| # buf = EB_PAGE_SIZE, # lpt = # avol, m0 = m4, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ ⟪avol[m0] := unmapped⟫ ((bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs)) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol), buffered(m4) = bleb |
# lpt = # avol, # buf = EB_PAGE_SIZE, m0 = m4, m0 < # avol, m4 < # avol, ebm-vol-inv(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[bleb.leb], rofs) ⊦ buffered(m4) = bleb, (bleb ≠ nobuffer → bleb.leb < # avol[m0, unmapped] ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol[m0, unmapped][bleb.leb], rofs)) ∧ ebm-vol-inv(avol[m0, unmapped]) ∧ # lpt = # avol[m0, unmapped]