| LEB_SIZE = n0 + n, pebs[m1] = mkpeb(buf1, 2 * EB_PAGE_SIZE, false), apebs[m1] = mkpeb(aehdr, avhdr, buf2, 0, false), n = align↑(datasize(buf, n), EB_PAGE_SIZE), subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE) = subarray(emptypeb, 2 * EB_PAGE_SIZE, LEB_SIZE), avhdr.valid?, aehdr.valid?, m1 < # apebs, m1 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE, false), mkpeb(aehdr, avhdr, buf2, 0, false)), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n ≤ # buf, 2 * EB_PAGE_SIZE + n ≤ PEB_SIZE, n ≤ LEB_SIZE, 2 * EB_PAGE_SIZE ≤ PEB_SIZE, 2 * EB_PAGE_SIZE + LEB_SIZE ≤ # buf1, 2 * EB_PAGE_SIZE + LEB_SIZE ≤ # emptypeb ⊦ datasize(buf, n) = 0, abs-peb (mkpeb(copy(buf, 0, buf1, 2 * EB_PAGE_SIZE, n), 2 * EB_PAGE_SIZE + n, false), mkpeb(aehdr, avhdr, subarray(buf, 0, n) + mkempbuf(n0), n, false)) |
LEB_SIZE = n0 + n, apebs[m1] = mkpeb(aehdr, avhdr, buf2, 0, false), pebs[m1] = mkpeb(buf1, 2 * EB_PAGE_SIZE, false), n = align↑(datasize(buf, n), EB_PAGE_SIZE), subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE) = emptyleb, aehdr.valid?, avhdr.valid?, m1 < # pebs, m1 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE, false), mkpeb(aehdr, avhdr, buf2, 0, false)), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), 2 * EB_PAGE_SIZE ≤ PEB_SIZE, n ≤ LEB_SIZE, 2 * EB_PAGE_SIZE + n ≤ PEB_SIZE, n ≤ # buf ⊦ datasize(buf, n) = 0, abs-peb (mkpeb(copy(buf, 0, buf1, 2 * EB_PAGE_SIZE, n), 2 * EB_PAGE_SIZE + n, false), mkpeb(aehdr, avhdr, subarray(buf, 0, n) + mkempbuf(n0), n, false))
Used simplifier rules: n < # pebs ⊦ pebs[n] = mkpeb(buf, m, boolvar) ∧ mtd-cons(pebs) → # buf = PEB_SIZE; (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ m; (s)% ⊦ # emptypeb = PEB_SIZE; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ LEB_SIZE + 2 * EB_PAGE_SIZE = PEB_SIZE; (s)%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ subarray(emptypeb, 2 * EB_PAGE_SIZE, LEB_SIZE) = emptyleb; (s)