| # pebs = # apebs, boolvar2 ↔ boolvar1, apebs[n] = mkpeb(aehdr0, avhdr0, buf1, m1, boolvar1), pebs[n] = mkpeb(buf2, m2, boolvar2), n < # apebs, ubi-io-inv(apebs), ¬ boolvar1 → m2 = (aehdr0 = empty ⊃ 0;(avhdr0 = empty ⊃ EB_PAGE_SIZE;m1 + 2 * EB_PAGE_SIZE)) ∧ (aehdr0 = empty → subarray(buf2, 0, EB_PAGE_SIZE) = emptypage) ∧ (aehdr0.valid? → is-encoded(echdr(aehdr0.ec), subarray(buf2, 0, EB_PAGE_SIZE))) ∧ (aehdr0 = garbage → is-garbage-ec(subarray(buf2, 0, EB_PAGE_SIZE)) ∧ subarray(buf2, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (avhdr0 = empty → subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ (avhdr0.valid? → is-encoded(vidhdr(avhdr0.vol, avhdr0.leb, avhdr0.sqn, avhdr0.size, avhdr0.checksum), subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ (avhdr0 = garbage → is-garbage-vid(subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(buf2, 2 * EB_PAGE_SIZE, LEB_SIZE) = buf1, ∀ n0. n0 < # apebs → (pebs[n0].bad ↔ apebs[n0].bad) ∧ ( ¬ pebs[n0].bad → pebs[n0].fill = (apebs[n0].echdr = empty ⊃ 0;(apebs[n0].vidhdr = empty ⊃ EB_PAGE_SIZE;apebs[n0].fill + 2 * EB_PAGE_SIZE)) ∧ (apebs[n0].echdr = empty → subarray(pebs[n0].data, 0, EB_PAGE_SIZE) = emptypage) ∧ (apebs[n0].echdr.valid? → is-encoded(echdr(apebs[n0].echdr.ec), subarray(pebs[n0].data, 0, EB_PAGE_SIZE))) ∧ (apebs[n0].echdr = garbage → is-garbage-ec(subarray(pebs[n0].data, 0, EB_PAGE_SIZE)) ∧ subarray(pebs[n0].data, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (apebs[n0].vidhdr = empty → subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n0].vidhdr.valid? → is-encoded (vidhdr(apebs[n0].vidhdr.vol, apebs[n0].vidhdr.leb, apebs[n0].vidhdr.sqn, apebs[n0].vidhdr.size, apebs[n0].vidhdr.checksum), subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ ( apebs[n0].vidhdr = garbage → is-garbage-vid(subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(pebs[n0].data, 2 * EB_PAGE_SIZE, LEB_SIZE) = apebs[n0].data), ∀ n0. n0 < # apebs → (pebs[n, mkpeb(buf0, m0, boolvar0)][n0].bad ↔ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].bad) ∧ ( ¬ pebs[n, mkpeb(buf0, m0, boolvar0)][n0].bad → pebs[n, mkpeb(buf0, m0, boolvar0)][n0].fill = (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = empty ⊃ 0 ;(apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty ⊃ EB_PAGE_SIZE ;apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill + 2 * EB_PAGE_SIZE ) ) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = empty → subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr.valid? → is-encoded (echdr(apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr.ec), subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE))) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = garbage → is-garbage-ec(subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE)) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty → subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.valid? → is-encoded (vidhdr (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.vol, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.leb, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.sqn, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.size, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.checksum), subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = garbage → is-garbage-vid(subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 2 * EB_PAGE_SIZE, LEB_SIZE) = apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].data) ⊦ (boolvar0 ↔ boolvar) ∧ ( ¬ boolvar → m0 = (aehdr = empty ⊃ 0;(avhdr = empty ⊃ EB_PAGE_SIZE;m + 2 * EB_PAGE_SIZE)) ∧ (aehdr = empty → subarray(buf0, 0, EB_PAGE_SIZE) = emptypage) ∧ (aehdr.valid? → is-encoded(echdr(aehdr.ec), subarray(buf0, 0, EB_PAGE_SIZE))) ∧ (aehdr = garbage → is-garbage-ec(subarray(buf0, 0, EB_PAGE_SIZE)) ∧ subarray(buf0, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (avhdr = empty → subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ (avhdr.valid? → is-encoded(vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum), subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ (avhdr = garbage → is-garbage-vid(subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(buf0, 2 * EB_PAGE_SIZE, LEB_SIZE) = buf) |
