| pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), err = ESUCCESS, m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ abs(pebs[m, pebs[m].bad:= true], apebs[m, apebs[m].bad:= true]) ∧ ESUCCESS = err |
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ abs-peb(mkpeb(buf0, m1, true), mkpeb(aehdr, avhdr, buf, m0, true))
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad:= boolvar0 = mkpeb(aehdr, avhdr, buf, m, boolvar0); (s)% ⊦ mkpeb(buf, m, boolvar).bad:= boolvar0 = mkpeb(buf, m, boolvar0); (s)%⊦ n < # apebs ∧ abs(pebs, apebs) ∧ ubi-io-inv(apebs) → ( abs(pebs[n, peb], apebs[n, apeb]) ↔ abs-peb(pebs[n], apebs[n]) → abs-peb(peb, apeb)); (ss)