| # buf = EB_PAGE_SIZE, # lpt1 = # avol1, # avol0 = # avol1, # lpt2 = # avol1, rofs ↔ rofs0, rofs0 ↔ rofs1, adr = adr3, adr0 = adr2, avol = avol1, lpt = lpt1, lpt0 = lpt2, m = m5, m0 = m3, ns = ns4, ns0 = ns2, ns1 = ns2, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs1), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs1) ⊦ ⟨if synced(avol) ∧ # lpt0 = # avol then {fail_or_success#(; ; err); if err = ESUCCESS then {adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ns0} else rofs := true; ns0 := ?} else abort⟩ (adr = adr2 ∧ m = m3 ∧ plog = [] ∧ lpt = lpt2 ∧ ns = ns1 ∧ (rofs ↔ rofs1) ∧ ns3 = ns0 ∧ ESUCCESS = err) |
# lpt2 = # avol1, # avol0 = # avol1, # lpt1 = # avol1, # buf = EB_PAGE_SIZE, rofs0 ↔ rofs1, rofs ↔ rofs0, adr = adr3, adr0 = adr2, avol = avol1, lpt = lpt1, lpt0 = lpt2, m = m5, m0 = m3, ns = ns4, ns0 = ns2, ns1 = ns2, plog = plog0, abs(avol1, bleb, mkwbuf(buf, m1, m2), avol0, rofs1), awbuf-inv(avol1, bleb), ebm-vol-inv(avol0), synced(avol1), bleb ≠ nobuffer → bleb.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m1, m2), avol0[bleb.leb], rofs1) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then {adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ns0} else rofs := true; ns0 := ?⟩ (adr = adr2 ∧ m = m3 ∧ plog = [] ∧ lpt = lpt2 ∧ ns = ns1 ∧ (rofs ↔ rofs1) ∧ ns3 = ns0 ∧ ESUCCESS = err)