| pebs[m2] = mkpeb(buf1, m0, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), avhdr = avhdr0, avhdr2 = avhdr0, m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨if ubi-io-read-vidhdr-pre(m, apebs) then {fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?} else abort⟩ (avhdr2 = avhdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage |
apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), avhdr = avhdr0, avhdr2 = avhdr0, m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-read-vidhdr-pre(m, apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨fail_or_success#(; ; err); bitflips := ?; if err = ESUCCESS then avhdr := apebs[m].vidhdr else avhdr := ?⟩ (avhdr2 = avhdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage
apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), avhdr = avhdr0, avhdr2 = avhdr0, m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨abort⟩ (avhdr2 = avhdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage, ubi-io-read-vidhdr-pre(m, apebs)