| # wlar = # apebs, # vols[v0] = # avols[v0], wlar[n] = wl-entry(m0, stat), apebs[n] = mkpeb(aehdr, avhdr, buf, m2, boolvar), avols[v0][m1] = mapped(buf0, m3), vols[v0][m1] = ⌜n⌝ , n < # apebs, m1 < # avols[v0], v0 ∈ vols, v0 ∈ avols, m4 ≤ m3, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs ∧ n < # wlar ∧ apebs[n].vidhdr.valid? ∧ apebs[n].vidhdr.vol = v ∧ apebs[n].vidhdr.leb = m ∧ n ≠ n0, v0 ≠ v ∨ m1 ≠ m ⊦ stat = used, buf0 = buf ∧ m2 ≤ m3 |
# wlar = # apebs, # vols[v0] = # avols[v0], wlar[n] = wl-entry(m0, stat), apebs[n] = mkpeb(aehdr, avhdr, buf, m2, boolvar), avols[v0][m1] = mapped(buf0, m3), vols[v0][m1] = ⌜n⌝ , n < # apebs, m1 < # avols[v0], v0 ∈ vols, v0 ∈ avols, m4 ≤ m3, ∀ v1, m5, n1. vols[v1][m5] = ⌜n1⌝ ∧ v1 ∈ vols ∧ m5 < # vols[v1] ↔ wlar[n1].status = used ∧ n1 < # apebs ∧ apebs[n1].vidhdr.valid? ∧ apebs[n1].vidhdr.vol = v1 ∧ apebs[n1].vidhdr.leb = m5 ∧ n1 ≠ n0, v0 ≠ v ∨ m1 ≠ m ⊦ stat = used, buf0 = buf ∧ m2 ≤ m3