| # avol0 = # avol1, # lpt0 = # avol1, # buf = EB_PAGE_SIZE, avol0[m5] = mapped(buf0), m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 ≠ nobuffer → avol1[bleb0.leb].mapped? ∧ bleb0.leb < # avol1 ∧ bleb0.isbuf?, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE), bleb0 = nobuffer ∨ m3 = 0 ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then bleb0 := buffered(m5)⟩ (abs(avol1, buffered(m5), mkwbuf(buf, # buf0, 0), avol0, false) ∧ bleb0 = buffered(m5) ∧ ESUCCESS = err), bleb0 = buffered(m5) |
# buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, avol0[m5] = mapped(buf0), bleb0 ≠ buffered(m5), m5 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m4, m3), avol0, false), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), bleb0 ≠ nobuffer → avol1[bleb0.leb].mapped? ∧ bleb0.leb < # avol1 ∧ bleb0.isbuf?, bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m4, m3), avol0[bleb0.leb], false), bleb0 = nobuffer ∨ m3 = 0, bleb0 = nobuffer ∨ is-aligned(# avol1[bleb0.leb].data, EB_PAGE_SIZE) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then bleb0 := buffered(m5)⟩ (abs(avol1, buffered(m5), mkwbuf(buf, # buf0, 0), avol0, false) ∧ bleb0 = buffered(m5) ∧ ESUCCESS = err)