| wlar[n] = wl-entry(m, free), apebs[n] = mkpeb(aehdr, avhdr, buf, m0, false), n < # wlar, n < # apebs, ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, m0, false)), valid-wl(apebs, wlar) ⊦ avhdr = empty ∧ aehdr.valid? ∧ m0 = 0 |
⊦ valid-wl(apebs, wlar) ↔ (∀ n. n < # wlar → (wlar[n].status = erroneous ↔ apebs[n].bad) ∧ (wlar[n].status = free → apebs[n].vidhdr = empty) ∧ (wlar[n].status ≠ erroneous ∧ wlar[n].status ≠ erasing → apebs[n].echdr = aechdr(wlar[n].ec)) ∧ (wlar[n].status = used → (∃ v, m. valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs).max)))
apebs[n] = mkpeb(aehdr, avhdr, buf, m0, false), wlar[n] = wl-entry(m, free), n < # apebs, n < # wlar, ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, m0, false)), ∀ n. n < # wlar → (wlar[n].status = erroneous ↔ apebs[n].bad) ∧ (wlar[n].status = free → apebs[n].vidhdr = empty) ∧ (wlar[n].status ≠ erroneous ∧ wlar[n].status ≠ erasing → apebs[n].echdr = aechdr(wlar[n].ec)) ∧ (wlar[n].status = used → (∃ v, m. valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs).max)) ⊦ avhdr = empty ∧ aehdr.valid? ∧ m0 = 0
Used terms: wlar, apebs