| gstore[nx.last] = groupblock(gndx0, lax0, m), remove-refsize0(gstore0) = gstore0, elems nx ∩ ginval2 = ∅, dom gstore0 ∪ elems nx = dom gstore ∪ ginval2, # lax < # gndx, inv(groupblock(gndx0, lax0, m)), inv(gstore \ ginval2), inv(gstore0), inv-flashsize(prefixn(# lax, gndx), lax), ri-inj(fi2), ri-inj(fi1), nx.last ∈ gstore, ⌊err0⌋ ⊦ # lax = # gndx, gndx = [], nx = [], dups(lax), dups(lax0 + lax), dups(nx), inv(groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m)), nx.last ∈ ginval2 |
⊦ inv(gblock) ↔ # gblock.gndlist = # gblock.ladrlist ∧ inv-flashsize(gblock.gndlist, gblock.ladrlist) ∧ ¬ dups(gblock.ladrlist)
gstore[nx.last] = groupblock(gndx0, lax0, m), remove-refsize0(gstore0) = gstore0, elems nx ∩ ginval2 = ∅, dom gstore0 ∪ elems nx = dom gstore ∪ ginval2, # lax < # gndx, inv(gstore0), inv(gstore \ ginval2), inv(groupblock(gndx0, lax0, m)), inv-flashsize(prefixn(# lax, gndx), lax), ri-inj(fi1), ri-inj(fi2), nx.last ∈ gstore, ⌊err0⌋ ⊦ # lax = # gndx, gndx = [], nx = [], dups(nx), dups(lax0 + lax), dups(lax), nx.last ∈ ginval2, # groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m).gndlist = # groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m).ladrlist ∧ inv-flashsize (groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m).gndlist, groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m).ladrlist) ∧ ¬ dups(groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m).ladrlist)
Used terms: groupblock(gndx0 + prefixn(# lax, gndx), lax0 + lax, m)