| # lpt = # avol, # buf1 = EB_PAGE_SIZE, avol[m] = mapped(buf0), wbuf = mkwbuf(buf1, m1, m2), m < # avol, ebm-vol-inv(avol), wbuf-cons(wbuf, mapped(buf0), rofs), ¬ rofs → m1 + m2 + n ≤ LEB_SIZE ∧ n ≤ # buf ⊦ ⟪wbuf_write_buf#(n, buf, buffered(m), EB_PAGE_SIZE, adr, m0, plog, lpt, ns; wbuf, rofs, avol; err)⟫ (# wbuf.content = EB_PAGE_SIZE ∧ m < # avol ∧ wbuf-cons(wbuf, avol[m], rofs) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol) |
# buf1 = EB_PAGE_SIZE, # lpt = # avol, avol[m] = mapped(buf0), wbuf = mkwbuf(buf1, m1, m2), m < # avol, ebm-vol-inv(avol), wbuf-cons(mkwbuf(buf1, m1, m2), mapped(buf0), rofs), ¬ rofs → m1 + m2 + n ≤ LEB_SIZE ∧ n ≤ # buf ⊦ ⟪wbuf_write_buf#(n, buf, buffered(m), EB_PAGE_SIZE, adr, m0, plog, lpt, ns; wbuf, rofs, avol; err)⟫ (# wbuf.content = EB_PAGE_SIZE ∧ m < # avol ∧ wbuf-cons(wbuf, avol[m], rofs) ∧ ebm-vol-inv(avol) ∧ # lpt = # avol)