| wlar[n] = wl-entry(m, free), apebs[n] = mkpeb(aechdr(m), empty, buf, m0, false), n < # wlar, n < # apebs, ubi-io-peb-inv(mkpeb(aechdr(m), empty, buf, m0, false)), ∀ n. n < # apebs → ubi-io-peb-inv(apebs[n]) ⊦ m0 = 0 |
apebs[n] = mkpeb(aechdr(m), empty, buf, m0, false), wlar[n] = wl-entry(m, free), n < # apebs, n < # wlar, ubi-io-peb-inv(mkpeb(aechdr(m), empty, buf, m0, false)), n < # apebs → ubi-io-peb-inv(apebs[n]) ⊦ m0 = 0
Used terms: n