| apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), buf = mkbuf(EB_PAGE_SIZE), m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ∀ buf, err. (err = ESUCCESS ∨ ⌊err⌋ ) ∧ # buf = EB_PAGE_SIZE ∧ (err = ESUCCESS → is-encoded(echdr(m), buf)) → ⟪if err = ESUCCESS then mtd_asm_write#(m2, 0, 0, EB_PAGE_SIZE, buf; pebs; err)⟫ ⟨aubi_io_write_echdr#(m2, aechdr(m); apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0) |
# buf2 = EB_PAGE_SIZE, pebs[m2] = mkpeb(buf1, 0, false), apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), err = ESUCCESS → is-encoded(echdr(m), buf2), err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪if err = ESUCCESS then mtd_asm_write#(m2, 0, 0, EB_PAGE_SIZE, buf2; pebs; err)⟫ ⟨aubi_io_write_echdr#(m2, aechdr(m); apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0)