| n < # avol1, ebm-vol-inv(avol1[n, mapped(mkbuf(0))]), ebm-vol-inv(avol1), is-aligned(# buf0, EB_PAGE_SIZE), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE ⊦ [fail_or_success#(; ; err); avol := avol1[n, mapped(mkbuf(0))]; if err = ESUCCESS then if # buf0 ≠ 0 then avol[n] := mapped(avol[n].data + mkempbuf(0 - # avol[n].data) + subarray(buf0, 0, # buf0)) else {n1 := 0; n0 := # buf0; m0 := n; m := 0; buf := buf0; choose n2 with n2 < n0 ∧ is-aligned(n2, EB_PAGE_SIZE) in if n2 ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n2)) ifnone skip}] ( ebm-vol-inv(avol) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(avol, avol1, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))) |
n < # avol1, ebm-vol-inv(avol1), ebm-vol-inv(avol1[n, mapped(mkbuf(0))]), is-aligned(# buf0, EB_PAGE_SIZE), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE ⊦ [choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; avol := avol1[n, mapped(mkbuf(0))]; if err = ESUCCESS then if # buf0 ≠ 0 then avol[n] := mapped(avol[n].data + mkempbuf(0 - # avol[n].data) + subarray(buf0, 0, # buf0)) else {n1 := 0; n0 := # buf0; m0 := n; m := 0; buf := buf0; choose n2 with n2 < n0 ∧ is-aligned(n2, EB_PAGE_SIZE) in if n2 ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n2)) ifnone skip}] ( ebm-vol-inv(avol) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(avol, avol1, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data)))
Used simplifier rules: fail_or_success#(; ; ERR) {choose ERR0 with ⌊ERR0⌋ ∨ ERR0 = ESUCCESS in ERR := ERR0};