| # buf2 = EB_PAGE_SIZE, pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), avhdr = avidhdr(v, m5, m0, m3, m4), m = m2, aehdr.valid?, m2 < # apebs, m2 < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨if ubi-io-write-vidhdr-pre(m, avhdr, apebs) then {fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].vidhdr := avhdr else choose avhdr with ¬ avhdr.valid? in apebs[m].vidhdr := avhdr} else abort⟩ (abs(pebs, apebs) ∧ err1 = err) |
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), avhdr = avidhdr(v, m5, m0, m3, m4), m = m2, aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ubi-io-write-vidhdr-pre(m, avhdr, apebs), ⌊err1⌋ ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then apebs[m].vidhdr := avhdr else choose avhdr with ¬ avhdr.valid? in apebs[m].vidhdr := avhdr⟩ (abs(pebs, apebs) ∧ err1 = err)
# buf2 = EB_PAGE_SIZE, apebs[m2] = mkpeb(aehdr, empty, buf0, m1, false), pebs[m2] = mkpeb(buf1, EB_PAGE_SIZE, false), avhdr = avidhdr(v, m5, m0, m3, m4), m = m2, aehdr.valid?, m2 < # pebs, m2 < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf1, EB_PAGE_SIZE, false), mkpeb(aehdr, empty, buf0, m1, false)), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨abort⟩ (abs(pebs, apebs) ∧ err1 = err), ubi-io-write-vidhdr-pre(m, avhdr, apebs)