| # lpt = # avol, avol[m3] = mapped(buf), m3 < # avol, awbuf-inv(avol, bleb), synced(avol0), synced(avol), avol0 ↓ avol ⊦ (⌊EIO⌋ ∨ EIO = ESUCCESS) ∧ ⟨err := EIO; nx := nx0; if err = ESUCCESS then nx := nx + m3 ', bleb := buffered(m3)⟩ (nx0 = nx) |
# lpt = # avol, avol[m3] = mapped(buf), m3 < # avol, awbuf-inv(avol, bleb), synced(avol), synced(avol0), avol0 ↓ avol ⊦ ⟨err := EIO; nx := nx0; if err = ESUCCESS then nx := nx + m3 ', bleb := buffered(m3)⟩ (nx0 = nx)
Used simplifier rules: ⊦ ⌊EIO⌋ ; (s)