| apebs[m2] = mkpeb(aehdr, empty, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, avhdr.valid?, aehdr.valid?, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟪if m0 < # pebs ∧ avhdr.valid? ∧ ¬ pebs[m0].bad ∧ pebs[m0].fill = EB_PAGE_SIZE then let buf = mkbuf(m), vhdr = vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum) in {encode_vidheader#(m, vhdr; buf; err); if err = ESUCCESS then mtd_asm_write#(m0, m, 0, m, buf; pebs; err)} else abort⟫ ⟨aubi_io_write_vidhdr#(m2, avhdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0) |
pebs[m0].fill = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, avhdr.valid?, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → avhdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ ⟪let buf = mkbuf(m), vhdr = vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum) in {encode_vidheader#(m, vhdr; buf; err); if err = ESUCCESS then mtd_asm_write#(m0, m, 0, m, buf; pebs; err)}⟫ ⟨aubi_io_write_vidhdr#(m2, avhdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0), pebs[m0].bad
apebs[m2] = mkpeb(aehdr, empty, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, avhdr.valid?, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → avhdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ ⟪abort⟫ ⟨aubi_io_write_vidhdr#(m2, avhdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0), m0 < # pebs ∧ avhdr.valid? ∧ ¬ pebs[m0].bad ∧ pebs[m0].fill = EB_PAGE_SIZE
apebs[m2] = mkpeb(aehdr, empty, buf, m1, false), m = EB_PAGE_SIZE, m0 = m2, aehdr.valid?, avhdr.valid?, m0 < # pebs, m2 < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs)