| # buf = EB_PAGE_SIZE, # lpt1 = # avol2, # avol1 = # avol2, # avol0 = # avol2, n < # avol2, awbuf-inv(avol2, bleb0), ebm-vol-inv(avol0), avol0[n] = unmapped ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE), avol0[n].mapped? → avol1[n] = avol0[n], bleb0 ≠ nobuffer → bleb0.leb < # avol2 ∧ wbuf-cons(mkwbuf(buf, m2, m3), avol0[bleb0.leb], rofs0), n < # avol2 → (buffered(n) ≠ bleb0 → avol2[n] = avol0[n]) ∧ (¬ rofs0 ∧ buffered(n) = bleb0 → avol2[n] = abs⊕(avol0[n], mkwbuf(buf, m2, m3))) ∧ ( rofs0 ∧ buffered(n) = bleb0 → m2 = # avol0[n].data ∧ avol2[n] = abs⊕(avol0[n], mkwbuf(buf, # avol0[n].data, m3)) ∨ m2 < # avol0[n].data ∧ m2 + m3 < # avol0[n].data ∧ avol2[n] = avol0[n] ∧ subarray(buf, 0, m3) = subarray(avol0[n].data, m2, m3)) ⊦ (avol2[n].mapped? → avol1[n] = mapped(avol2[n].data.align↓)) ∧ (¬ avol2[n].mapped? ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE)) |
# avol0 = # avol2, # avol1 = # avol2, # lpt1 = # avol2, # buf = EB_PAGE_SIZE, n < # avol2, awbuf-inv(avol2, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → bleb0.leb < # avol2 ∧ wbuf-cons(mkwbuf(buf, m2, m3), avol0[bleb0.leb], rofs0), avol0[n].mapped? → avol1[n] = avol0[n], avol0[n] = unmapped ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE), buffered(n) ≠ bleb0 → avol2[n] = avol0[n], ¬ rofs0 ∧ buffered(n) = bleb0 → avol2[n] = abs⊕(avol0[n], mkwbuf(buf, m2, m3)), rofs0 ∧ buffered(n) = bleb0 → m2 = # avol0[n].data ∧ avol2[n] = abs⊕(avol0[n], mkwbuf(buf, # avol0[n].data, m3)) ∨ m2 < # avol0[n].data ∧ m2 + m3 < # avol0[n].data ∧ avol2[n] = avol0[n] ∧ subarray(buf, 0, m3) = subarray(avol0[n].data, m2, m3) ⊦ (avol2[n].mapped? → avol1[n] = mapped(avol2[n].data.align↓)) ∧ (¬ avol2[n].mapped? ∧ avol1[n].mapped? → # avol1[n].data ≤ LEB_SIZE ∧ is-aligned(# avol1[n].data, EB_PAGE_SIZE))