| pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-markbad-pre(m, apebs) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].bad := true⟩ (abs(pebs[m, pebs[m].bad:= true], apebs) ∧ ESUCCESS = err) |
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].bad := true⟩ (abs(pebs[m, pebs[m].bad:= true], apebs) ∧ ESUCCESS = err)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ ubi-io-markbad-pre(n, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad; (s)