| # avol0 = # avol1, # lpt0 = # avol1, # buf = EB_PAGE_SIZE, err = ESUCCESS, m4 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m3, m2), avol0, rofs), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), synced(avol1), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m3, m2), avol0[bleb0.leb], rofs) ⊦ ⟨avol1[m4] := mapped(mkbuf(0))⟩ (abs(avol1, bleb0, mkwbuf(buf, m3, m2), avol0[m4, mapped(mkbuf(0))], rofs) ∧ ESUCCESS = err), buffered(m4) = bleb0 |
# buf = EB_PAGE_SIZE, # lpt0 = # avol1, # avol0 = # avol1, err = ESUCCESS, m4 < # avol1, abs(avol1, bleb0, mkwbuf(buf, m3, m2), avol0, rofs), awbuf-inv(avol1, bleb0), ebm-vol-inv(avol0), synced(avol1), bleb0 ≠ nobuffer → bleb0.leb < # avol1 ∧ wbuf-cons(mkwbuf(buf, m3, m2), avol0[bleb0.leb], rofs) ⊦ buffered(m4) = bleb0, abs(avol1[m4, mapped(mkbuf(0))], bleb0, mkwbuf(buf, m3, m2), avol0[m4, mapped(mkbuf(0))], rofs) ∧ ESUCCESS = err