| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), pebs[m] = mkpeb(buf0, m1, false), err = err0, m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then pebs[m] := mkpeb(emptypeb, 0, pebs[m].bad)⟫ ⟨aubi_io_sync_erase#(m; apebs; err1)⟩ (abs(pebs, apebs) ∧ err = err1) |
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), err = ESUCCESS, err = err0, m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪pebs[m] := mkpeb(emptypeb, 0, pebs[m].bad)⟫ ⟨aubi_io_sync_erase#(m; apebs; err1)⟩ (abs(pebs, apebs) ∧ err = err1)
pebs[m] = mkpeb(buf0, m1, false), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), err = err0, m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪skip⟫ ⟨aubi_io_sync_erase#(m; apebs; err1)⟩ (abs(pebs, apebs) ∧ err = err1), err = ESUCCESS