| # buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, n2 + n1, buf0, n2 + n1, n3), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ # buf0 ⊦ # buf3 = # copy(buf1, m1, buf0, n2, n1) ∧ (∀ n. n < # buf3 → buf3[n] = copy(buf1, m1, buf0, n2, n1)[n]) |
# buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n < # buf0, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, n2 + n1, buf0, n2 + n1, n3), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ # buf0 ⊦ buf3[n] = (n < n2 ∨ n2 + n1 ≤ n ⊃ buf0[n];buf1[n + m1 - n2])
Used simplifier rules: ⊦ m0 < # buf → copy(buf0, n, buf, n0, m)[m0] = (m0 < n0 ∨ n0 + m ≤ m0 ⊃ buf[m0];buf0[m0 + n - n0]); (s)% ⊦ m < n → n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ # copy(buf, m, buf0, m0, n) = # buf0; (s)