| apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟪if m0 < # pebs ∧ aehdr.valid? ∧ ¬ pebs[m0].bad ∧ pebs[m0].fill = 0 then let buf = mkbuf(m), ehdr = echdr(aehdr.ec) in {encode_echeader#(m, ehdr; buf; err); if err = ESUCCESS then mtd_asm_write#(m0, 0, 0, m, buf; pebs; err)} else abort⟫ ⟨aubi_io_write_echdr#(m2, aehdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0) |
pebs[m0].fill = 0, apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → aehdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ ⟪let buf = mkbuf(m), ehdr = echdr(aehdr.ec) in {encode_echeader#(m, ehdr; buf; err); if err = ESUCCESS then mtd_asm_write#(m0, 0, 0, m, buf; pebs; err)}⟫ ⟨aubi_io_write_echdr#(m2, aehdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0), pebs[m0].bad
apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → aehdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ ⟪abort⟫ ⟨aubi_io_write_echdr#(m2, aehdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0), m0 < # pebs ∧ aehdr.valid? ∧ ¬ pebs[m0].bad ∧ pebs[m0].fill = 0
apebs[m2] = mkpeb(empty, avhdr, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs)