| # apebs0 = # wlar, # apebs1 = # wlar, wlar[m0] = wl-entry(m1, used), apebs1[m0] = mkpeb(aehdr, avhdr, buf2, m, false), vols[v][vtblpnum4] = ⌜m0⌝ , apebs0[m0] = mkpeb(aehdr0, avhdr0, buf3, m2, false), str0 = "ubi: moving data from PEB " + m0.toString, m0 < # wlar, vtblpnum4 < # vols[v], bflipset-cons(bflipset, wlar), is-aligned(vtblpnum3, EB_PAGE_SIZE), is-aligned(n2, EB_PAGE_SIZE), ubi-io-inv(apebs0), ubi-io-inv(apebs1), ubi-io-peb-inv(mkpeb(aehdr0, avhdr0, buf3, m2, false)), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf2, m, false)), unique-sqns(apebs0), unique-sqns(apebs1), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-ebatbl(apebs1, wlar, vols, vtblpnum1), valid-eraseq(apebs0, q), valid-eraseq(apebs1, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs1, sqnum), valid-peb(mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-peb(mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-vtbl(apebs1, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), valid-wl(apebs1, wlar), v ∈ vols, vtblpnum3 ≤ LEB_SIZE, m ≤ LEB_SIZE, vtblpnum3 + n2 ≤ LEB_SIZE, n1 + n2 ≤ # buf, m ≤ vtblpnum3 ⊦ ∀ . true → ⟪ubi_change# (v, vtblpnum4, vtblpnum3 + n2, copy(buf, n1, copy(buf3, 0, mkbuf(vtblpnum3 + n2), 0, vtblpnum3), vtblpnum3, n2), EB_PAGE_SIZE ; vols, wlar, q, bflipset, vtblpnum1, sqnum, apebs0 ; err)⟫ ( # apebs0 = # wlar ∧ unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs0, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs0, wlar, vols, vtblpnum1) ∧ valid-vtbl(apebs0, vols, wlar, vtblpnum1) ∧ ubi-io-inv(apebs0)), err1 = ESUCCESS, m0 = vtblpnum1, n2 = 0, VTBL_VOLID ∈ vols, m0 ∈ q, vtblpnum1 ∈ q |
# apebs1 = # wlar, # apebs0 = # wlar, apebs0[m0] = mkpeb(aehdr0, avhdr0, buf3, m2, false), vols[v][vtblpnum4] = ⌜m0⌝ , apebs1[m0] = mkpeb(aehdr, avhdr, buf2, m, false), wlar[m0] = wl-entry(m1, used), err1 ≠ ESUCCESS, m0 ≠ vtblpnum1, n2 ≠ 0, vtblpnum4 < # vols[v], m0 < # wlar, bflipset-cons(bflipset, wlar), is-aligned(n2, EB_PAGE_SIZE), is-aligned(vtblpnum3, EB_PAGE_SIZE), ubi-io-inv(apebs1), ubi-io-inv(apebs0), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf2, m, false)), ubi-io-peb-inv(mkpeb(aehdr0, avhdr0, buf3, m2, false)), unique-sqns(apebs1), unique-sqns(apebs0), valid-ebatbl(apebs1, wlar, vols, vtblpnum1), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs1, q), valid-eraseq(apebs0, q), valid-global-sqn(apebs1, sqnum), valid-global-sqn(apebs0, sqnum), valid-peb(v, vtblpnum4, mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-peb(v, vtblpnum4, mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(mkpeb(aehdr, avhdr, buf2, m, false)), valid-peb(mkpeb(aehdr0, avhdr0, buf3, m2, false)), valid-vtbl(apebs1, vols, wlar, vtblpnum1), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs1, wlar), valid-wl(apebs0, wlar), v ∈ vols, m ≤ vtblpnum3, n1 + n2 ≤ # buf, vtblpnum3 + n2 ≤ LEB_SIZE, m ≤ LEB_SIZE, vtblpnum3 ≤ LEB_SIZE, ¬ vtblpnum1 ∈ q, ¬ m0 ∈ q, ¬ VTBL_VOLID ∈ vols ⊦ ⟪ubi_change# (v, vtblpnum4, vtblpnum3 + n2, copy(buf, n1, copy(buf3, 0, mkbuf(vtblpnum3 + n2), 0, vtblpnum3), vtblpnum3, n2), EB_PAGE_SIZE ; vols, wlar, q, bflipset, vtblpnum1, sqnum, apebs0 ; err)⟫ ( # apebs0 = # wlar ∧ unique-sqns(apebs0) ∧ valid-global-sqn(apebs0, sqnum) ∧ valid-wl(apebs0, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs0, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs0, wlar, vols, vtblpnum1) ∧ valid-vtbl(apebs0, vols, wlar, vtblpnum1) ∧ ubi-io-inv(apebs0))