| pebs[m2] = mkpeb(buf1, m0, false), apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; bitflips := ?; if err = ESUCCESS then avhdr := apebs[m2].vidhdr else avhdr := ?⟩ (avhdr0 = avhdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage |
apebs[m2] = mkpeb(aehdr, avhdr1, buf0, m1, false), pebs[m2] = mkpeb(buf1, m0, false), m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, m0, false), mkpeb(aehdr, avhdr1, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, ⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; bitflips := ?; if err = ESUCCESS then avhdr := apebs[m2].vidhdr else avhdr := ?⟩ (avhdr0 = avhdr ∧ (bitflips0 ↔ bitflips) ∧ err1 = err), subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE) = emptypage