| apeb = mkpeb(aehdr, avhdr, buf, m, boolvar), ∀ n0. n0 < # apebs → # apebs[n0].data = LEB_SIZE ∧ ( ¬ apebs[n0].bad → (apebs[n0].echdr = empty → apebs[n0].vidhdr = empty) ∧ (apebs[n0].echdr ≠ garbage ∧ apebs[n0].vidhdr = empty → apebs[n0].fill = 0) ∧ apebs[n0].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n0].fill, EB_PAGE_SIZE) ∧ subarray(apebs[n0].data, apebs[n0].fill, LEB_SIZE - apebs[n0].fill) = mkempbuf(LEB_SIZE - apebs[n0].fill)) ∧ (¬ apebs[n0].bad → apebs[n0].echdr.valid? ∧ apebs[n0].vidhdr = empty) ⊦ (∀ n0. n0 < # apebs → # apebs[n, apeb][n0].data = LEB_SIZE ∧ ( ¬ apebs[n, apeb][n0].bad → (apebs[n, apeb][n0].echdr = empty → apebs[n, apeb][n0].vidhdr = empty) ∧ (apebs[n, apeb][n0].echdr ≠ garbage ∧ apebs[n, apeb][n0].vidhdr = empty → apebs[n, apeb][n0].fill = 0) ∧ apebs[n, apeb][n0].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n, apeb][n0].fill, EB_PAGE_SIZE) ∧ subarray(apebs[n, apeb][n0].data, apebs[n, apeb][n0].fill, LEB_SIZE - apebs[n, apeb][n0].fill) = mkempbuf(LEB_SIZE - apebs[n, apeb][n0].fill)) ∧ (¬ apebs[n, apeb][n0].bad → apebs[n, apeb][n0].echdr.valid? ∧ apebs[n, apeb][n0].vidhdr = empty)) ↔ n < # apebs ∧ # apebs[n].data = LEB_SIZE ∧ ( ¬ apebs[n].bad → (apebs[n].echdr = empty → apebs[n].vidhdr = empty) ∧ (apebs[n].echdr ≠ garbage ∧ apebs[n].vidhdr = empty → apebs[n].fill = 0) ∧ apebs[n].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n].fill, EB_PAGE_SIZE) ∧ subarray(apebs[n].data, apebs[n].fill, LEB_SIZE - apebs[n].fill) = mkempbuf(LEB_SIZE - apebs[n].fill)) ∧ (¬ apebs[n].bad → apebs[n].echdr.valid? ∧ apebs[n].vidhdr = empty) → # buf = LEB_SIZE ∧ ( ¬ boolvar → (aehdr = empty → avhdr = empty) ∧ (aehdr ≠ garbage ∧ avhdr = empty → m = 0) ∧ m ≤ LEB_SIZE ∧ is-aligned(m, EB_PAGE_SIZE) ∧ subarray(buf, m, LEB_SIZE - m) = mkempbuf(LEB_SIZE - m)) ∧ (¬ boolvar → aehdr.valid? ∧ avhdr = empty) |
∀ n0. n0 < # apebs → # apebs[n0].data = LEB_SIZE ∧ ( ¬ apebs[n0].bad → (apebs[n0].echdr = empty → apebs[n0].vidhdr = empty) ∧ (apebs[n0].echdr ≠ garbage ∧ apebs[n0].vidhdr = empty → apebs[n0].fill = 0) ∧ apebs[n0].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n0].fill, EB_PAGE_SIZE) ∧ subarray(apebs[n0].data, apebs[n0].fill, LEB_SIZE - apebs[n0].fill) = mkempbuf(LEB_SIZE - apebs[n0].fill)) ∧ (¬ apebs[n0].bad → apebs[n0].echdr.valid? ∧ apebs[n0].vidhdr = empty) ⊦ (∀ n0. n0 < # apebs → # apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].data = LEB_SIZE ∧ ( ¬ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].bad → (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr = empty → apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty) ∧ ( apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr ≠ garbage ∧ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty → apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill = 0) ∧ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill, EB_PAGE_SIZE) ∧ subarray (apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].data, apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill, LEB_SIZE - apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill) = mkempbuf(LEB_SIZE - apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].fill)) ∧ ( ¬ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].bad → apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].echdr.valid? ∧ apebs[n, mkpeb(aehdr, avhdr, buf, m, boolvar)][n0].vidhdr = empty)) ↔ n < # apebs ∧ # apebs[n].data = LEB_SIZE ∧ ( ¬ apebs[n].bad → (apebs[n].echdr = empty → apebs[n].vidhdr = empty) ∧ (apebs[n].echdr ≠ garbage ∧ apebs[n].vidhdr = empty → apebs[n].fill = 0) ∧ apebs[n].fill ≤ LEB_SIZE ∧ is-aligned(apebs[n].fill, EB_PAGE_SIZE) ∧ subarray(apebs[n].data, apebs[n].fill, LEB_SIZE - apebs[n].fill) = mkempbuf(LEB_SIZE - apebs[n].fill)) ∧ (¬ apebs[n].bad → apebs[n].echdr.valid? ∧ apebs[n].vidhdr = empty) → # buf = LEB_SIZE ∧ ( ¬ boolvar → (aehdr = empty → avhdr = empty) ∧ (aehdr ≠ garbage ∧ avhdr = empty → m = 0) ∧ m ≤ LEB_SIZE ∧ is-aligned(m, EB_PAGE_SIZE) ∧ subarray(buf, m, LEB_SIZE - m) = mkempbuf(LEB_SIZE - m)) ∧ (¬ boolvar → aehdr.valid? ∧ avhdr = empty)