| err0 = ESUCCESS, avols[v][m2].mapped?, m2 < # avols[v], ebm-cons(avols), v ∈ avols, n0 + n ≤ # buf, m1 + n ≤ LEB_SIZE, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪buf := copy(avols[v][m2].data, m1, buf, n0, n)⟫ true |
err0 = ESUCCESS, avols[v][m2].mapped?, m2 < # avols[v], ebm-cons(avols), v ∈ avols, m1 + n ≤ LEB_SIZE, n0 + n ≤ # buf, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ (m1 + n ≤ # avols[v][m2].data ∧ n0 + n ≤ # buf) ∧ avols[v][m2].mapped? ∧ m2 < # avols[v] ∧ v ∈ avols