| # buf = EB_PAGE_SIZE, # lpt = # avol, err0 = ESUCCESS, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ [avol[m4] := mapped(mkbuf(0))] (ebm-vol-inv(avol) ∧ # lpt = # avol → bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)), buffered(m4) = bleb |
# lpt = # avol[m4, mapped(mkbuf(0))], # lpt = # avol, # buf = EB_PAGE_SIZE, err0 = ESUCCESS, m4 < # avol, ebm-vol-inv(avol[m4, mapped(mkbuf(0))]), ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ bleb = nobuffer, buffered(m4) = bleb, bleb.leb < # avol[m4, mapped(mkbuf(0))] ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[m4, mapped(mkbuf(0))][bleb.leb], rofs)