| # wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr0, buf0, m0, boolvar0), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, boolvar), apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr1, buf1, m1, true), ubi-io-initial(apebs0), vtblpnum2 ≤ n0 + vtblpnum0, n ≤ vtblpnum0, vtblpnum2 ≠ n0 + vtblpnum0 → ¬ boolvar, ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n = vtblpnum0, n0 = 0, (boolvar0 → wlar[vtblpnum0, wl-entry(0, erroneous)][n] = wl-entry(0, erroneous)) ∧ (¬ boolvar0 → aehdr.valid? ∧ wlar[n] = wl-entry(aehdr.ec, free) ∧ avhdr0 = empty) |
# wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n] = mkpeb(aehdr, avhdr0, buf0, m0, boolvar0), apebs0[vtblpnum2] = mkpeb(aehdr0, avhdr, buf, m, boolvar), apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr1, buf1, m1, true), n < vtblpnum0, ubi-io-initial(apebs0), vtblpnum2 ≤ n0 + vtblpnum0, vtblpnum2 ≠ n0 + vtblpnum0 → ¬ boolvar, ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n = vtblpnum0, n0 = 0, (boolvar0 → wlar[n] = wl-entry(0, erroneous)) ∧ (¬ boolvar0 → aehdr.valid? ∧ wlar[n] = wl-entry(aehdr.ec, free) ∧ avhdr0 = empty)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ n < m → wlar[m, wle][n] = wlar[n]; (s)% ⊦ m ≠ n → (m ≤ n ↔ m < n); (s)