| ubi-io-inv(apebs), ubi-io-write-vidhdr-pre(n, avhdr, apebs) ⊦ ⟪aubi_io_write_vidhdr#(n, avhdr; apebs; err)⟫ ubi-io-inv(apebs) |
apebs[n].vidhdr = empty, apebs[n].echdr.valid?, avhdr.valid?, n < # apebs, ubi-io-inv(apebs), ¬ apebs[n].bad ⊦ ⟪aubi_io_write_vidhdr#(n, avhdr; apebs; err)⟫ ubi-io-inv(apebs)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%⊦ ubi-io-write-vidhdr-pre(n, avhdr, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad ∧ avhdr.valid? ∧ apebs[n].echdr.valid? ∧ apebs[n].vidhdr = empty; (s)