[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 444 from proof prepost-atomic-leb-change (previous step)

# apebs0 = # wlar, LEB_SIZE = n2 + n0, vols[v][m0] = unmapped, wlar[n1] = wl-entry(m1, free), apebs0[n1] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), aehdr.valid?, n1 < # wlar, m0 < # vols[v], bflipset-cons(bflipset, wlar), is-aligned(n0, EB_PAGE_SIZE), ubi-io-inv(apebs0[n1, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)]), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-global-sqn(apebs0, sqnum + 1), valid-global-sqn(apebs0, sqnum), valid-peb(mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), v ∈ vols, n0 ≤ LEB_SIZE ⊦ n1 = vtblpnum1, valid-wl(apebs0[n1, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)], wlar[n1, wl-entry(m1, used)]), VTBL_VOLID ∈ vols, vtblpnum1 ∈ q

User applied rule insert rewrite lemma

And obtained the following new goals

Proof step 445:
n < # apebs, # apebs = # wlar ⊦ valid-wl(apebs, wlar) ∧ valid-peb(apeb) ∧ (valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) ≠ ∅ → apeb.vidhdr.sqn > valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs).max) ∧ apeb.vidhdr.vol ∈ vols ∧ apeb.vidhdr.leb < # vols[apeb.vidhdr.vol] ∧ vols[apeb.vidhdr.vol][apeb.vidhdr.leb] = unmapped ∧ valid-ebatbl(apebs, wlar, vols, n0) ∧ valid-vtbl(apebs, vols, wlar, n0) ∧ ¬ VTBL_VOLID ∈ vols ∧ apeb.echdr.ec = m0 → valid-wl(apebs[n, apeb], wlar[n, wl-entry(m0, used)])
Proof step 446:
# apebs0 = # wlar, LEB_SIZE = n2 + n0, apebs0[n1] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), wlar[n1] = wl-entry(m1, free), vols[v][m0] = unmapped, aehdr.valid?, m0 < # vols[v], n1 < # wlar, bflipset-cons(bflipset, wlar), is-aligned(n0, EB_PAGE_SIZE), ubi-io-inv(apebs0), ubi-io-inv(apebs0[n1, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)]), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, sqnum + 1), valid-peb(mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), v ∈ vols, n0 ≤ LEB_SIZE ⊦ n1 = vtblpnum1, valid-wl(apebs0[n1, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)], wlar[n1, wl-entry(m1, used)]), vtblpnum1 ∈ q, VTBL_VOLID ∈ vols, n1 < # apebs0 ∧ # apebs0 = # wlar ∧ valid-wl(apebs0, wlar) ∧ valid-peb(mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false)) ∧ ( valid-sqns (mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.vol, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.leb, apebs0) ≠ ∅ → mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.sqn > valid-sqns (mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.vol, mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.leb, apebs0) .max) ∧ mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.vol ∈ vols ∧ mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.leb < # vols[mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.vol] ∧ vols[mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.vol] [mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).vidhdr.leb ] = unmapped ∧ valid-ebatbl(apebs0, wlar, vols, vtblpnum1) ∧ valid-vtbl(apebs0, vols, wlar, vtblpnum1) ∧ ¬ VTBL_VOLID ∈ vols ∧ mkpeb(aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false).echdr.ec = m1

Rule argument

spec: ubi-base name: valid-wl-map seq: n < # apebs, # apebs = # wlar ⊦ valid-wl(apebs, wlar) ∧ valid-peb(apeb) ∧ ( valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) ≠ ∅ → apeb.vidhdr.sqn > valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) .max) ∧ apeb.vidhdr.vol ∈ vols ∧ apeb.vidhdr.leb < # vols[apeb.vidhdr.vol] ∧ vols[apeb.vidhdr.vol][apeb.vidhdr.leb] = unmapped ∧ valid-ebatbl(apebs, wlar, vols, n0) ∧ valid-vtbl(apebs, vols, wlar, n0) ∧ ¬ VTBL_VOLID ∈ vols ∧ apeb.echdr.ec = m0 → valid-wl(apebs[n, apeb], wlar[n, wl-entry(m0, used)]) subst: [vols, n0, m0, wlar, apeb, n, apebs] → [vols, vtblpnum1, m1, wlar, mkpeb (aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false), n1, apebs0] flags: <all paths>

Additional information

Used terms: vols, vtblpnum1, m1, wlar, mkpeb (aehdr, avidhdr(v, m0, sqnum, 0, 0), mkempbuf(LEB_SIZE), 0, false), n1, apebs0