| # lpt = # avol, err0 = err2, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, unmapped], ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol), buffered(m2) = bleb, err2 = ESUCCESS, avol0[m2] ↓ avol[m2] |
# lpt = # avol, buffered(m2) ≠ bleb, m2 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol[m2, unmapped], ⌊err2⌋ , ¬ avol0[m2] ↓ avol[m2] ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then avol[m2] := mapped(mkbuf(0)) else {skip or avol[m2] := unmapped}⟩ (synced(avol) ∧ avol0 ↓ avol)
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)