| # buf3 = # buf0, # buf0 = n3 + n2 + n1, apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), pebs[m3] = mkpeb(buf2, m4, false), n = n0 + n2, subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n2 < # buf0, n < # buf0, n < n2 + n1, m3 < # pebs, m3 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, 0, buf0, 0, n2), range=(buf3, n2 + n1, buf0, n2 + n1, n3), ubi-io-inv(apebs), n2 ≤ n, n2 + n1 ≤ # buf0, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, m1 + n1 ≤ LEB_SIZE ⊦ n3 + n1 = 0, buf3[n] = buf1[n0 + m1], n1 = 0 |
# buf0 = n3 + n2 + n1, # buf3 = # buf0, pebs[m3] = mkpeb(buf2, m4, false), apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), subarray(buf3, n2, n1) = subarray(buf2, m1 + 2 * EB_PAGE_SIZE, n1), n0 < n3 + n1, n2 < # buf0, m3 < # apebs, m3 < # pebs, n0 < n1, abs(pebs, apebs), abs-peb(mkpeb(buf2, m4, false), mkpeb(aehdr, avhdr, buf1, m2, false)), mtd-cons(pebs), range=(buf3, n2 + n1, buf0, n2 + n1, n3), range=(buf3, 0, buf0, 0, n2), ubi-io-inv(apebs), m1 + n1 ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n1 ≤ PEB_SIZE, n2 + n1 ≤ # buf0 ⊦ buf3[n0 + n2] = buf1[n0 + m1]
Used simplifier rules: ⊦ m = m0 + n0 ∧ n < n0 → m0 + n < m; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → n ≠ 0; (s)% ⊦ m + n < m + n0 ↔ n < n0; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m ≤ m + n; (s)