| # buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), avhdr = avidhdr(v, m6, m5, m3, m4), m = m2, aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), is-encoded(vidhdr(v, m6, m5, m3, m4), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-write-vidhdr-pre(m, avhdr, apebs), ⌊err0⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].vidhdr := avhdr else choose avhdr with ¬ avhdr.valid? in apebs[m].vidhdr := avhdr⟩ (abs(pebs, apebs) ∧ err0 = err) |
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), is-encoded(vidhdr(v, m6, m5, m3, m4), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m2].vidhdr := avidhdr(v, m6, m5, m3, m4) else choose avhdr with ¬ avhdr.valid? in apebs[m2].vidhdr := avhdr⟩ (abs(pebs, apebs) ∧ err0 = err)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr = aehdr; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)% ⊦ avidhdr(v, m, m0, m1, m2).valid?; (s)%⊦ ubi-io-write-vidhdr-pre(n, avhdr, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad ∧ avhdr.valid? ∧ apebs[n].echdr.valid? ∧ apebs[n].vidhdr = empty; (s)