| # buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), aehdr = aechdr(m3), m = m2, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-write-echdr-pre(m, aehdr, apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].echdr := aehdr else choose aehdr with ¬ aehdr.valid? in apebs[m].echdr := aehdr⟩ (abs(pebs[m2, (pebs[m2].data:= copy(buf2, 0, pebs[m2].data, 0, EB_PAGE_SIZE)).fill:= EB_PAGE_SIZE], apebs) ∧ ESUCCESS = err) |
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), EB_PAGE_SIZE ≤ PEB_SIZE ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m2].echdr := aechdr(m3) else {m := m2; choose aehdr with ¬ aehdr.valid? in apebs[m].echdr := aehdr}⟩ (abs(pebs[m2, (pebs[m2].data:= copy(buf2, 0, pebs[m2].data, 0, EB_PAGE_SIZE)).fill:= EB_PAGE_SIZE], apebs) ∧ ESUCCESS = err)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr = aehdr; (s)% ⊦ aechdr(m).valid?; (s)%⊦ ubi-io-write-echdr-pre(n, aehdr, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad ∧ aehdr.valid? ∧ apebs[n].echdr = empty; (s)