| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), pebs[m] = mkpeb(buf0, m1, false), m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ⊦ ⟨if ubi-io-markbad-pre(m, apebs) then {fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].bad := true} else abort⟩ (abs(pebs, apebs) ∧ err0 = err) |
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-markbad-pre(m, apebs), ⌊err0⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].bad := true⟩ (abs(pebs, apebs) ∧ err0 = err)
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ⊦ ⟨abort⟩ (abs(pebs, apebs) ∧ err0 = err), ubi-io-markbad-pre(m, apebs)