| apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), avhdr = avhdr0, emptypage = subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨if ubi-io-read-vidhdr-pre(m, apebs) then {fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?} else abort⟩ (empty = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err) |
pebs[m2] = mkpeb(buf1, m0, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), avhdr = avhdr0, emptypage = subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-read-vidhdr-pre(m, apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?⟩ (empty = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err)
pebs[m2] = mkpeb(buf1, m0, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), avhdr = avhdr0, emptypage = subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨abort⟩ (empty = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err), ubi-io-read-vidhdr-pre(m, apebs)