| # buf = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, bleb0 = bleb, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs) ⊦ ⟪if rofs then err := EROFS else {bleb := nobuffer; err := ESUCCESS}⟫ ⟨awbuf_destroy_buf#(adr0, m0, plog0, avol, lpt0, ns0, rofs; bleb0; err0)⟩ (abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs) ∧ bleb0 = bleb ∧ err = err0) |
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, bleb0 = bleb, rofs, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs) ⊦ ⟪err := EROFS⟫ ⟨awbuf_destroy_buf#(adr0, m0, plog0, avol, lpt0, ns0, rofs; bleb0; err0)⟩ (abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs) ∧ bleb0 = bleb ∧ err = err0)
# avol0 = # avol, # lpt0 = # avol, # buf = EB_PAGE_SIZE, bleb0 = bleb, ¬ rofs, abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), synced(avol), bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf, m, m1), avol0[bleb.leb], rofs) ⊦ ⟪bleb := nobuffer; err := ESUCCESS⟫ ⟨awbuf_destroy_buf#(adr0, m0, plog0, avol, lpt0, ns0, rofs; bleb0; err0)⟩ (abs(avol, bleb, mkwbuf(buf, m, m1), avol0, rofs) ∧ bleb0 = bleb ∧ err = err0)