| LEB_SIZE = n0 + # subarray(buf, 0, n2), pebs[m1] = mkpeb(buf3, 2 * EB_PAGE_SIZE, false), apebs[m1] = mkpeb(aehdr, avhdr, buf2, 0, false), n = align↑(datasize(buf, n), EB_PAGE_SIZE), aehdr.valid?, avhdr.valid?, n2 < datasize(buf, n), n2 < # buf, n2 < LEB_SIZE, n2 < n, m1 < # pebs, m1 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf3, 2 * EB_PAGE_SIZE, false), mkpeb(aehdr, avhdr, buf2, 0, false)), is-aligned(n, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n ≤ # buf, n ≤ LEB_SIZE, 2 * EB_PAGE_SIZE + n2 ≤ PEB_SIZE, # subarray(buf, 0, n2) ≤ LEB_SIZE, ⌊err1⌋ ⊦ ( datasize(subarray(buf, 0, n2), n2) < datasize(buf, n) ∨ checksum(buf + mkempbuf(n - # buf), datasize(buf, n)) ≠ checksum(buf, datasize(buf, n))) ∧ ⟨apebs[m1] := mkpeb(apebs[m1].echdr, apebs[m1].vidhdr, subarray(buf, 0, n2) + mkempbuf(n0), # subarray(buf, 0, n2), apebs[m1].bad)⟩ abs(pebs[m1, (pebs[m1].data:= copy(buf, 0, pebs[m1].data, 2 * EB_PAGE_SIZE, n2)).fill:= (2 * EB_PAGE_SIZE + n2)], apebs), n2 = 0 |
LEB_SIZE = n0 + n2, pebs[m1] = mkpeb(buf3, 2 * EB_PAGE_SIZE, false), apebs[m1] = mkpeb(aehdr, avhdr, buf2, 0, false), n = align↑(datasize(buf, n), EB_PAGE_SIZE), n0 ≠ 0, n2 ≠ 0, aehdr.valid?, avhdr.valid?, n2 < datasize(buf, n), n2 < # buf, n2 < LEB_SIZE, n2 < n, m1 < # pebs, m1 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf3, 2 * EB_PAGE_SIZE, false), mkpeb(aehdr, avhdr, buf2, 0, false)), is-aligned(n, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n ≤ # buf, n ≤ LEB_SIZE, 2 * EB_PAGE_SIZE + n2 ≤ PEB_SIZE, ⌊err1⌋ ⊦ ( datasize(subarray(buf, 0, n2), n2) < datasize(buf, n) ∨ checksum(buf + mkempbuf(n - # buf), datasize(buf, n)) ≠ checksum(buf, datasize(buf, n))) ∧ ⟨apebs[m1] := mkpeb(apebs[m1].echdr, apebs[m1].vidhdr, subarray(buf, 0, n2) + mkempbuf(n0), # subarray(buf, 0, n2), apebs[m1].bad)⟩ abs(pebs[m1, (pebs[m1].data:= copy(buf, 0, pebs[m1].data, 2 * EB_PAGE_SIZE, n2)).fill:= (2 * EB_PAGE_SIZE + n2)], apebs)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < m + n ↔ n ≠ 0; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m < n → m ≤ n; (s)% ⊦ # subarray(buf, m, n) = n; (s)