| # buf0 = encoding-size(sb, EB_PAGE_SIZE), avol0 = avol, err = ESUCCESS, ebm-vol-inv(avol), encoding-size(sb, EB_PAGE_SIZE) ≤ LEB_SIZE, err = ESUCCESS → is-encoded(sb, buf0) ∧ m0 = encoding-size(sb, EB_PAGE_SIZE), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪ebm_avol_change#(0, m0, buf0; avol; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ (err = ESUCCESS → id○(avol, avol0, 0) ∧ (∃ buf. is-encoded(sb, buf) ∧ avol[0] = mapped(buf))) ∧ (err ≠ ESUCCESS → avol = avol0)), # avol = 0 |
# buf0 = encoding-size(sb, EB_PAGE_SIZE), avol0 = avol, # avol ≠ 0, ebm-vol-inv(avol), is-encoded(sb, buf0), encoding-size(sb, EB_PAGE_SIZE) ≤ LEB_SIZE ⊦ ⟪ebm_avol_change#(0, encoding-size(sb, EB_PAGE_SIZE), buf0; avol; err)⟫ ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ ebm-vol-inv(avol) ∧ (err = ESUCCESS → id○(avol, avol0, 0) ∧ (∃ buf. is-encoded(sb, buf) ∧ avol[0] = mapped(buf))) ∧ (err ≠ ESUCCESS → avol = avol0))