| # buf2 = EB_PAGE_SIZE, pebs[m2] = mkpeb(buf1, 0, false), apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), aehdr = aechdr(m3), m = m2, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨if ubi-io-write-echdr-pre(m, aehdr, apebs) then {fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].echdr := aehdr else choose aehdr with ¬ aehdr.valid? in apebs[m].echdr := aehdr} else abort⟩ (abs(pebs[m2, (pebs[m2].data:= copy(buf2, 0, pebs[m2].data, 0, EB_PAGE_SIZE)).fill:= EB_PAGE_SIZE], apebs) ∧ ESUCCESS = err) |
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), aehdr = aechdr(m3), m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-write-echdr-pre(m, aehdr, apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].echdr := aehdr else choose aehdr with ¬ aehdr.valid? in apebs[m].echdr := aehdr⟩ (abs(pebs[m2, (pebs[m2].data:= copy(buf2, 0, pebs[m2].data, 0, EB_PAGE_SIZE)).fill:= EB_PAGE_SIZE], apebs) ∧ ESUCCESS = err)
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), aehdr = aechdr(m3), m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨abort⟩ (abs(pebs[m2, (pebs[m2].data:= copy(buf2, 0, pebs[m2].data, 0, EB_PAGE_SIZE)).fill:= EB_PAGE_SIZE], apebs) ∧ ESUCCESS = err), ubi-io-write-echdr-pre(m, aehdr, apebs)