| # pebs = n0 + m1, # pebs0 = n0 + m1, err = err0, m = m1, mtd-cons(pebs), mtd-cons(pebs0), ubi-io-initial(subarray(pebs, 0, m1)), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip; m := m + 1⟫ ( m ≤ # pebs0 ∧ # pebs0 = # pebs ∧ mtd-cons(pebs) ∧ (err = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m))) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # pebs0 < n0 + m), err = ESUCCESS, n0 = 0 |
# pebs0 = n0 + m1, # pebs = n0 + m1, err = err0, m = m1, mtd-cons(pebs0), mtd-cons(pebs), ubi-io-initial(subarray(pebs, 0, m1)), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪m := m + 1⟫ ( m ≤ # pebs0 ∧ # pebs0 = # pebs ∧ mtd-cons(pebs) ∧ (err = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m))) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # pebs0 < n0 + m), err = ESUCCESS, n0 = 0