| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, abs(avol, bleb, mkwbuf(buf, m2, m1), avol0, false), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m2, m1), avol0[bleb.leb], false) ⊦ ⟨bleb := nobuffer, err := ESUCCESS⟩ (avol = avol0 ∧ bleb = nobuffer ∧ ESUCCESS = err) |
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, abs(avol, bleb, mkwbuf(buf, m2, m1), avol0, false), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m2, m1), avol0[bleb.leb], false) ⊦ avol = avol0 ∧ nobuffer = nobuffer ∧ ESUCCESS = ESUCCESS