| 2 * EB_PAGE_SIZE + m2 = (avhdr = empty ⊃ EB_PAGE_SIZE;m2 + 2 * EB_PAGE_SIZE), LEB_SIZE = (n1 + n3) + m1, LEB_SIZE = n4 + m1, apebs[m3] = mkpeb(aehdr, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), n4 = n2 + n3, avhdr.valid?, aehdr.valid?, n3 < n, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-echdr(subarray(buf1, 0, EB_PAGE_SIZE), aehdr), abs-vidhdr(subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), avhdr), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(n3, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n3 + m1 ≤ LEB_SIZE, m1 + n3 ≤ LEB_SIZE, m1 ≤ LEB_SIZE, m2 ≤ LEB_SIZE, m1 + n ≤ LEB_SIZE, n0 + n ≤ # buf, (m1 + 2 * EB_PAGE_SIZE) + n3 ≤ PEB_SIZE, m2 ≤ m1, n0 + n3 ≤ # buf, ⌊err1⌋ ⊦ aehdr = empty, n3 = 0, subarray(subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m1 + n3, n2) = mkempbuf(n1) |
2 * EB_PAGE_SIZE + m2 = (avhdr = empty ⊃ EB_PAGE_SIZE;m2 + 2 * EB_PAGE_SIZE), LEB_SIZE = (n2 + n3) + m1, apebs[m3] = mkpeb(aehdr, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), avhdr.valid?, aehdr.valid?, n3 < n, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-echdr(subarray(buf1, 0, EB_PAGE_SIZE), aehdr), abs-vidhdr(subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), avhdr), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), is-aligned(n3, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n3 + m1 ≤ LEB_SIZE, m1 + n3 ≤ LEB_SIZE, m1 ≤ LEB_SIZE, m2 ≤ LEB_SIZE, m1 + n ≤ LEB_SIZE, n0 + n ≤ # buf, (m1 + 2 * EB_PAGE_SIZE) + n3 ≤ PEB_SIZE, m2 ≤ m1, n0 + n3 ≤ # buf, ⌊err1⌋ ⊦ aehdr = empty, n3 = 0, subarray(subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m1 + n3, n2) = mkempbuf(n2)
Used simplifier rules: eqs: ⊦ m = n + n0 ∧ m = n + n1 → n0 = n1; (forward) from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic