| avol = avol1[n, mapped(mkbuf(0))], buf = buf0, err = err0, m = 0, m0 = n, n0 = # buf0, n1 = 0, n2 < n0, n < # avol1, ebm-vol-inv(avol1), ebm-vol-inv(avol1[n, mapped(mkbuf(0))]), is-aligned(n2, EB_PAGE_SIZE), is-aligned(# buf0, EB_PAGE_SIZE), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ [if n2 ≠ 0 then avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n2))] ( ebm-vol-inv(avol) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(avol, avol1, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))), err = ESUCCESS |
avol = avol1[n, mapped(mkbuf(0))], buf = buf0, err = err0, m = 0, m0 = n, n0 = # buf0, n1 = 0, n < # avol1, n2 < n0, ebm-vol-inv(avol1[n, mapped(mkbuf(0))]), ebm-vol-inv(avol1), is-aligned(# buf0, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ [avol[m0] := mapped(avol[m0].data + mkempbuf(m - # avol[m0].data) + subarray(buf, n1, n2))] ( ebm-vol-inv(avol) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(avol, avol1, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))), err = ESUCCESS, n2 = 0
avol = avol1[n, mapped(mkbuf(0))], buf = buf0, err = err0, m = 0, m0 = n, n0 = # buf0, n1 = 0, n2 = 0, n < # avol1, n2 < n0, ebm-vol-inv(avol1[n, mapped(mkbuf(0))]), ebm-vol-inv(avol1), is-aligned(# buf0, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), is-encoded-pad(orphans0, # orphans0, buf0), # buf0 ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ [skip] ( ebm-vol-inv(avol) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ id○(avol, avol1, n) ∧ (err = ESUCCESS → avol[n].mapped? ∧ is-encoded-pad(orphans0, # orphans0, avol[n].data))), err = ESUCCESS