| # lpt = # avol, # buf = EB_PAGE_SIZE, m0 = m4, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ [fail_or_success#(; ; err); if err = ESUCCESS then avol[m0] := mapped(mkbuf(0)) else {skip or avol[m0] := unmapped}] (ebm-vol-inv(avol) ∧ # lpt = # avol → bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)), buffered(m4) = bleb |
# buf = EB_PAGE_SIZE, # lpt = # avol, buffered(m4) ≠ bleb, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ [fail_or_success#(; ; err); if err = ESUCCESS then avol[m4] := mapped(mkbuf(0)) else {skip or avol[m4] := unmapped}] (ebm-vol-inv(avol) ∧ # lpt = # avol → bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs))