| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, bleb = bleb1, abs(avol, bleb1, mkwbuf(buf, m2, m1), avol0, true), awbuf-inv(avol, bleb1), ebm-vol-inv(avol0), synced(avol), bleb1 ≠ nobuffer → bleb1.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m2, m1), avol0[bleb1.leb], true) ⊦ ⟨if true then err := EROFS else bleb := nobuffer, err := ESUCCESS⟩ (bleb = bleb1 ∧ EROFS = err) |
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, bleb = bleb1, abs(avol, bleb1, mkwbuf(buf, m2, m1), avol0, true), awbuf-inv(avol, bleb1), ebm-vol-inv(avol0), synced(avol), bleb1 ≠ nobuffer → bleb1.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m2, m1), avol0[bleb1.leb], true) ⊦ ⟨err := EROFS⟩ (bleb = bleb1 ∧ EROFS = err)