| apebs[m2] = mkpeb(aehdr1, avhdr, buf, m1, false), aehdr = aehdr0, m = EB_PAGE_SIZE, m0 = m2, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟪if m0 < # pebs ∧ ¬ pebs[m0].bad then let buf = mkbuf(m) in {ubi_io_read#(m0, 0, 0, m, pebs; buf; bitflips, err); if err = ESUCCESS then if isempty(buf) then aehdr := empty else let ehdr = ? in {decode_echeader#(m, buf; ehdr; err); if err = ESUCCESS then aehdr := aechdr(ehdr.ec)}} else abort⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0) |
apebs[m2] = mkpeb(aehdr1, avhdr, buf, m1, false), aehdr = aehdr0, m = EB_PAGE_SIZE, m0 = m2, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → m0 < # pebs ⊦ ⟪let buf = mkbuf(m) in {ubi_io_read#(m0, 0, 0, m, pebs; buf; bitflips, err); if err = ESUCCESS then if isempty(buf) then aehdr := empty else let ehdr = ? in {decode_echeader#(m, buf; ehdr; err); if err = ESUCCESS then aehdr := aechdr(ehdr.ec)}}⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0), pebs[m0].bad
apebs[m2] = mkpeb(aehdr1, avhdr, buf, m1, false), aehdr = aehdr0, m = EB_PAGE_SIZE, m0 = m2, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → m0 < # pebs ⊦ ⟪abort⟫ ⟨aubi_io_read_echdr#(m2, apebs; aehdr0; isbad, err0)⟩ (aehdr = aehdr0 ∧ (bitflips ↔ isbad) ∧ err = err0), m0 < # pebs ∧ ¬ pebs[m0].bad
apebs[m2] = mkpeb(aehdr1, avhdr, buf, m1, false), aehdr = aehdr0, m = EB_PAGE_SIZE, m0 = m2, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ m0 < # pebs