| ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; lpt0 := lpt; if err = ESUCCESS then {avol := fill(mkavolume(# lpt), unmapped); adr := adr0; m := m0; nx := []; lpt := lpt0; ns := ∅; bleb := nobuffer; isbuf := false} else avol := ?, bleb := ?, isbuf := ?, adr := ?, m := ?, nx := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → synced(avol) ∧ awbuf-inv(avol, bleb) ∧ # lpt = # avol) |
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪lpt0 := lpt; if err = ESUCCESS then {avol := fill(mkavolume(# lpt), unmapped); adr := adr0; m := m0; nx := []; lpt := lpt0; ns := ∅; bleb := nobuffer; isbuf := false} else avol := ?, bleb := ?, isbuf := ?, adr := ?, m := ?, nx := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → synced(avol) ∧ awbuf-inv(avol, bleb) ∧ # lpt = # avol)