∧ m0 < # avol) ⊦ ⟨abort⟩ (avol = abs(avols[default-volid]) ∧ ESUCCESS = err), m0 < # avol ∧ avol[m0].mapped? ∧ # avol[m0].data ≤ m ∧ is-aligned(m, EB_PAGE_SIZE) ∧ is-aligned(n0, EB_PAGE_SIZE) ∧ m + n0 ≤ LEB_SIZE ∧ n1 + n0 ≤ # buf
avols[default-volid][m2] = mapped(buf0, n2), avol = abs(avols[default-volid]), m = m1, m0 = m2, n0 = 0, n1 = n3, m0 < # avol, m2 < # avols[default-volid], ebm-cons(avols), ebm-vol-inv(abs(avols[default-volid])), is-aligned(m1, EB_PAGE_SIZE), default-volid ∈ avols, n2 ≤ m1, m1 ≤ LEB_SIZE, n3 ≤ # buf, n2 ≤ LEB_SIZE ⊦ m0 < # avol ∧ (avol[m0].mapped? → avol[m0].mapped? ∧ m0 < # avol)