| mkpeb(buf1, m3, false).bad ↔ mkpeb(aehdr1, avhdr, buf0, m1, false).bad, pebs[m2] = mkpeb(buf1, m3, false), apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), m2 < # apebs, m2 < # pebs, abs(pebs, apebs), is-encoded(echdr(m0), subarray(buf1, 0, EB_PAGE_SIZE)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ¬ mkpeb(buf1, m3, false).bad → mkpeb(buf1, m3, false).fill = (mkpeb(aehdr1, avhdr, buf0, m1, false).echdr = empty ⊃ 0 ;(mkpeb(aehdr1, avhdr, buf0, m1, false).vidhdr = empty ⊃ EB_PAGE_SIZE;mkpeb(aehdr1, avhdr, buf0, m1, false).fill + 2 * EB_PAGE_SIZE) ) ∧ abs-echdr(subarray(mkpeb(buf1, m3, false).data, 0, EB_PAGE_SIZE), mkpeb(aehdr1, avhdr, buf0, m1, false).echdr) ∧ abs-vidhdr(subarray(mkpeb(buf1, m3, false).data, EB_PAGE_SIZE, EB_PAGE_SIZE), mkpeb(aehdr1, avhdr, buf0, m1, false).vidhdr) ∧ subarray(mkpeb(buf1, m3, false).data, 2 * EB_PAGE_SIZE, LEB_SIZE) = mkpeb(aehdr1, avhdr, buf0, m1, false).data ⊦ aechdr(m0) = aehdr1, subarray(buf1, 0, EB_PAGE_SIZE) = emptypage |
apebs[m2] = mkpeb(aehdr1, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m1, false), pebs[m2] = mkpeb(buf1, (aehdr1 = empty ⊃ 0;(avhdr = empty ⊃ EB_PAGE_SIZE;m1 + 2 * EB_PAGE_SIZE)), false), m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-echdr(subarray(buf1, 0, EB_PAGE_SIZE), aehdr1), abs-peb (mkpeb(buf1, (aehdr1 = empty ⊃ 0;(avhdr = empty ⊃ EB_PAGE_SIZE;m1 + 2 * EB_PAGE_SIZE)), false), mkpeb(aehdr1, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m1, false)), abs-vidhdr(subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), avhdr), is-encoded(echdr(m0), subarray(buf1, 0, EB_PAGE_SIZE)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ aechdr(m0) = aehdr1, subarray(buf1, 0, EB_PAGE_SIZE) = emptypage
Used simplifier rules: abs-fwd: ⊦ n < # pebs ∧ pebs[n] = peb ∧ abs(pebs, apebs) → n < # apebs ∧ abs-peb(peb, apebs[n]); (forward) from specification ubi-io-abs% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)% ⊦ mkpeb(buf, m, boolvar).data = buf; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).fill = m; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr = aehdr; (s)% ⊦ mkpeb(buf, m, boolvar).fill = m; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ mkpeb(buf, m, boolvar).bad ↔ boolvar; (s)