| apebs[n] = mkpeb(aehdr, avhdr, buf0, m, false), avhdr.valid?, aehdr.valid?, n < # apebs, is-aligned(n4, EB_PAGE_SIZE), is-aligned(n5, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), ubi-io-inv(apebs), n1 + n4 ≤ # buf, n5 + n4 ≤ LEB_SIZE, m ≤ n5, ⌊err0⌋ ∨ err0 = ESUCCESS, n2 < n4 ∨ n2 = 0 ∧ n4 = 0 ⊦ ⟪apebs[n] := mkpeb (apebs[n].echdr, apebs[n].vidhdr, subarray(apebs[n].data, 0, n5) + subarray(buf, n1, n2) + mkempbuf(LEB_SIZE - n5 - n2), n5 + n2, apebs[n].bad)⟫ ubi-io-inv(apebs), err0 = ESUCCESS, n2 = 0 |
apebs[n] = mkpeb(aehdr, avhdr, buf0, m, false), n2 ≠ 0, avhdr.valid?, aehdr.valid?, n2 < n4, n < # apebs, is-aligned(n4, EB_PAGE_SIZE), is-aligned(n5, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), ubi-io-inv(apebs), n1 + n4 ≤ # buf, n5 + n4 ≤ LEB_SIZE, m ≤ n5, ⌊err0⌋ ⊦ ⟪apebs[n] := mkpeb (apebs[n].echdr, apebs[n].vidhdr, subarray(apebs[n].data, 0, n5) + subarray(buf, n1, n2) + mkempbuf(LEB_SIZE - n5 - n2), n5 + n2, apebs[n].bad)⟫ ubi-io-inv(apebs)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)