| adr0 = adr, lpt0 = lpt, m0 = m3, m1 = LEB_SIZE, m2 = # lpt ⊦ ⟪if # lpt0 = m2 ∧ m1 = LEB_SIZE then {fail_or_success#(; ; err); if err = ESUCCESS then {avol := fill(mkavolume(m2), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?} else abort⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol) |
adr0 = adr, lpt0 = lpt, m0 = m3, m1 = LEB_SIZE, m2 = # lpt ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then {avol := fill(mkavolume(m2), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol)