| # buf = EB_PAGE_SIZE, # lpt1 = # avol1, # avol0 = # avol1, # lpt2 = # avol1, adr = adr3, err = ESUCCESS, err = err0, lpt = lpt1, m = m5, ns = ns4, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪adr := adr2; m := m3; plog := []; lpt := lpt2; ns := ns2; ns0 := ?; rofs0 := rofs; if err ≠ ESUCCESS then rofs := true⟫ ⟨awbuf_commit#(lpt2, adr2, m3, avol1, bleb; ns2, adr3, m5, plog0, lpt1, ns4, rofs0; err1)⟩ ( abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs) ∧ adr3 = adr ∧ m5 = m ∧ plog0 = plog ∧ lpt1 = lpt ∧ ns4 = ns ∧ (rofs0 ↔ rofs) ∧ ns0 = ns2 ∧ err = err1) |
# lpt2 = # avol1, # avol0 = # avol1, # lpt1 = # avol1, # buf = EB_PAGE_SIZE, adr = adr3, err = err0, err = ESUCCESS, lpt = lpt1, m = m5, ns = ns4, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪m := m3; plog := []; lpt := lpt2; ns := ns2; ns0 := ?; rofs0 := rofs; if err ≠ ESUCCESS then rofs := true⟫ ⟨awbuf_commit#(lpt2, adr2, m3, avol1, bleb; ns2, adr3, m5, plog0, lpt1, ns4, rofs0; err1)⟩ ( abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs) ∧ adr3 = adr2 ∧ m5 = m ∧ plog0 = plog ∧ lpt1 = lpt ∧ ns4 = ns ∧ (rofs0 ↔ rofs) ∧ ns0 = ns2 ∧ err = err1)