| apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, m, false), aehdr = aehdr0, err = ESUCCESS, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, err = ESUCCESS → is-encoded(ehdr, subarray(buf1, 0, EB_PAGE_SIZE)), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪aehdr := aechdr(ehdr.ec)⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0), subarray(buf1, 0, EB_PAGE_SIZE) = emptypage |
pebs[m2] = mkpeb(buf1, m, false), apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), aehdr = aehdr0, err = ESUCCESS, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, err = ESUCCESS → is-encoded(ehdr, subarray(buf1, 0, EB_PAGE_SIZE)), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aechdr(ehdr.ec) = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0), subarray(buf1, 0, EB_PAGE_SIZE) = emptypage