| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # lpt = # avol, err = err0, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err ≠ ESUCCESS then rofs := true⟫ ((bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)) ∧ # lpt = # avol), err = ESUCCESS |
# lpt = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, err = err0, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪rofs := true⟫ ((bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)) ∧ # lpt = # avol), err = ESUCCESS