| apebs[m3] = mkpeb(aehdr, avhdr, buf0, m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), m = m1, m0 = m3, n0 = n, n1 = n2, aehdr.valid?, avhdr.valid?, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), mkpeb(aehdr, avhdr, buf0, m2, false)), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-write-data-pre(m0, m, n1, n0, buf, apebs), m2 ≤ m1, m1 + n ≤ LEB_SIZE, n2 + n ≤ # buf, ⌊err0⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m0] := mkpeb (apebs[m0].echdr, apebs[m0].vidhdr, subarray(apebs[m0].data, 0, m) + subarray(buf, n1, n0) + mkempbuf(LEB_SIZE - m - n0), m + n0, apebs[m0].bad) else choose n with (n < n0 ∨ n = 0 ∧ n0 = 0) ∧ is-aligned(n, EB_PAGE_SIZE) in if n ≠ 0 then apebs[m0] := mkpeb (apebs[m0].echdr, apebs[m0].vidhdr, subarray(apebs[m0].data, 0, m) + subarray(buf, n1, n) + mkempbuf(LEB_SIZE - m - n), m + n, apebs[m0].bad)⟩ (abs(pebs, apebs) ∧ err0 = err) |
apebs[m3] = mkpeb(aehdr, avhdr, buf0, m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), avhdr.valid?, aehdr.valid?, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), mkpeb(aehdr, avhdr, buf0, m2, false)), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), m1 + n ≤ LEB_SIZE, n2 + n ≤ # buf, m2 ≤ m1, ⌊err0⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m3] := mkpeb (apebs[m3].echdr, apebs[m3].vidhdr, subarray(apebs[m3].data, 0, m1) + subarray(buf, n2, n) + mkempbuf(LEB_SIZE - m1 - n), m1 + n, apebs[m3].bad) else choose n1 with (n1 < n ∨ n1 = 0 ∧ n = 0) ∧ is-aligned(n1, EB_PAGE_SIZE) in if n1 ≠ 0 then apebs[m3] := mkpeb (apebs[m3].echdr, apebs[m3].vidhdr, subarray(apebs[m3].data, 0, m1) + subarray(buf, n2, n1) + mkempbuf(LEB_SIZE - m1 - n1), m1 + n1, apebs[m3].bad)⟩ (abs(pebs, apebs) ∧ err0 = err)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr = aehdr; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).fill = m; (s)%⊦ ubi-io-write-data-pre(n, n0, n1, n2, buf, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad ∧ apebs[n].echdr.valid? ∧ apebs[n].vidhdr.valid? ∧ is-aligned(n0, EB_PAGE_SIZE) ∧ is-aligned(n2, EB_PAGE_SIZE) ∧ apebs[n].fill ≤ n0 ∧ n0 + n2 ≤ LEB_SIZE ∧ n1 + n2 ≤ # buf; (s)