| apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), pebs[m2] = mkpeb(buf1, m6, false), avhdr = avhdr0, m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m6, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), is-encoded(vidhdr(v, m0, m3, m4, m5), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨if ubi-io-read-vidhdr-pre(m, apebs) then {fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?} else abort⟩ (avidhdr(v, m0, m3, m4, m5) = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage |
pebs[m2] = mkpeb(buf1, m6, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), avhdr = avhdr0, m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m6, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), is-encoded(vidhdr(v, m0, m3, m4, m5), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-read-vidhdr-pre(m, apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?⟩ (avidhdr(v, m0, m3, m4, m5) = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage
pebs[m2] = mkpeb(buf1, m6, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), avhdr = avhdr0, m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m6, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), is-encoded(vidhdr(v, m0, m3, m4, m5), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨abort⟩ (avidhdr(v, m0, m3, m4, m5) = avhdr ∧ (bitflips0 ↔ bitflips) ∧ ESUCCESS = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage, ubi-io-read-vidhdr-pre(m, apebs)