[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 76 from proof prepost-atomic-leb-change (previous step)

# apebs0 = # wlar, LEB_SIZE = n3 + align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), wlar[vtblpnum1] = wl-entry(m0, used), wlar[n1] = wl-entry(m1, free), apebs0[n1] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), aehdr.valid?, vtblpnum1 < # wlar, n1 < # wlar, bflipset-cons(bflipset, wlar), is-aligned(LEB_SIZE, EB_PAGE_SIZE), is-encoded(to-vtbl(vols)[v, m], subarray(buf, 0, LEB_SIZE)), ubi-io-inv (apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ]), ubi-io-inv(apebs0), ubi-io-inv (apebs0 [n1, mkpeb(aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), mkempbuf(LEB_SIZE), 0, false) ]), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q + eq-entry(vtblpnum1, VTBL_VOLID × VTBL_LNUM) '), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), LEB_SIZE ≤ # buf, align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE) ≤ # buf, align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE) ≤ LEB_SIZE ⊦ vtblpnum1 = n1, vtblpnum1 ∈ q, VTBL_VOLID ∈ vols, v ∈ vols, ∃ buf0. buf = mkempbuf(LEB_SIZE) + buf0, valid-ebatbl (apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ], wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)], vols[v, fill(mkebatbl(m), unmapped)], n1) ∧ valid-vtbl (apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ], vols[v, fill(mkebatbl(m), unmapped)], wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)], n1)

User applied rule insert rewrite lemma

And obtained the following new goals

Proof step 77:
⊦ valid-vtbl(apebs, vols, wlar, n0) ↔ n0 < # apebs ∧ n0 < # wlar ∧ wlar[n0].status = used ∧ apebs[n0].vidhdr.vol = VTBL_VOLID ∧ apebs[n0].vidhdr.leb = VTBL_LNUM ∧ is-encoded(to-vtbl(vols), apebs[n0].data)
Proof step 78:
# apebs0 = # wlar, LEB_SIZE = n3 + align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), apebs0[n1] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), wlar[n1] = wl-entry(m1, free), wlar[vtblpnum1] = wl-entry(m0, used), aehdr.valid?, n1 < # wlar, vtblpnum1 < # wlar, bflipset-cons(bflipset, wlar), is-aligned(LEB_SIZE, EB_PAGE_SIZE), is-encoded(to-vtbl(vols)[v, m], subarray(buf, 0, LEB_SIZE)), ubi-io-inv (apebs0 [n1, mkpeb(aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), mkempbuf(LEB_SIZE), 0, false) ]), ubi-io-inv(apebs0), ubi-io-inv (apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ]), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum1), valid-eraseq(q + eq-entry(vtblpnum1, VTBL_VOLID × VTBL_LNUM) '), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE) ≤ LEB_SIZE, align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE) ≤ # buf, LEB_SIZE ≤ # buf ⊦ vtblpnum1 = n1, v ∈ vols, VTBL_VOLID ∈ vols, vtblpnum1 ∈ q, ∃ buf0. buf = mkempbuf(LEB_SIZE) + buf0, valid-ebatbl (apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ], wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)], vols[v, fill(mkebatbl(m), unmapped)], n1) ∧ n1 < # apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ] ∧ n1 < # wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)] ∧ wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)][n1].status = used ∧ apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ] [n1 ] .vidhdr .vol = VTBL_VOLID ∧ apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ] [n1 ] .vidhdr .leb = VTBL_LNUM ∧ is-encoded (to-vtbl(vols[v, fill(mkebatbl(m), unmapped)]), apebs0 [n1, mkpeb (aehdr, avidhdr(VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ] [n1 ] .data)

Rule argument

spec: ubi-base name: valid-vtbl seq: ⊦ valid-vtbl(apebs, vols, wlar, n0) ↔ n0 < # apebs ∧ n0 < # wlar ∧ wlar[n0].status = used ∧ apebs[n0].vidhdr.vol = VTBL_VOLID ∧ apebs[n0].vidhdr.leb = VTBL_LNUM ∧ is-encoded(to-vtbl(vols), apebs[n0].data) subst: [n0, wlar, vols, apebs] → [n1, wlar[vtblpnum1, wl-entry(m0, erasing)] [n1, wl-entry(m1, used) ], vols[v, fill(mkebatbl(m), unmapped)], apebs0 [n1, mkpeb (aehdr, avidhdr (VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ]] flags: <all paths>

Additional information

Used terms: n1, wlar[vtblpnum1, wl-entry(m0, erasing)][n1, wl-entry(m1, used)], vols[v, fill(mkebatbl(m), unmapped)], apebs0 [n1, mkpeb (aehdr, avidhdr (VTBL_VOLID, VTBL_LNUM, sqnum, datasize(buf, LEB_SIZE), checksum(buf, datasize(buf, LEB_SIZE))), subarray(buf, 0, LEB_SIZE), align↑(datasize(buf, LEB_SIZE), EB_PAGE_SIZE), false) ]