| pebs[m2] = mkpeb(buf1, m0, false), apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), aehdr = aehdr0, aehdr2 = aehdr0, m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨if ubi-io-read-echdr-pre(m, apebs) then {fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then aehdr := apebs[m].echdr else aehdr := ?} else abort⟩ (aehdr2 = aehdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, 0, EB_PAGE_SIZE) = emptypage |
apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), aehdr = aehdr0, aehdr2 = aehdr0, m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-read-echdr-pre(m, apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then aehdr := apebs[m].echdr else aehdr := ?⟩ (aehdr2 = aehdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, 0, EB_PAGE_SIZE) = emptypage
apebs[m2] = mkpeb(aehdr1, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), aehdr = aehdr0, aehdr2 = aehdr0, m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr1, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨abort⟩ (aehdr2 = aehdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, 0, EB_PAGE_SIZE) = emptypage, ubi-io-read-echdr-pre(m, apebs)