| apebs[n] = mkpeb(empty, avhdr, buf, m, false), err0 = ESUCCESS, aehdr.valid?, n < # apebs, ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪apebs[n].echdr := aehdr⟫ ubi-io-inv(apebs) |
Used simplifier rules: ⊦ ¬ ⌊ESUCCESS⌋ ; (s)%⊦ ubi-io-inv(apebs) → ( ubi-io-inv(apebs[n, apeb]) ↔ n < # apebs ∧ ubi-io-peb-inv(apebs[n]) → ubi-io-peb-inv(apeb)); (ss)%⊦ ubi-io-peb-inv(mkpeb(empty, avhdr, buf, n, false)) ↔ avhdr = empty ∧ buf = mkempbuf(LEB_SIZE) ∧ n = 0; (s)%⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr:= aehdr0 = mkpeb(aehdr0, avhdr, buf, m, boolvar); (s)% ⊦ ubi-io-peb-inv(mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false)); (s)