| # lpt2 = # avol1, # buf = EB_PAGE_SIZE, avol = avol0, lpt = lpt2, ebm-vol-inv(avol1), avol1 ⊆ avol0, bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m5, m4), avol1[bleb1.leb], rofs1) ⊦ ⟪n := EB_PAGE_SIZE; bleb := nobuffer; wbuf.content := mkbuf(n); rofs := false⟫ (# wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol0 ∧ wbuf-cons(wbuf, avol0[bleb.leb], rofs)) ∧ n = EB_PAGE_SIZE) |
# buf = EB_PAGE_SIZE, # lpt2 = # avol1, avol = avol0, lpt = lpt2, ebm-vol-inv(avol1), avol1 ⊆ avol0, bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m5, m4), avol1[bleb1.leb], rofs1) ⊦ ⟪bleb := nobuffer; wbuf.content := mkbuf(EB_PAGE_SIZE); rofs := false⟫ ( # wbuf.content = EB_PAGE_SIZE ∧ (bleb ≠ nobuffer → bleb.leb < # avol0 ∧ wbuf-cons(wbuf, avol0[bleb.leb], rofs)) ∧ EB_PAGE_SIZE = EB_PAGE_SIZE)