| # wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr1, buf1, m1, boolvar), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr0, buf0, m0, false), vtblpnum2 < n0 + vtblpnum0, n ≤ vtblpnum0, vtblpnum0 < n0 + vtblpnum0 → ubi-io-peb-initial(apebs0[vtblpnum0]), ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n0 = 0, vtblpnum2 = n0 + vtblpnum0, aehdr1.valid?, (boolvar → wlar[n] = wl-entry(0, erroneous)) ∧ (¬ boolvar → aehdr.valid? ∧ wlar[n] = wl-entry(aehdr.ec, free) ∧ avhdr1 = empty) |
# apebs0 = n0 + vtblpnum0, # wlar = n0 + vtblpnum0, apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr0, buf0, m0, false), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, false), apebs0[n] = mkpeb(aehdr, avhdr1, buf1, m1, boolvar), vtblpnum2 < n0 + vtblpnum0, ubi-io-peb-initial(mkpeb(aehdr1, avhdr0, buf0, m0, false)), n ≤ vtblpnum0, ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n0 = 0, vtblpnum2 = n0 + vtblpnum0, aehdr1.valid?, (boolvar → wlar[n] = wl-entry(0, erroneous)) ∧ (¬ boolvar → aehdr.valid? ∧ wlar[n] = wl-entry(aehdr.ec, free) ∧ avhdr1 = empty)
Used simplifier rules: c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m < m + n ↔ n ≠ 0; (s)