| # apebs = # wlar, vols[v][vtblpnum4] = ⌜m0⌝ , apebs[m0] = mkpeb(aehdr, avhdr, buf1, m, false), wlar[m0] = wl-entry(m1, used), m0 < # wlar, vtblpnum4 < # vols[v], bflipset-cons(bflipset, wlar), is-aligned(n, EB_PAGE_SIZE), is-aligned(vtblpnum3, EB_PAGE_SIZE), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m, false)), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf1, m, false)), valid-peb(mkpeb(aehdr, avhdr, buf1, m, false)), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-wl(apebs, wlar), v ∈ vols, m ≤ vtblpnum3, n0 + n ≤ # buf, vtblpnum3 + n ≤ LEB_SIZE ⊦ ∀ apebs, err. # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(apebs, q) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ ubi-io-inv(apebs) → ⟪if err ≠ ESUCCESS then {debug#("ubi: failed to write to PEB " + m0.toString); let buf1 = mkbuf(vtblpnum3 + n), bitflips = ? in {aubi_io_read_data#(m0, 0, 0, vtblpnum3, apebs; buf1; bitflips, err); if err = ESUCCESS then {buf1 := copy(buf, n0, buf1, vtblpnum3, n); debug#("ubi: moving data from PEB " + m0.toString); ubi_change#(v, vtblpnum4, vtblpnum3 + n, buf1, EB_PAGE_SIZE; vols, wlar, q, bflipset, vtblpnum, sqnum, apebs; err)} else debug#("ubi: failed to read data from PEB " + m0.toString)}}⟫ ( # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, sqnum) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs, vols, wlar, vtblpnum) ∧ ubi-io-inv(apebs)), m0 = vtblpnum, n = 0, m0 ∈ q, VTBL_VOLID ∈ vols, vtblpnum ∈ q |
# apebs = # wlar, # apebs0 = # wlar, vols[v][vtblpnum4] = ⌜m0⌝ , apebs[m0] = mkpeb(aehdr, avhdr, buf1, m, false), wlar[m0] = wl-entry(m1, used), m0 ≠ vtblpnum, n ≠ 0, m0 < # wlar, vtblpnum4 < # vols[v], bflipset-cons(bflipset, wlar), is-aligned(n, EB_PAGE_SIZE), is-aligned(vtblpnum3, EB_PAGE_SIZE), ubi-io-inv(apebs), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m, false)), unique-sqns(apebs), unique-sqns(apebs0), valid-ebatbl(apebs, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-eraseq(apebs0, q), valid-global-sqn(apebs, sqnum), valid-global-sqn(apebs0, sqnum), valid-peb(v, vtblpnum4, apebs0[m0]), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf1, m, false)), valid-peb(mkpeb(aehdr, avhdr, buf1, m, false)), valid-vtbl(apebs, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs, wlar), valid-wl(apebs0, wlar), v ∈ vols, m ≤ vtblpnum3, n0 + n ≤ # buf, vtblpnum3 + n ≤ LEB_SIZE, ¬ m0 ∈ q, ¬ VTBL_VOLID ∈ vols, ¬ vtblpnum ∈ q ⊦ ⟪if err ≠ ESUCCESS then {debug#("ubi: failed to write to PEB " + m0.toString); let buf1 = mkbuf(vtblpnum3 + n), bitflips = ? in {aubi_io_read_data#(m0, 0, 0, vtblpnum3, apebs0; buf1; bitflips, err); if err = ESUCCESS then {buf1 := copy(buf, n0, buf1, vtblpnum3, n); debug#("ubi: moving data from PEB " + m0.toString); ubi_change#(v, vtblpnum4, vtblpnum3 + n, buf1, EB_PAGE_SIZE; vols, wlar, q, bflipset, vtblpnum, sqnum, apebs0; err)} else debug#("ubi: failed to read data from PEB " + m0.toString)}}⟫ ( # apebs0 = # wlar ∧ unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs0, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs0, wlar, vols, vtblpnum) ∧ valid-vtbl(apebs0, vols, wlar, vtblpnum) ∧ ubi-io-inv(apebs0))
Used simplifier rules: lf-mapped-valid-peb: ⊦ v ∈ vols ∧ m < # vols[v] ∧ vols[v][m] = ⌜n⌝ ∧ valid-ebatbl(apebs, wlar, vols, n0) ∧ valid-wl(apebs, wlar) → valid-peb(v, m, apebs[n]);%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic