| apebs[n] = mkpeb(empty, avhdr, buf, m, false), apebs0 = apebs, aehdr.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ ⟨choose aehdr with ¬ aehdr.valid? in apebs[n].echdr := aehdr⟩ (apebs0 = apebs) |
apebs[n] = mkpeb(empty, avhdr, buf, m, false), apebs0 = apebs, aehdr0.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ ∃ aehdr. ¬ aehdr.valid? ∧ ⟨apebs[n].echdr := aehdr⟩ (apebs0 = apebs)