| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, false), pebs[m] = mkpeb(buf0, m1, false), err = ESUCCESS, m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf0, m1, false), mkpeb(aehdr, avhdr, buf, m0, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟨apebs[m] := mkpeb(empty, empty, mkempbuf(LEB_SIZE), 0, false)⟩ (abs(pebs[m, mkpeb(emptypeb, 0, pebs[m].bad)], apebs) ∧ ESUCCESS = err) |
Used simplifier rules: ⊦ n < # apebs ∧ abs(pebs, apebs) ∧ ubi-io-inv(apebs) → ( abs(pebs[n, peb], apebs[n, apeb]) ↔ abs-peb(pebs[n], apebs[n]) → abs-peb(peb, apeb)); (ss)% ⊦ mkpeb(buf, m, boolvar).bad ↔ boolvar; (s)%⊦ abs-peb(mkpeb(emptypeb, 0, false), apeb) ↔ (∃ m. apeb = mkpeb(empty, empty, mkempbuf(LEB_SIZE), m, false)); (s)%⊦ mkpeb(aehdr, avhdr, buf, m, boolvar) = mkpeb(aehdr0, avhdr0, buf0, m0, boolvar0) ↔ aehdr = aehdr0 ∧ avhdr = avhdr0 ∧ buf = buf0 ∧ m = m0 ∧ (boolvar ↔ boolvar0); (s)