| # buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), pebs[m2] = mkpeb(buf1, 0, false), m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then apebs[m2].echdr := aechdr(m3) else choose aehdr with ¬ aehdr.valid? in apebs[m2].echdr := aehdr⟩ (abs(pebs, apebs) ∧ err1 = err) |
# buf2 = EB_PAGE_SIZE, pebs[m2] = mkpeb(buf1, 0, false), apebs[m2] = mkpeb(empty, avhdr, buf0, m1, false), m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, 0, false), mkpeb(empty, avhdr, buf0, m1, false)), is-encoded(echdr(m3), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then apebs[m2].echdr := aechdr(m3) else choose aehdr with ¬ aehdr.valid? in apebs[m2].echdr := aehdr⟩ (abs(pebs, apebs) ∧ err1 = err)