| # wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr1, buf1, m2, boolvar), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[vtblpnum0] = mkpeb(aechdr(m1), avhdr0, buf0, m0, false), n = vtblpnum0, vtblpnum2 < n0 + vtblpnum0, ubi-io-initial(apebs0), n ≤ vtblpnum0, ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n0 = 0, vtblpnum2 = n0 + vtblpnum0, (boolvar → wlar[vtblpnum0, wl-entry(m1, free)][n] = wl-entry(0, erroneous)) ∧ (¬ boolvar → aehdr.valid? ∧ wlar[vtblpnum0, wl-entry(m1, free)][n] = wl-entry(aehdr.ec, free) ∧ avhdr1 = empty) |
# apebs0 = n0 + vtblpnum0, # wlar = n0 + vtblpnum0, apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[vtblpnum0] = mkpeb(aechdr(m1), avhdr1, buf1, m2, false), vtblpnum2 < n0 + vtblpnum0, ubi-io-initial(apebs0), ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ avhdr1 = empty, n0 = 0, vtblpnum2 = n0 + vtblpnum0
Used simplifier rules: ⊦ aechdr(m).ec = m; (s)% ⊦ aechdr(m).valid?; (s)%⊦ mkpeb(aehdr, avhdr, buf, m, boolvar) = mkpeb(aehdr0, avhdr0, buf0, m0, boolvar0) ↔ aehdr = aehdr0 ∧ avhdr = avhdr0 ∧ buf = buf0 ∧ m = m0 ∧ (boolvar ↔ boolvar0); (s)%m < # wlar ⊦ wlar[m, wle][m] = wle; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + m0 ≤ m ↔ m0 = 0; (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m ≤ m; (s)