| # pebs0 = n0 + m1, # pebs = n0 + m1, pebs[m1] = mkpeb(buf, m, false), mtd-cons(pebs), mtd-cons(pebs0), ubi-io-initial(subarray(pebs, 0, m1)) ⊦ ∀ aehdr, bitflips, err0. ⟪let n = (err0 = ESUCCESS ∧ aehdr.valid? ⊃ aehdr.ec + 1;0) in {mtd_asm_erase#(m1; pebs; err0); if err0 = ESUCCESS then ubi_io_write_echdr#(m1, aechdr(n), EB_PAGE_SIZE; pebs; err0)}; m1 := m1 + 1⟫ ( m1 ≤ # pebs0 ∧ # pebs0 = # pebs ∧ mtd-cons(pebs) ∧ (err0 = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m1))) ∧ (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ # pebs0 < n0 + m1), n0 = 0 |
# pebs = n0 + m1, # pebs0 = n0 + m1, pebs[m1] = mkpeb(buf, m, false), n0 ≠ 0, mtd-cons(pebs0), mtd-cons(pebs), ubi-io-initial(subarray(pebs, 0, m1)) ⊦ ⟪let n = (err = ESUCCESS ∧ aehdr.valid? ⊃ aehdr.ec + 1;0) in {mtd_asm_erase#(m1; pebs; err); if err = ESUCCESS then ubi_io_write_echdr#(m1, aechdr(n), EB_PAGE_SIZE; pebs; err)}; m1 := m1 + 1⟫ ( m1 ≤ # pebs0 ∧ # pebs0 = # pebs ∧ mtd-cons(pebs) ∧ (err = ESUCCESS → ubi-io-initial(subarray(pebs, 0, m1))) ∧ (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # pebs0 < n0 + m1)