| # lpt = # avol, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, mapped(mkbuf(0))] ⊦ (⌊ESUCCESS⌋ ∨ ESUCCESS = ESUCCESS) ∧ ⟨err := ESUCCESS; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol), buffered(m2) = bleb, mapped(mkbuf(0)) ↓ avol[m2] |
# lpt = # avol, buffered(m2) ≠ bleb, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, mapped(mkbuf(0))], ¬ mapped(mkbuf(0)) ↓ avol[m2] ⊦ ⟨err := ESUCCESS; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol)
Used simplifier rules: ⊦ ¬ ⌊ESUCCESS⌋ ; (s)