| # lpt = # avol, awbuf-inv(avol, bleb), n ≤ # buf, # avol[bleb.leb].data + n ≤ LEB_SIZE ⊦ ⟪awbuf_write_buf#(n, buf, adr, m, nx, lpt, ns, bleb; avol, isbuf; err)⟫ (awbuf-inv(avol, bleb) ∧ # lpt = # avol), bleb = nobuffer |
# lpt = # avol, bleb ≠ nobuffer, awbuf-inv(avol, bleb), # avol[bleb.leb].data + n ≤ LEB_SIZE, n ≤ # buf ⊦ ⟪awbuf_write_buf#(n, buf, adr, m, nx, lpt, ns, bleb; avol, isbuf; err)⟫ (awbuf-inv(avol, bleb) ∧ # lpt = # avol)