| # buf = EB_PAGE_SIZE, # lpt = # avol, m = m3, m0 = m4, ¬ rofs, wbuf = mkwbuf(buf, m1, m2), ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ¬ rofs → bleb = buffered(m4) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m4 < # avol ∧ avol[m4].mapped? ∧ m3 = # avol[m4].data ⊦ ⟪bleb := buffered(m0); wbuf.offset := m; wbuf.nbytes := 0⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(wbuf, avol[bleb.leb], rofs))), bleb = buffered(m0) |
# lpt = # avol, # buf = EB_PAGE_SIZE, m = m3, m0 = m4, ¬ rofs, wbuf = mkwbuf(buf, m1, m2), ebm-vol-inv(avol), ¬ rofs → bleb = buffered(m4) ∨ (bleb = nobuffer ∨ m2 = 0) ∧ m4 < # avol ∧ avol[m4].mapped? ∧ m3 = # avol[m4].data, bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ ⟪wbuf.offset := m; wbuf.nbytes := 0⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (buffered(m0) ≠ nobuffer → buffered(m0).leb < # avol ∧ wbuf-cons(wbuf, avol[buffered(m0).leb], rofs))), bleb = buffered(m0)