| # lpt0 = # avol, # lpt = # avol, keyset(gch) = gc-heap(lpt, log), log = log0, m = LEB_SIZE, awbuf-inv(avol, bleb), bin-heap-inv(gch, lpt), buf-ro-rw-mode(isbuf, bleb, lpt, avol), bufs-log-only(bleb, log, lpt), freelist-cons(lpt, freelist), log-group-block(log, lpt), lpt-free-unref(lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt0), lpt-leb-size(lpt), lpt-ram-flash(lpt, lpt0, log), ¬ isbuf → bleb.isbuf? ∧ bleb.leb < # lpt ∧ lpt[bleb.leb].flags = LP_GROUP_NODES ∧ bleb.leb ∈ log ∧ avol[bleb.leb].mapped? ∧ (gndx ≠ [] ∧ lpt[bleb.leb].size + gndx.flashsize ≤ LEB_SIZE → lpt[bleb.leb].size = # avol[bleb.leb].data) ⊦ ⟪persistence_add_gnds#(gndx, log, m, adr, m0, log0, lpt0, ns, bleb; ax, lpt, avol, isbuf; err)⟫ ( lpt-free-unref(lpt) ∧ freelist-cons(lpt, freelist) ∧ bin-heap-inv(gch, lpt) ∧ keyset(gch) = gc-heap(lpt, log) ∧ bufs-log-only(bleb, log, lpt) ∧ # lpt = # avol ∧ log-group-block(log, lpt) ∧ buf-ro-rw-mode(isbuf, bleb, lpt, avol) ∧ lpt-leb-size(lpt) ∧ lpt-ram-flash(lpt, lpt0, log) ∧ awbuf-inv(avol, bleb) ∧ # lpt0 = # avol), dups(log) |
# lpt = # avol, # lpt0 = # avol, keyset(gch) = gc-heap(lpt, log0), awbuf-inv(avol, bleb), bin-heap-inv(gch, lpt), buf-ro-rw-mode(isbuf, bleb, lpt, avol), bufs-log-only(bleb, log0, lpt), freelist-cons(lpt, freelist), log-group-block(log0, lpt), lpt-free-unref(lpt), lpt-free-unref(lpt0), lpt-leb-size(lpt), lpt-leb-size(lpt0), lpt-ram-flash(lpt, lpt0, log0), ¬ dups(log0), ¬ isbuf → bleb.isbuf? ∧ bleb.leb < # avol ∧ lpt[bleb.leb].flags = LP_GROUP_NODES ∧ bleb.leb ∈ log0 ∧ avol[bleb.leb].mapped? ∧ (gndx ≠ [] ∧ lpt[bleb.leb].size + gndx.flashsize ≤ LEB_SIZE → lpt[bleb.leb].size = # avol[bleb.leb].data) ⊦ ⟪persistence_add_gnds#(gndx, log0, LEB_SIZE, adr, m0, log0, lpt0, ns, bleb; ax, lpt, avol, isbuf; err)⟫ ( lpt-free-unref(lpt) ∧ freelist-cons(lpt, freelist) ∧ bin-heap-inv(gch, lpt) ∧ keyset(gch) = gc-heap(lpt, log0) ∧ bufs-log-only(bleb, log0, lpt) ∧ # lpt = # avol ∧ log-group-block(log0, lpt) ∧ buf-ro-rw-mode(isbuf, bleb, lpt, avol) ∧ lpt-leb-size(lpt) ∧ lpt-ram-flash(lpt, lpt0, log0) ∧ awbuf-inv(avol, bleb) ∧ # lpt0 = # avol)