| # wlar = # wlar0, # apebs = # wlar0, # apebs0 = # wlar0, wlar0[m] = wl-entry(m0, erasing), wlar[m] = wl-entry(m1, erasing), apebs[m].bad, m < # wlar0, bflipset-cons(bflipset, wlar0), bflipset-cons(bflipset, wlar), id○(wlar, wlar0, m), id○(apebs, apebs0, m), ubi-io-inv(apebs0), ubi-io-inv(apebs), unique-sqns(apebs0), unique-sqns(apebs), valid-ebatbl(apebs0, wlar0, vols, vtblpnum1), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs0, q0 + eq-entry(m, lref) ' + q1), valid-eraseq(wlar0, q0 + eq-entry(m, lref) ' + q1), valid-eraseq(q0 + eq-entry(m, lref) ' + q1), valid-eraseq(apebs, q0 + eq-entry(m, lref) ' + q1), valid-eraseq(wlar, q0 + eq-entry(m, lref) ' + q1), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs0, vols, wlar0, vtblpnum1), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs0, wlar0), valid-wl(apebs, wlar) ⊦ err = ESUCCESS, vtblpnum1 = m, vtblpnum1 ∈ q1, vtblpnum1 ∈ q0, VTBL_VOLID ∈ vols |
Used simplifier rules: lf-valid-wl-bad: n < # wlar ⊦ apebs[n] = mkpeb(aehdr, avhdr, buf, m, true) ∧ valid-wl(apebs, wlar) → wlar[n].status = erroneous;%lf-valid-wl-not-erroneous: n < # wlar, stat ≠ erroneous ⊦ apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar) ∧ wlar[n] = wl-entry(m0, stat) ∧ valid-wl(apebs, wlar) → ¬ boolvar;%ubi-io-inv-fwd: n < # apebs ⊦ apebs[n] = apeb ∧ ubi-io-inv(apebs) → ubi-io-peb-inv(apeb);% ⊦ m < n ↔ ¬ n ≤ m; (ss)%a: ⊦ (q + q0) + q1 = q + q0 + q1; from specification list[erasequeue-base]% ⊦ valid-eraseq(wlar, q0 + eq-entry(m, lref) ' + q1) → ¬ # wlar ≤ m; (s)% ⊦ erroneous ≠ erasing; (s)%⊦ ( ((aehdr = apeb.echdr ∧ avhdr = apeb.vidhdr) ∧ buf = apeb.data) ∧ m = apeb.fill) ∧ (boolvar ↔ apeb.bad) ↔ apeb = mkpeb(aehdr, avhdr, buf, m, boolvar); (elim) Used terms: apebs[m], aehdr, avhdr, buf, m2, boolvar