| pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨aubi_io_markbad#(m; apebs; err1)⟩ (abs(pebs[m, pebs[m].bad:= true], apebs) ∧ ESUCCESS = err1) |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), pebs[m] = mkpeb(buf0, m1, false), m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨if ubi-io-markbad-pre(m, apebs) then {fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].bad := true} else abort⟩ (abs(pebs[m, pebs[m].bad:= true], apebs) ∧ ESUCCESS = err)
Used simplifier rules: aubi_io_markbad#(PNUM; APEBS; ERR) {if ubi-io-markbad-pre(PNUM, APEBS) then {fail_or_success#(; ; ERR); if ERR = ESUCCESS then APEBS[PNUM].bad := true} else abort };