| # buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n2 + n1 < # buf0, n < # buf0, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ n, (n2 + n1) + n3 ≤ # buf3, (n2 + n1) + n3 ≤ # buf0, ∀ n. n < n3 → buf3[(n2 + n1) + n] = buf0[(n2 + n1) + n] ⊦ buf3[n] = buf0[n], n3 = 0 |
# buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n2 + n1 < # buf0, n < # buf0, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ n, ∀ n. n < n3 → buf3[(n2 + n1) + n] = buf0[(n2 + n1) + n] ⊦ buf3[n] = buf0[n], n3 = 0
Used simplifier rules: ⊦ m ≤ m; (s)% ⊦ m ≤ n → (n ≤ m ↔ m = n); (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic