| # lpt = # avol, # lpt0 = # avol, istore[m] = indexblock(indx, lax, m0), lpt[m] = mklp(m0, m1, LP_INDEX_NODES, m2), keyset(gch) = gc-heap(lpt, log1), remove-refsize0(gstore0) = gstore0, remove-refsize0(istore0) = istore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, ginval < # avol, m < # avol, abs-gstore(avol, lpt, gstore, ginval), awbuf-inv(avol, buffered(m)), bin-heap-inv(gch, lpt), buf-ro-rw-mode(false, buffered(m), lpt, avol), bufs-log-only(buffered(m), log1, lpt), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt, freelist), inv(indexblock(indx, lax, m0)), inv(gstore \ ginval), inv(gstore0), inv(istore), inv(istore0), log-group-block(log1, lpt), lpt-free-unref(lpt), lpt-free-unref(lpt0), lpt-leb-size(lpt), lpt-leb-size(lpt0), lpt-ram-flash(lpt, lpt0, log1), m ∈ istore, istore0 ⊑ istore, isbuf → synced(avol), ∀ n. (n < # lpt ∧ lpt[n].flags = LP_INDEX_NODES ↔ n ∈ istore) ∧ (n ∈ istore → abs-leb(avol[n], istore[n], lpt[n]) ∧ lpt[n].ref-size = istore[n].ref-size) ⊦ dups(log1), avol[m].mapped? ∧ (m1 + 2 * NODE_HEADER_SIZE + ind.alignedsize ≤ LEB_SIZE → m1 = # avol[m].data) |
# lpt0 = # avol, # lpt = # avol, lpt[m] = mklp(m0, m1, LP_INDEX_NODES, m2), istore[m] = indexblock(indx, lax, m0), keyset(gch) = gc-heap(lpt, log1), remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, m < # avol, ginval < # avol, abs-gstore(avol, lpt, gstore, ginval), awbuf-inv(avol, buffered(m)), bin-heap-inv(gch, lpt), buf-ro-rw-mode(false, buffered(m), lpt, avol), bufs-log-only(buffered(m), log1, lpt), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt, freelist), inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), inv(indexblock(indx, lax, m0)), log-group-block(log1, lpt), lpt-free-unref(lpt0), lpt-free-unref(lpt), lpt-leb-size(lpt0), lpt-leb-size(lpt), lpt-ram-flash(lpt, lpt0, log1), m ∈ istore, istore0 ⊑ istore, isbuf → synced(avol), ∀ n. (n < # avol ∧ lpt[n].flags = LP_INDEX_NODES ↔ n ∈ istore) ∧ (n ∈ istore → abs-leb(avol[n], istore[n], lpt[n]) ∧ lpt[n].ref-size = istore[n].ref-size) ⊦ dups(log1), avol[m].mapped? ∧ (m1 + 2 * NODE_HEADER_SIZE + ind.alignedsize ≤ LEB_SIZE → m1 = # avol[m].data)