| pebs[m] = mkpeb(buf, m0, boolvar), err = ESUCCESS, m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf, m0, boolvar), apebs[m]), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨isbad := apebs[m].bad⟩ ((boolvar ↔ isbad) ∧ ESUCCESS = err) |
pebs[m] = mkpeb(buf, m0, boolvar), err = ESUCCESS, m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf, m0, boolvar), apebs[m]), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ (boolvar ↔ apebs[m].bad) ∧ ESUCCESS = err