| inv(st), n ∈ st ⊦ inv(st[n]) ↔ true |
n ∈ st, ∀ n0. n0 ∈ st → # st[n0].list = # st[n0].ladrlist ∧ inv-flashsize(st[n0].list, st[n0].ladrlist) ∧ ¬ dups(st[n0].ladrlist) ⊦ inv-flashsize(st[n].list, st[n].ladrlist) ∧ ¬ dups(st[n].ladrlist)
Used simplifier rules: inv-block: ⊦ inv(ablock) ↔ # ablock.list = # ablock.ladrlist ∧ inv-flashsize(ablock.list, ablock.ladrlist) ∧ ¬ dups(ablock.ladrlist);%inv-flashsize-size: ⊦ inv-flashsize(x, lax) → (# x = # lax ↔ true);%inv-store: ⊦ inv(st) ↔ (∀ n. n ∈ st → inv(st[n]));