| # avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, avol1[m5] = mapped(buf), err = EROFS, m5 < # avol1, abs(avol1, bleb1, mkwbuf(buf0, m4, m3), avol0, true), awbuf-inv(avol1, bleb1), ebm-vol-inv(avol0), synced(avol1), bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb1.leb], true) ⊦ ⟨plog := plog0; bleb := bleb1; if err = ESUCCESS then plog := plog + m5 ', bleb := buffered(m5)⟩ (bleb = bleb1 ∧ plog = plog0 ∧ EROFS = err) |
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m5] = mapped(buf), err = EROFS, plog = plog0, m5 < # avol1, abs(avol1, bleb1, mkwbuf(buf0, m4, m3), avol0, true), awbuf-inv(avol1, bleb1), ebm-vol-inv(avol0), synced(avol1), bleb1 ≠ nobuffer → bleb1.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb1.leb], true) ⊦ ⟨bleb := bleb1; if err = ESUCCESS then plog := plog + m5 ', bleb := buffered(m5)⟩ (bleb = bleb1 ∧ plog = plog0 ∧ EROFS = err)