# pebs = # apebs, pebs[n] = mkpeb(buf2, m2, boolvar1), apebs[n] = mkpeb(aehdr0, avhdr0, buf1, m1, boolvar1), n < # apebs, ubi-io-inv(apebs), ¬ boolvar1 → m2 = (aehdr0 = empty ⊃ 0;(avhdr0 = empty ⊃ EB_PAGE_SIZE;m1 + 2 * EB_PAGE_SIZE)) ∧ (aehdr0 = empty → subarray(buf2, 0, EB_PAGE_SIZE) = emptypage) ∧ (aehdr0.valid? → is-encoded(echdr(aehdr0.ec), subarray(buf2, 0, EB_PAGE_SIZE))) ∧ (aehdr0 = garbage → is-garbage-ec(subarray(buf2, 0, EB_PAGE_SIZE)) ∧ subarray(buf2, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (avhdr0 = empty → subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ (avhdr0.valid? → is-encoded(vidhdr(avhdr0.vol, avhdr0.leb, avhdr0.sqn, avhdr0.size, avhdr0.checksum), subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ (avhdr0 = garbage → is-garbage-vid(subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(buf2, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(buf2, 2 * EB_PAGE_SIZE, LEB_SIZE) = buf1, ∀ n0. n0 < # apebs → (pebs[n, mkpeb(buf0, m0, boolvar0)][n0].bad ↔ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].bad) ∧ ( ¬ pebs[n, mkpeb(buf0, m0, boolvar0)][n0].bad → pebs[n, mkpeb(buf0, m0, boolvar0)][n0].fill = (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = empty ⊃ 0 ;(apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty ⊃ EB_PAGE_SIZE ;apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill + 2 * EB_PAGE_SIZE ) ) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = empty → subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr.valid? → is-encoded (echdr(apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr.ec), subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE))) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = garbage → is-garbage-ec(subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE)) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty → subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.valid? → is-encoded (vidhdr (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.vol, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.leb, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.sqn, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.size, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr.checksum), subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = garbage → is-garbage-vid(subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(pebs[n, mkpeb(buf0, m0, boolvar0)][n0].data, 2 * EB_PAGE_SIZE, LEB_SIZE) = apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].data), ∀ n0. n0 < # apebs → (pebs[n0].bad ↔ apebs[n0].bad) ∧ ( ¬ pebs[n0].bad → pebs[n0].fill = (apebs[n0].echdr = empty ⊃ 0;(apebs[n0].vidhdr = empty ⊃ EB_PAGE_SIZE;apebs[n0].fill + 2 * EB_PAGE_SIZE)) ∧ (apebs[n0].echdr = empty → subarray(pebs[n0].data, 0, EB_PAGE_SIZE) = emptypage) ∧ (apebs[n0].echdr.valid? → is-encoded(echdr(apebs[n0].echdr.ec), subarray(pebs[n0].data, 0, EB_PAGE_SIZE))) ∧ (apebs[n0].echdr = garbage → is-garbage-ec(subarray(pebs[n0].data, 0, EB_PAGE_SIZE)) ∧ subarray(pebs[n0].data, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (apebs[n0].vidhdr = empty → subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ ( apebs[n0].vidhdr.valid? → is-encoded (vidhdr(apebs[n0].vidhdr.vol, apebs[n0].vidhdr.leb, apebs[n0].vidhdr.sqn, apebs[n0].vidhdr.size, apebs[n0].vidhdr.checksum), subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ ( apebs[n0].vidhdr = garbage → is-garbage-vid(subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(pebs[n0].data, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(pebs[n0].data, 2 * EB_PAGE_SIZE, LEB_SIZE) = apebs[n0].data) ⊦ (boolvar0 ↔ boolvar) ∧ ( ¬ boolvar → m0 = (aehdr = empty ⊃ 0;(avhdr = empty ⊃ EB_PAGE_SIZE;m + 2 * EB_PAGE_SIZE)) ∧ (aehdr = empty → subarray(buf0, 0, EB_PAGE_SIZE) = emptypage) ∧ (aehdr.valid? → is-encoded(echdr(aehdr.ec), subarray(buf0, 0, EB_PAGE_SIZE))) ∧ (aehdr = garbage → is-garbage-ec(subarray(buf0, 0, EB_PAGE_SIZE)) ∧ subarray(buf0, 0, EB_PAGE_SIZE) ≠ emptypage) ∧ (avhdr = empty → subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage) ∧ (avhdr.valid? → is-encoded(vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum), subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE))) ∧ (avhdr = garbage → is-garbage-vid(subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE)) ∧ subarray(buf0, EB_PAGE_SIZE, EB_PAGE_SIZE) ≠ emptypage) ∧ subarray(buf0, 2 * EB_PAGE_SIZE, LEB_SIZE) = buf)