| err = err0, err = ESUCCESS, m < # pebs, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err1)⟩ ((pebs[m].bad ↔ isbad0) ∧ err = err1) |
m < # pebs, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err1)⟩ ((pebs[m].bad ↔ isbad0) ∧ ESUCCESS = err1)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ¬ ⌊ESUCCESS⌋ ; (s)