| 2 * EB_PAGE_SIZE + m2 = (avhdr = empty ⊃ EB_PAGE_SIZE;m2 + 2 * EB_PAGE_SIZE), LEB_SIZE = (n1 + n) + m1, apebs[m3] = mkpeb(aehdr, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), avhdr.valid?, aehdr.valid?, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-echdr(subarray(buf1, 0, EB_PAGE_SIZE), aehdr), abs-vidhdr(subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), avhdr), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n + m1 ≤ LEB_SIZE, m1 + n ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n ≤ PEB_SIZE, m2 ≤ m1, m2 ≤ LEB_SIZE, m1 ≤ LEB_SIZE, n2 + n ≤ # buf, 2 * EB_PAGE_SIZE + LEB_SIZE ≤ # buf1, (m1 + n) + n1 ≤ LEB_SIZE ⊦ aehdr = empty, subarray(buf1, 2 * EB_PAGE_SIZE + m1 + n, n1) = mkempbuf(n1) |
2 * EB_PAGE_SIZE + m2 = (avhdr = empty ⊃ EB_PAGE_SIZE;m2 + 2 * EB_PAGE_SIZE), LEB_SIZE = (n1 + n) + m1, apebs[m3] = mkpeb(aehdr, avhdr, subarray(buf1, 2 * EB_PAGE_SIZE, LEB_SIZE), m2, false), pebs[m3] = mkpeb(buf1, 2 * EB_PAGE_SIZE + m2, false), avhdr.valid?, aehdr.valid?, m3 < # apebs, m3 < # pebs, abs(pebs, apebs), abs-echdr(subarray(buf1, 0, EB_PAGE_SIZE), aehdr), abs-vidhdr(subarray(buf1, EB_PAGE_SIZE, EB_PAGE_SIZE), avhdr), is-aligned(m1, EB_PAGE_SIZE), is-aligned(n, EB_PAGE_SIZE), mtd-cons(pebs), ubi-io-inv(apebs), n + m1 ≤ LEB_SIZE, m1 + n ≤ LEB_SIZE, (m1 + 2 * EB_PAGE_SIZE) + n ≤ PEB_SIZE, m2 ≤ m1, m2 ≤ LEB_SIZE, m1 ≤ LEB_SIZE, n2 + n ≤ # buf ⊦ aehdr = empty, subarray(buf1, 2 * EB_PAGE_SIZE + m1 + n, n1) = mkempbuf(n1)
Used simplifier rules: let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat% ⊦ m ≤ m; (s)%n < # pebs ⊦ pebs[n] = mkpeb(buf, m, boolvar) ∧ mtd-cons(pebs) → # buf = PEB_SIZE; (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%mult-c: ⊦ m * n = n * m; from specification nat-mult%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult% ⊦ LEB_SIZE + 2 * EB_PAGE_SIZE = PEB_SIZE; (s)