| # apebs = # wlar, apebs0 = apebs, q0 = q, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar) ⊦ ⟪err := ESUCCESS; while err = ESUCCESS ∧ q ≠ [] do {/* (inv-erase-all : invariant ubi-cons(apebs, vols, wlar, q, bflipset, vtblpnum, sqnum) ∧ ubi-io-inv(apebs) ∧ id(apebs, apebs`, mapped-pebs(vols)) ∧ q ⊆ q` ∧ (err = ESUCCESS ∨ ⌊err⌋ ) wfbound (err = ESUCCESS ⊃ # q;0)) */; ubi_erase_worker_helper#(q.head.pnum; wlar, apebs; err); if err = ESUCCESS then q := q.tail}⟫ ( # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ ubi-io-inv(apebs) ∧ id(apebs, apebs0, mapped-pebs(vols)) ∧ q ⊆ q0 ∧ (err = ESUCCESS → q = []) ∧ (err = ESUCCESS ∨ ⌊err⌋ )), VTBL_VOLID ∈ vols, vtblpnum ∈ q |
# apebs = # wlar, apebs0 = apebs, err = ESUCCESS, q0 = q, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar) ⊦ ⟪while err = ESUCCESS ∧ q ≠ [] do {/* (inv-erase-all : invariant ubi-cons(apebs, vols, wlar, q, bflipset, vtblpnum, sqnum) ∧ ubi-io-inv(apebs) ∧ id(apebs, apebs`, mapped-pebs(vols)) ∧ q ⊆ q` ∧ (err = ESUCCESS ∨ ⌊err⌋ ) wfbound (err = ESUCCESS ⊃ # q;0)) */; ubi_erase_worker_helper#(q.head.pnum; wlar, apebs; err); if err = ESUCCESS then q := q.tail}⟫ ( # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ ubi-io-inv(apebs) ∧ id(apebs, apebs0, mapped-pebs(vols)) ∧ q ⊆ q0 ∧ (err = ESUCCESS → q = []) ∧ (err = ESUCCESS ∨ ⌊err⌋ )), vtblpnum ∈ q, VTBL_VOLID ∈ vols