| # avol0 = # avol1, # lpt0 = # avol1, # buf = EB_PAGE_SIZE, rofs ↔ false, avol0[m5] = mapped(buf0), adr = adr0, avol = avol1, bleb = bleb0, lpt = lpt0, m = m2, m0 = # buf0, m1 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE), bleb0 = nobuffer ∨ m3 = 0 ⊦ ⟨if bleb = buffered(m1) ∨ (bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE)) ∧ m1 < # avol ∧ avol[m1].mapped? ∧ m0 = # avol[m1].data then {fail_or_success#(; ; err); if err = ESUCCESS then bleb := buffered(m1)} else abort⟩ (abs(avol1, buffered(m5), mkwbuf(buf, # buf0, 0), avol0, false) ∧ bleb = buffered(m5) ∧ ESUCCESS = err), bleb0 = buffered(m5) |
# buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs ↔ false, avol0[m5] = mapped(buf0), adr = adr0, avol = avol1, bleb = bleb0, lpt = lpt0, m = m2, m0 = # buf0, m1 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb ≠ buffered(m1) → (bleb ≠ nobuffer → avol[bleb.leb].mapped? ∧ bleb.leb < # avol ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE) → m1 < # avol → m1 < # avol ∧ (avol[m1].mapped? → avol[m1].mapped? ∧ m1 < # avol)), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb = buffered(m1) ∨ (bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE)) ∧ m1 < # avol ∧ avol[m1].mapped? ∧ m0 = # avol[m1].data, bleb0 = nobuffer ∨ m3 = 0, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then bleb := buffered(m1)⟩ (abs(avol1, buffered(m5), mkwbuf(buf, # buf0, 0), avol0, false) ∧ bleb = buffered(m5) ∧ ESUCCESS = err), bleb0 = buffered(m5)
# buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs ↔ false, avol0[m5] = mapped(buf0), adr = adr0, avol = avol1, bleb = bleb0, lpt = lpt0, m = m2, m0 = # buf0, m1 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb ≠ buffered(m1) → (bleb ≠ nobuffer → avol[bleb.leb].mapped? ∧ bleb.leb < # avol ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE) → m1 < # avol → m1 < # avol ∧ (avol[m1].mapped? → avol[m1].mapped? ∧ m1 < # avol)), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 = nobuffer ∨ m3 = 0, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE) ⊦ ⟨abort⟩ (abs(avol1, buffered(m5), mkwbuf(buf, # buf0, 0), avol0, false) ∧ bleb = buffered(m5) ∧ ESUCCESS = err), bleb = buffered(m1), bleb0 = buffered(m5), (bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE)) ∧ m1 < # avol ∧ avol[m1].mapped? ∧ m0 = # avol[m1].data
# buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, rofs ↔ false, avol0[m5] = mapped(buf0), adr = adr0, avol = avol1, bleb = bleb0, lpt = lpt0, m = m2, m0 = # buf0, m1 = m5, ns = ns0, plog = plog0, m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 = nobuffer ∨ m3 = 0, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE) ⊦ bleb = buffered(m1), bleb0 = buffered(m5), (bleb ≠ nobuffer → avol[bleb.leb].mapped? ∧ bleb.leb < # avol ∧ bleb.isbuf?) ∧ ( bleb = nobuffer ∨ is-aligned(# avol[bleb.leb].data, EB_PAGE_SIZE) → m1 < # avol → m1 < # avol ∧ (avol[m1].mapped? → avol[m1].mapped? ∧ m1 < # avol))