| # wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr1, buf1, m2, boolvar), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[vtblpnum0] = mkpeb(aechdr(m1), avhdr0, buf0, m0, false), vtblpnum2 < n0 + vtblpnum0, ubi-io-initial(apebs0), n ≤ vtblpnum0, ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n = vtblpnum0, n0 = 0, vtblpnum2 = n0 + vtblpnum0, (boolvar → wlar[vtblpnum0, wl-entry(m1, free)][n] = wl-entry(0, erroneous)) ∧ (¬ boolvar → aehdr.valid? ∧ wlar[vtblpnum0, wl-entry(m1, free)][n] = wl-entry(aehdr.ec, free) ∧ avhdr1 = empty) |
# wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr1, buf1, m2, boolvar), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[vtblpnum0] = mkpeb(aechdr(m1), avhdr0, buf0, m0, false), n < vtblpnum0, vtblpnum2 < n0 + vtblpnum0, ubi-io-initial(apebs0), ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n = vtblpnum0, n0 = 0, vtblpnum2 = n0 + vtblpnum0, (boolvar → wlar[n] = wl-entry(0, erroneous)) ∧ (¬ boolvar → aehdr.valid? ∧ wlar[n] = wl-entry(aehdr.ec, free) ∧ avhdr1 = empty)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ n < m → wlar[m, wle][n] = wlar[n]; (s)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)