| # buf2 = EB_PAGE_SIZE, pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), aehdr.valid?, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), is-encoded(vidhdr(v, m6, m5, m3, m4), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨err := err1; if err = ESUCCESS then apebs[m2].vidhdr := avidhdr(v, m6, m5, m3, m4) else choose avhdr with ¬ avhdr.valid? in apebs[m2].vidhdr := avhdr⟩ (abs(pebs, apebs) ∧ err1 = err) |
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), err = err1, aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), is-encoded(vidhdr(v, m6, m5, m3, m4), buf2), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨if err = ESUCCESS then apebs[m2].vidhdr := avidhdr(v, m6, m5, m3, m4) else choose avhdr with ¬ avhdr.valid? in apebs[m2].vidhdr := avhdr⟩ (abs(pebs, apebs) ∧ err1 = err)