| # avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, rofs ↔ true, avol1[m5] = mapped(buf), adr = adr0, avol = avol1, bleb = bleb0, bleb0 = bleb1, lpt = lpt0, m = m2, m0 = # avol1[m5].data, m1 = m5, ns = ns0, plog = plog0, plog1 = plog0, avol1[m5].mapped?, m5 < # avol1, abs(avol1, bleb1, mkwbuf(buf0, m4, m3), avol0, true), awbuf-inv(avol1, bleb1), ebm-vol-inv(avol0), synced(avol1), bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb1.leb], true) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then plog := plog + m1, bleb := buffered(m1)⟩ (bleb = bleb1 ∧ plog = plog1 ∧ EROFS = err) |
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m5] = mapped(buf), m5 < # avol1, abs(avol1, bleb1, mkwbuf(buf0, m4, m3), avol0, true), awbuf-inv(avol1, bleb1), ebm-vol-inv(avol0), synced(avol1), bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb1.leb], true) ⊦ ⟨fail_or_success#(; ; err); plog := plog0; bleb := bleb1; if err = ESUCCESS then plog := plog + m5 ', bleb := buffered(m5)⟩ (bleb = bleb1 ∧ plog = plog0 ∧ EROFS = err)
Used simplifier rules: ⊦ mapped(buf) = mapped(buf0) ↔ buf = buf0; (s)% ⊦ nx + n = nx + n '; (s)% ⊦ aleb.mapped? ↔ (∃ buf. aleb = mapped(buf)); (as)