| apebs[m3] = mkpeb(aehdr, avhdr, buf0, m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), aehdr.valid?, avhdr.valid?, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), mkpeb(aehdr, avhdr, buf0, m2, false)), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), m2 ≤ m1, m1 + n ≤ LEB_SIZE, n2 + n ≤ # buf ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then {pebs[m3].data := copy(buf, n2, pebs[m3].data, m1 + 2 * EB_PAGE_SIZE, n); pebs[m3].fill := (m1 + 2 * EB_PAGE_SIZE) + n} else {n1 := n2; n0 := n; m0 := m3; m := m1 + 2 * EB_PAGE_SIZE; choose n3 with (n3 < n0 ∨ n3 = 0 ∧ n0 = 0) ∧ is-aligned(n3, EB_PAGE_SIZE) in if n3 ≠ 0 then {pebs[m0].data := copy(buf, n1, pebs[m0].data, m, n3); pebs[m0].fill := m + n3}}⟫ ⟨aubi_io_write_data#(m3, m1, n2, n, buf; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0) |
pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), apebs[m3] = mkpeb(aehdr, avhdr, buf0, m2, false), avhdr.valid?, aehdr.valid?, m3 < # pebs, m3 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), mkpeb(aehdr, avhdr, buf0, m2, false)), is-aligned(n, EB_PAGE_SIZE), is-aligned(m1, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n2 + n ≤ # buf, m1 + n ≤ LEB_SIZE, m2 ≤ m1 ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then {pebs[m3].data := copy(buf, n2, pebs[m3].data, m1 + 2 * EB_PAGE_SIZE, n); pebs[m3].fill := (m1 + 2 * EB_PAGE_SIZE) + n} else {n1 := n2; n0 := n; m0 := m3; m := m1 + 2 * EB_PAGE_SIZE; choose n3 with (n3 < n0 ∨ n3 = 0 ∧ n0 = 0) ∧ is-aligned(n3, EB_PAGE_SIZE) in if n3 ≠ 0 then {pebs[m0].data := copy(buf, n1, pebs[m0].data, m, n3); pebs[m0].fill := m + n3}}⟫ ⟨aubi_io_write_data#(m3, m1, n2, n, buf; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0)
Used simplifier rules: fail_or_success#(; ; ERR) {choose ERR0 with ⌊ERR0⌋ ∨ ERR0 = ESUCCESS in ERR := ERR0};