| # lpt = # avol, # buf = EB_PAGE_SIZE, err = err0, m0 = m3, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], false), bleb = buffered(m3) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m3 < # avol ∧ avol[m3].mapped? ∧ m4 = # avol[m3].data, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then plog := plog + m0; rofs := false; wbuf := mkwbuf(buf, m1, m2); if err = ESUCCESS then wbuf_move_buf#(m3, m4, rofs, avol; bleb, wbuf; err)⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs))) |
# buf = EB_PAGE_SIZE, # lpt = # avol, err = ESUCCESS, err = err0, m0 = m3, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], false), ⌊err0⌋ ∨ err0 = ESUCCESS, bleb = buffered(m3) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m3 < # avol ∧ avol[m3].mapped? ∧ m4 = # avol[m3].data ⊦ ⟪plog := plog + m0; rofs := false; wbuf := mkwbuf(buf, m1, m2); if err = ESUCCESS then wbuf_move_buf#(m3, m4, rofs, avol; bleb, wbuf; err)⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs)))
# buf = EB_PAGE_SIZE, # lpt = # avol, err = err0, m0 = m3, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], false), ⌊err0⌋ ∨ err0 = ESUCCESS, bleb = buffered(m3) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m3 < # avol ∧ avol[m3].mapped? ∧ m4 = # avol[m3].data ⊦ ⟪skip; rofs := false; wbuf := mkwbuf(buf, m1, m2); if err = ESUCCESS then wbuf_move_buf#(m3, m4, rofs, avol; bleb, wbuf; err)⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs))), err = ESUCCESS