| err = ESUCCESS, err = err0, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪isbad := pebs[m].bad⟫ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err1)⟩ ((isbad ↔ isbad0) ∧ err = err1) |
err = err0, err = ESUCCESS, m < # pebs, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err1)⟩ ((pebs[m].bad ↔ isbad0) ∧ err = err1)
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ ¬ ⌊ESUCCESS⌋ ; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ abs(pebs, apebs) → ¬ # pebs < # apebs; (s)