| m0 = EB_PAGE_SIZE, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-markbad-pre(m, apebs) ⊦ ⟪ubi_io_markbad#(m; pebs; err)⟫ ⟨aubi_io_markbad#(m; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0) |
m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ¬ apebs[m].bad ⊦ ⟪ubi_io_markbad#(m; pebs; err)⟫ ⟨aubi_io_markbad#(m; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ubi-io-markbad-pre(n, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad; (s)