| # buf2 = EB_PAGE_SIZE, # lpt0 = # avol, # avol0 = # avol, avol[m] = mapped(buf1), buf = buf0, m < # avol, abs(avol, bleb, mkwbuf(buf2, m1, m3), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), m0 + n ≤ LEB_SIZE, n ≤ # buf0, bleb ≠ nobuffer → bleb.leb < # avol ∧ wbuf-cons(mkwbuf(buf2, m1, m3), avol0[bleb.leb], rofs) ⊦ ⟪wbuf_read_buf#(m, m0, n, bleb, mkwbuf(buf2, m1, m3), adr0, m2, plog0, avol0, lpt0, ns0; buf; err)⟫ ⟨awbuf_read_buf#(m, m0, n, adr0, m2, plog0, avol, lpt0, ns0, bleb, rofs; buf0; err0)⟩ (buf = buf0 ∧ err = err0) |
⊦ wbuf-cons(wbuf, aleb, rofs) ↔ aleb.mapped? ∧ wbuf.nbytes < # wbuf.content ∧ # wbuf.content = EB_PAGE_SIZE ∧ (¬ rofs → # aleb.data = wbuf.offset) ∧ (rofs → wbuf.offset ≤ # aleb.data) ∧ is-aligned(wbuf.offset, EB_PAGE_SIZE)
# avol0 = # avol, # lpt0 = # avol, # buf2 = EB_PAGE_SIZE, avol[m] = mapped(buf1), buf = buf0, m < # avol, abs(avol, bleb, mkwbuf(buf2, m1, m3), avol0, rofs), awbuf-inv(avol, bleb), ebm-vol-inv(avol0), n ≤ # buf0, m0 + n ≤ LEB_SIZE, bleb ≠ nobuffer → bleb.leb < # avol ∧ avol0[bleb.leb].mapped? ∧ mkwbuf(buf2, m1, m3).nbytes < # mkwbuf(buf2, m1, m3).content ∧ # mkwbuf(buf2, m1, m3).content = EB_PAGE_SIZE ∧ (¬ rofs → # avol0[bleb.leb].data = mkwbuf(buf2, m1, m3).offset) ∧ (rofs → mkwbuf(buf2, m1, m3).offset ≤ # avol0[bleb.leb].data) ∧ is-aligned(mkwbuf(buf2, m1, m3).offset, EB_PAGE_SIZE) ⊦ ⟪wbuf_read_buf#(m, m0, n, bleb, mkwbuf(buf2, m1, m3), adr0, m2, plog0, avol0, lpt0, ns0; buf; err)⟫ ⟨awbuf_read_buf#(m, m0, n, adr0, m2, plog0, avol, lpt0, ns0, bleb, rofs; buf0; err0)⟩ (buf = buf0 ∧ err = err0)
Used terms: rofs, avol0[bleb.leb], mkwbuf(buf2, m1, m3)