| adr = adr1, adr0 = adr2, ginval = ginval1, ginval0 = ginval2, gstore = gstore1, gstore0 = gstore2, maxino0 = maxino1, pstate = index(m), remove-refsize0(gstore1) = gstore1, remove-refsize0(istore0) = istore0, elems nx ∩ ginval2 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval2, inv(gstore2 \ ginval2), inv(gstore1), inv(istore), inv(istore0), m ∈ istore, istore0 ⊑ istore, ¬ @(pstate.lnum, maxino, ind.flashsize) ∈ istore ∧ err = ESUCCESS ∨ ⌊err⌋ , pstate.index? ∨ pstate.journal? ⊦ ⟪adr := ?, pstate := readonly; syn := ?⟫ ( inv(istore) ∧ istore0 ⊑ istore ∧ (pstate.journal? → nx ≠ [] ∧ pstate.lnum = nx.last ∧ pstate.lnum ∈ gstore2) ∧ (pstate.index? → pstate.lnum ∈ istore) ∧ (pstate = unbuffered → syn)), err = ESUCCESS, dups(nx) |
adr0 = adr2, adr3 = adr1, ginval = ginval1, ginval0 = ginval2, gstore = gstore1, gstore0 = gstore2, maxino0 = maxino1, pstate = index(m), remove-refsize0(istore0) = istore0, remove-refsize0(gstore1) = gstore1, elems nx ∩ ginval2 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ ginval2, inv(istore0), inv(istore), inv(gstore1), inv(gstore2 \ ginval2), m ∈ istore, istore0 ⊑ istore, pstate.index? ∨ pstate.journal?, ¬ @(pstate.lnum, maxino, ind.flashsize) ∈ istore ∧ err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪syn := ?⟫ ( inv(istore) ∧ istore0 ⊑ istore ∧ (readonly.journal? → nx ≠ [] ∧ readonly.lnum = nx.last ∧ readonly.lnum ∈ gstore2) ∧ (readonly.index? → readonly.lnum ∈ istore) ∧ (readonly = unbuffered → syn)), err = ESUCCESS, dups(nx)