| m0 + 1 = # pebs, pebs[m0] = mkpeb(buf, m, true), abs(subarray(pebs, 0, m0), apebs), ubi-io-initial(apebs), ubi-io-initial(pebs) ⊦ ubi-io-peb-initial(mkpeb(empty, empty, mkbuf(LEB_SIZE), 0, true)) |
⊦ ubi-io-peb-initial(apeb) ↔ ubi-io-peb-inv(apeb) ∧ (¬ apeb.bad → apeb.echdr.valid? ∧ apeb.vidhdr = empty)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)%⊦ ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, n, true)) ↔ # buf = LEB_SIZE; (ss)% ⊦ # mkbuf(n) = n; (s) Used terms: mkpeb(empty, empty, mkbuf(LEB_SIZE), 0, true)