| # avol0 = # avol1, # lpt0 = # avol1, # buf0 = EB_PAGE_SIZE, rofs ↔ false, avol1[m5] = mapped(buf), adr = adr0, avol = avol0, err = err0, err = ESUCCESS, lpt = lpt0, m = m2, m0 = m5, ns = ns0, plog = plog0, wbuf = mkwbuf(buf0, m4, m3), m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪bleb0 := bleb; if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err1)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog + m0 ∧ err = err1) |
# buf0 = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs ↔ false, avol1[m5] = mapped(buf), adr = adr0, avol = avol0, bleb0 = bleb, err = ESUCCESS, err = err0, lpt = lpt0, m = m2, m0 = m5, ns = ns0, plog = plog0, wbuf = mkwbuf(buf0, m4, m3), m5 < # avol1, abs(avol1, bleb, mkwbuf(buf0, m4, m3), avol0, false), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ buffered(m5) → bleb = nobuffer ∨ m3 = 0 → avol0[m5].mapped?, bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf0, m4, m3), avol0[bleb.leb], false), ⌊err0⌋ ∨ err0 = ESUCCESS, bleb = buffered(m5) ∨ (bleb = nobuffer ∨ m3 = 0) ∧ avol0[m5].mapped? ∧ # buf = # avol0[m5].data ⊦ ⟪if err = ESUCCESS then wbuf_move_buf#(m5, # avol1[m5].data, rofs, avol0; bleb, wbuf; err)⟫ ⟨awbuf_add_log_leb#(m5, # avol1[m5].data, adr0, m2, avol1, lpt0, ns0, rofs; plog0, bleb0; err1)⟩ (abs(avol1, bleb, wbuf, avol0, rofs) ∧ bleb0 = bleb ∧ plog0 = plog + m0 ∧ err = err1)