| apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), buf = buf0, m = EB_PAGE_SIZE, m1 = m3, n = n1, n0 = n2, m3 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 + n1 ≤ LEB_SIZE, n2 + n1 ≤ # buf0 ⊦ ⟪if m1 < # pebs ∧ ¬ pebs[m1].bad ∧ m0 + n ≤ LEB_SIZE ∧ n0 + n ≤ # buf then ubi_io_read#(m1, m0 + 2 * m, n0, n, pebs; buf; bitflips, err) else abort⟫ ⟨aubi_io_read_data#(m3, m0, n2, n1, apebs; buf0; isbad, err0)⟩ (buf = buf0 ∧ (bitflips ↔ isbad) ∧ err = err0) |
apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), buf = buf0, m = EB_PAGE_SIZE, m1 = m3, n = n1, n0 = n2, m1 < # pebs, m3 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 + n ≤ LEB_SIZE, n0 + n ≤ # buf, n2 + n1 ≤ # buf0, m0 + n1 ≤ LEB_SIZE, m1 < # pebs → m1 < # pebs ⊦ ⟪ubi_io_read#(m1, m0 + 2 * m, n0, n, pebs; buf; bitflips, err)⟫ ⟨aubi_io_read_data#(m3, m0, n2, n1, apebs; buf0; isbad, err0)⟩ (buf = buf0 ∧ (bitflips ↔ isbad) ∧ err = err0), pebs[m1].bad
apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), buf = buf0, m = EB_PAGE_SIZE, m1 = m3, n = n1, n0 = n2, m3 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), n2 + n1 ≤ # buf0, m0 + n1 ≤ LEB_SIZE, m1 < # pebs → m1 < # pebs ⊦ ⟪abort⟫ ⟨aubi_io_read_data#(m3, m0, n2, n1, apebs; buf0; isbad, err0)⟩ (buf = buf0 ∧ (bitflips ↔ isbad) ∧ err = err0), m1 < # pebs ∧ ¬ pebs[m1].bad ∧ m0 + n ≤ LEB_SIZE ∧ n0 + n ≤ # buf
apebs[m3] = mkpeb(aehdr, avhdr, buf1, m2, false), buf = buf0, m = EB_PAGE_SIZE, m1 = m3, n = n1, n0 = n2, m1 < # pebs, m3 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), n2 + n1 ≤ # buf0, m0 + n1 ≤ LEB_SIZE ⊦ m1 < # pebs