| apebs[n] = mkpeb(aehdr, empty, buf, m, false), apebs0 = apebs, aehdr.valid?, avhdr.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ ⟨choose avhdr with ¬ avhdr.valid? in apebs[n].vidhdr := avhdr⟩ (apebs0 = apebs) |
apebs[n] = mkpeb(aehdr, empty, buf, m, false), apebs0 = apebs, avhdr0.valid?, aehdr.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ ∃ avhdr. ¬ avhdr.valid? ∧ ⟨apebs[n].vidhdr := avhdr⟩ (apebs0 = apebs)