| err = ESUCCESS, m0 = EB_PAGE_SIZE, err = ESUCCESS → mtd-cons(pebs), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪mtd_asm_get_blockcount#(pebs; ; n); let m = 0 in while m < n ∧ err = ESUCCESS do {/* (inv-format : invariant m ≤ n ∧ n = # pebs ∧ mtd-cons(pebs) ∧ (err = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m))) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) wfbound n - m) */; let isbad = ? in {mtd_asm_isbad#(m, pebs; ; isbad, err); if err = ESUCCESS ∧ ¬ isbad then let aehdr = ?, bitflips = ? in {ubi_io_read_echdr#(m, m0, pebs; aehdr; bitflips, err); let n = (err = ESUCCESS ∧ aehdr.valid? ⊃ aehdr.ec + 1;0) in {mtd_asm_erase#(m; pebs; err); if err = ESUCCESS then ubi_io_write_echdr#(m, aechdr(n), m0; pebs; err)}}}; m := m + 1}⟫ ((err = ESUCCESS → m0 = EB_PAGE_SIZE ∧ mtd-cons(pebs)) ∧ (err = ESUCCESS → ubi-io-initial(pebs)) ∧ (err = ESUCCESS ∨ ⌊err⌋ )) |
mtd-cons(pebs) ⊦ ⟪mtd_asm_get_blockcount#(pebs; ; n); let m = 0 in {m0 := EB_PAGE_SIZE; err := ESUCCESS; while m < n ∧ err = ESUCCESS do {/* (inv-format : invariant m ≤ n ∧ n = # pebs ∧ mtd-cons(pebs) ∧ (err = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m))) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) wfbound n - m) */; let isbad = ? in {mtd_asm_isbad#(m, pebs; ; isbad, err); if err = ESUCCESS ∧ ¬ isbad then let aehdr = ?, bitflips = ? in {ubi_io_read_echdr#(m, m0, pebs; aehdr; bitflips, err); let n = (err = ESUCCESS ∧ aehdr.valid? ⊃ aehdr.ec + 1;0) in {mtd_asm_erase#(m; pebs; err); if err = ESUCCESS then ubi_io_write_echdr#(m, aechdr(n), m0; pebs; err)}}}; m := m + 1}}⟫ ((err = ESUCCESS → m0 = EB_PAGE_SIZE ∧ mtd-cons(pebs)) ∧ (err = ESUCCESS → ubi-io-initial(pebs)) ∧ (err = ESUCCESS ∨ ⌊err⌋ ))