| apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → aehdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ m0 < # pebs ∧ aehdr.valid? ∧ ¬ pebs[m0].bad ∧ pebs[m0].fill = 0 |
apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ pebs[m2].fill = 0 ∧ ¬ pebs[m2].bad
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ abs(pebs, apebs) → ¬ # pebs < # apebs; (s)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ m < n ↔ ¬ n ≤ m; (ss)