| pebs[m0].fill = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), buf = mkbuf(m), m = EB_PAGE_SIZE, m0 = m2, vhdr = vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum), avhdr.valid?, aehdr.valid?, m2 < # apebs, m0 < # pebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), m0 < # pebs → avhdr.valid? → m0 < # pebs ∧ (¬ pebs[m0].bad → m0 < # pebs) ⊦ ⟪encode_vidheader#(m, vhdr; buf; err); if err = ESUCCESS then mtd_asm_write#(m0, m, 0, m, buf; pebs; err)⟫ ⟨aubi_io_write_vidhdr#(m2, avhdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0), pebs[m0].bad |
pebs[m2].fill = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), buf = mkbuf(EB_PAGE_SIZE), avhdr.valid?, aehdr.valid?, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ¬ pebs[m2].bad ⊦ ⟪encode_vidheader#(EB_PAGE_SIZE, vidhdr(avhdr.vol, avhdr.leb, avhdr.sqn, avhdr.size, avhdr.checksum); buf; err); if err = ESUCCESS then mtd_asm_write#(m2, EB_PAGE_SIZE, 0, EB_PAGE_SIZE, buf; pebs; err)⟫ ⟨aubi_io_write_vidhdr#(m2, avhdr; apebs; err0)⟩ (abs(pebs, apebs) ∧ err = err0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic