| # wlar = n0 + vtblpnum0, # apebs0 = n0 + vtblpnum0, apebs0[n0 + vtblpnum0] = mkpeb(aehdr0, avhdr, buf, m, boolvar), apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr0, buf0, m0, false), vtblpnum0 < # apebs0, ubi-io-initial(apebs0), ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ ⟪vtblpnum := vtblpnum0 + 1⟫ ( vtblpnum ≤ # apebs0 ∧ # wlar = # apebs0 ∧ (∀ n3. n3 < vtblpnum → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty)) ∧ (vtblpnum0 ≠ # apebs0 → ¬ apebs0[vtblpnum0].bad) ∧ # apebs0 < n0 + vtblpnum), n0 = 0, apebs0[vtblpnum0].echdr.valid? |
# apebs0 = n0 + vtblpnum0, # wlar = n0 + vtblpnum0, apebs0[vtblpnum0] = mkpeb(aehdr1, avhdr0, buf0, m0, false), apebs0[n0 + vtblpnum0] = mkpeb(aehdr0, avhdr, buf, m, boolvar), vtblpnum0 < # apebs0, ubi-io-initial(apebs0), ∀ n3. n3 < vtblpnum0 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty) ⊦ n0 = 0, apebs0[vtblpnum0].echdr.valid?, vtblpnum0 + 1 ≤ # apebs0 ∧ # wlar = # apebs0 ∧ (∀ n3. n3 < vtblpnum0 + 1 → (apebs0[n3].bad → wlar[n3] = wl-entry(0, erroneous)) ∧ (¬ apebs0[n3].bad → apebs0[n3].echdr.valid? ∧ wlar[n3] = wl-entry(apebs0[n3].echdr.ec, free) ∧ apebs0[n3].vidhdr = empty)) ∧ (vtblpnum0 ≠ # apebs0 → ¬ apebs0[vtblpnum0].bad) ∧ # apebs0 < n0 + vtblpnum0 + 1