| # vols[v] = # avols[v], # apebs1 = # apebs0, apebs0[m3] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs1[m3] = mkpeb(aehdr, avhdr, buf, m0, boolvar), avols[v][m] = mapped(buf0, m1), vols[v][m] = ⌜m3⌝ , m < # avols[v], valid-ebatbl(apebs0, wlar, vols, n0), v ∈ vols, v ∈ avols, m2 ≤ m1, # apebs0 ≤ m3 ⊦ buf0 = buf ∧ m0 ≤ m1 |
⊦ valid-ebatbl(apebs, wlar, vols, n0) ↔ (∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs ∧ n < # wlar ∧ apebs[n].vidhdr.valid? ∧ apebs[n].vidhdr.vol = v ∧ apebs[n].vidhdr.leb = m ∧ n ≠ n0)
# apebs1 = # apebs0, # vols[v] = # avols[v], vols[v][m] = ⌜m3⌝ , avols[v][m] = mapped(buf0, m1), apebs1[m3] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs0[m3] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), m < # avols[v], v ∈ avols, v ∈ vols, # apebs0 ≤ m3, m2 ≤ m1, ∀ v, m, n. vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n].status = used ∧ n < # apebs0 ∧ n < # wlar ∧ apebs0[n].vidhdr.valid? ∧ apebs0[n].vidhdr.vol = v ∧ apebs0[n].vidhdr.leb = m ∧ n ≠ n0 ⊦ buf0 = buf ∧ m0 ≤ m1
Used terms: n0, vols, wlar, apebs0