| # lpt2 = # avol0, # lpt0 = # avol0, lpt2[n0] = mklp(0, m5, LP_FREE, m6), keyset(gch) = gc-heap(lpt2, log1), remove-refsize0(gstore0) = gstore0, remove-refsize0(istore0) = istore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, pstate ≠ readonly, ginval < # avol0, n0 < # avol0, abs-gstore(avol0, lpt2, gstore, ginval), abs-istore(avol0, lpt2, istore), awbuf-inv(avol0, bleb), bin-heap-inv(gch, lpt2), buf-ro-rw-mode(false, bleb, lpt2, avol0), bufs-log-only(bleb, log1, lpt2), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt2, n0 ' + nx0), inv(gstore \ ginval), inv(gstore0), inv(istore), inv(istore0), log-group-block(log1, lpt2), lpt-free-unref(lpt2), lpt-free-unref(lpt0), lpt-leb-size(lpt2), lpt-leb-size(lpt0), lpt-ram-flash(lpt2, lpt0, log1), synced(avol0), istore0 ⊑ istore, ¬ dups(log1), pstate = unbuffered → bleb = nobuffer, pstate.journal? → log1 ≠ [] ∧ pstate.lnum = log1.last ∧ pstate.lnum ∈ gstore, pstate.index? → pstate.lnum ∈ istore, pstate ≠ unbuffered → bleb = buffered(pstate.lnum) ⊦ ⟪if bleb = buffered(n0) ∨ (bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE)) ∧ avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ avol0[n0, mapped(mkbuf(0))][n0].data = mkbuf(0) then {fail_or_success#(; ; err); if err = ESUCCESS then bleb := buffered(n0)} else abort; lpt1 := lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0, lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0].ref-size:= 0]; err0 := err; if err0 ≠ ESUCCESS then freelist := n0 ' + (n0 ' + nx0).tail else lpt1[n0].flags := LP_INDEX_NODES⟫ ⟨pstate0 := pstate; apersistence_allocate_ind#(adr0, istore0, ginval, gstore, gstore0, log1, m, ns0, true; istore, pstate; err1)⟩ ( abs-istore(avol0[n0, mapped(mkbuf(0))], lpt1, istore) ∧ abs-gstore(avol0[n0, mapped(mkbuf(0))], lpt1, gstore, ginval) ∧ ginval < # lpt1 ∧ (pstate = unbuffered → bleb = nobuffer) ∧ (pstate = readonly ↔ pstate0 = readonly) ∧ (pstate ≠ unbuffered ∧ pstate ≠ readonly → bleb = buffered(pstate.lnum)) ∧ err0 = err1) |
# lpt0 = # avol0, # lpt2 = # avol0, lpt2[n0] = mklp(0, m5, LP_FREE, m6), keyset(gch) = gc-heap(lpt2, log1), remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, n0 < # avol0, ginval < # avol0, abs-gstore(avol0, lpt2, gstore, ginval), abs-istore(avol0, lpt2, istore), awbuf-inv(avol0, bleb), bin-heap-inv(gch, lpt2), buf-ro-rw-mode(false, bleb, lpt2, avol0), bufs-log-only(bleb, log1, lpt2), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt2, n0 ' + nx0), inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), log-group-block(log1, lpt2), lpt-free-unref(lpt0), lpt-free-unref(lpt2), lpt-leb-size(lpt0), lpt-leb-size(lpt2), lpt-ram-flash(lpt2, lpt0, log1), synced(avol0), istore0 ⊑ istore, bleb ≠ buffered(n0) → ( bleb ≠ nobuffer → avol0[n0, mapped(mkbuf(0))][bleb.leb].mapped? ∧ bleb.leb < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0 ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE) → (n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0) ∧ ( avol0[n0, mapped(mkbuf(0))][n0].mapped? → avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0)), pstate ≠ unbuffered → bleb = buffered(pstate.lnum), pstate.index? → pstate.lnum ∈ istore, pstate.journal? → log1 ≠ [] ∧ pstate.lnum = log1.last ∧ pstate.lnum ∈ gstore, pstate = unbuffered → bleb = nobuffer, bleb = buffered(n0) ∨ (bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE)) ∧ avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ avol0[n0, mapped(mkbuf(0))][n0].data = mkbuf(0) ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then bleb := buffered(n0); lpt1 := lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0, lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0].ref-size:= 0]; err0 := err; if err0 ≠ ESUCCESS then freelist := n0 ' + (n0 ' + nx0).tail else lpt1[n0].flags := LP_INDEX_NODES⟫ ⟨pstate0 := pstate; apersistence_allocate_ind#(adr0, istore0, ginval, gstore, gstore0, log1, m, ns0, true; istore, pstate; err1)⟩ ( abs-istore(avol0[n0, mapped(mkbuf(0))], lpt1, istore) ∧ abs-gstore(avol0[n0, mapped(mkbuf(0))], lpt1, gstore, ginval) ∧ ginval < # lpt1 ∧ (pstate = unbuffered → bleb = nobuffer) ∧ (pstate = readonly ↔ pstate0 = readonly) ∧ (pstate ≠ unbuffered ∧ pstate ≠ readonly → bleb = buffered(pstate.lnum)) ∧ err0 = err1), pstate = readonly, dups(log1)
# lpt0 = # avol0, # lpt2 = # avol0, lpt2[n0] = mklp(0, m5, LP_FREE, m6), keyset(gch) = gc-heap(lpt2, log1), remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, n0 < # avol0, ginval < # avol0, abs-gstore(avol0, lpt2, gstore, ginval), abs-istore(avol0, lpt2, istore), awbuf-inv(avol0, bleb), bin-heap-inv(gch, lpt2), buf-ro-rw-mode(false, bleb, lpt2, avol0), bufs-log-only(bleb, log1, lpt2), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt2, n0 ' + nx0), inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), log-group-block(log1, lpt2), lpt-free-unref(lpt0), lpt-free-unref(lpt2), lpt-leb-size(lpt0), lpt-leb-size(lpt2), lpt-ram-flash(lpt2, lpt0, log1), synced(avol0), istore0 ⊑ istore, bleb ≠ buffered(n0) → ( bleb ≠ nobuffer → avol0[n0, mapped(mkbuf(0))][bleb.leb].mapped? ∧ bleb.leb < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0 ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE) → (n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0) ∧ ( avol0[n0, mapped(mkbuf(0))][n0].mapped? → avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0)), pstate ≠ unbuffered → bleb = buffered(pstate.lnum), pstate.index? → pstate.lnum ∈ istore, pstate.journal? → log1 ≠ [] ∧ pstate.lnum = log1.last ∧ pstate.lnum ∈ gstore, pstate = unbuffered → bleb = nobuffer ⊦ ⟪abort; lpt1 := lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0, lpt2[n0, mklp(0, 0, LP_FREE, m6)][n0].ref-size:= 0]; err0 := err; if err0 ≠ ESUCCESS then freelist := n0 ' + (n0 ' + nx0).tail else lpt1[n0].flags := LP_INDEX_NODES⟫ ⟨pstate0 := pstate; apersistence_allocate_ind#(adr0, istore0, ginval, gstore, gstore0, log1, m, ns0, true; istore, pstate; err1)⟩ ( abs-istore(avol0[n0, mapped(mkbuf(0))], lpt1, istore) ∧ abs-gstore(avol0[n0, mapped(mkbuf(0))], lpt1, gstore, ginval) ∧ ginval < # lpt1 ∧ (pstate = unbuffered → bleb = nobuffer) ∧ (pstate = readonly ↔ pstate0 = readonly) ∧ (pstate ≠ unbuffered ∧ pstate ≠ readonly → bleb = buffered(pstate.lnum)) ∧ err0 = err1), bleb = buffered(n0), pstate = readonly, dups(log1), (bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE)) ∧ avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ avol0[n0, mapped(mkbuf(0))][n0].data = mkbuf(0)
# lpt0 = # avol0, # lpt2 = # avol0, lpt2[n0] = mklp(0, m5, LP_FREE, m6), keyset(gch) = gc-heap(lpt2, log1), remove-refsize0(istore0) = istore0, remove-refsize0(gstore0) = gstore0, elems log1 ∩ ginval = ∅, dom gstore0 ∪ elems log1 = dom gstore ∪ ginval, n0 < # avol0, ginval < # avol0, abs-gstore(avol0, lpt2, gstore, ginval), abs-istore(avol0, lpt2, istore), awbuf-inv(avol0, bleb), bin-heap-inv(gch, lpt2), buf-ro-rw-mode(false, bleb, lpt2, avol0), bufs-log-only(bleb, log1, lpt2), flash-lpt-cons(lpt0, istore0, gstore0), freelist-cons(lpt2, n0 ' + nx0), inv(istore0), inv(istore), inv(gstore0), inv(gstore \ ginval), log-group-block(log1, lpt2), lpt-free-unref(lpt0), lpt-free-unref(lpt2), lpt-leb-size(lpt0), lpt-leb-size(lpt2), lpt-ram-flash(lpt2, lpt0, log1), synced(avol0), istore0 ⊑ istore, pstate ≠ unbuffered → bleb = buffered(pstate.lnum), pstate.index? → pstate.lnum ∈ istore, pstate.journal? → log1 ≠ [] ∧ pstate.lnum = log1.last ∧ pstate.lnum ∈ gstore, pstate = unbuffered → bleb = nobuffer ⊦ bleb = buffered(n0), pstate = readonly, dups(log1), ( bleb ≠ nobuffer → avol0[n0, mapped(mkbuf(0))][bleb.leb].mapped? ∧ bleb.leb < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0 ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol0[n0, mapped(mkbuf(0))][bleb.leb].data, EB_PAGE_SIZE) → (n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0) ∧ ( avol0[n0, mapped(mkbuf(0))][n0].mapped? → avol0[n0, mapped(mkbuf(0))][n0].mapped? ∧ n0 < # avol0[n0, mapped(mkbuf(0))] ∧ n0 < # avol0))