| # buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n < # buf0, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, n2 + n1, buf0, n2 + n1, n3), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ # buf0, n2 + n1 ≤ n ⊦ buf3[n] = buf0[n] |
# buf3 = # buf0, # buf0 = n3 + n2 + n1, apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), pebs[m3] = mkpeb(buf2, m4, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), m3 < # pebs, m3 < # apebs, n < # buf0, n2 + n1 < # buf0, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, 0, buf0, 0, n2), range=(buf3, n2 + n1, buf0, n2 + n1, n3), ubi-io-inv(apebs), n2 + n1 ≤ n, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, m1 + n1 ≤ LEB_SIZE ⊦ buf3[n] = buf0[n], n3 = 0
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m < n → m ≤ n; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat