| # buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, m, false), aehdr = aehdr0, err = ESUCCESS, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, err = ESUCCESS → buf2 = subarray(buf1, 0, EB_PAGE_SIZE), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪decode_echeader#(EB_PAGE_SIZE, buf2; ehdr; err); if err = ESUCCESS then aehdr := aechdr(ehdr.ec)⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0), buf2 = emptypage |
apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, m, false), subarray(buf1, 0, EB_PAGE_SIZE) ≠ emptypage, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟪decode_echeader#(EB_PAGE_SIZE, subarray(buf1, 0, EB_PAGE_SIZE); ehdr; err); aehdr := aehdr0; if err = ESUCCESS then aehdr := aechdr(ehdr.ec)⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0)
Used simplifier rules: ⊦ # subarray(buf, m, n) = n; (s)