| # avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, avol1[m5] = mapped(buf), adr = adr0, avol = avol0, lpt = lpt0, m = m2, m0 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then plog := plog + m0; wbuf := mkwbuf(buf0, m4, m3); rofs := false; bleb0 := bleb; if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err0)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog ∧ err = err0) |
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m5] = mapped(buf), adr = adr0, avol = avol0, lpt = lpt0, m = m2, m0 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), ⌊err0⌋ ∨ err0 = ESUCCESS, bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data ⊦ ⟪err := err0; if err = ESUCCESS then plog := plog + m0; wbuf := mkwbuf(buf0, m4, m3); rofs := false; bleb0 := bleb; if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err1)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog ∧ err = err1)
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol1[m5] = mapped(buf), adr = adr0, avol = avol0, lpt = lpt0, m = m2, m0 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data ⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS