| # apebs = # wlar, wlar[m] = wl-entry(free-ecs(wlar).min, free), apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), avhdr = empty, m0 = 0, aehdr.valid?, m < # wlar, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar) ⊦ # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, vtblpnum0 = m, VTBL_VOLID ∈ vols, vtblpnum0 ∈ q, ∃ m. m < # wlar ∧ wlar[m].ec < free-ecs(wlar).min + WL_THRESHOLD ∧ wlar[m].status = free |
# apebs = # wlar, wlar[m] = wl-entry(free-ecs(wlar).min, free), apebs[m] = mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false), aehdr.valid?, m < # wlar, bflipset-cons(bflipset, wlar), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum0), valid-wl(apebs, wlar) ⊦ # free-ecs(wlar) = 0, free-ecs(wlar) = ∅, vtblpnum0 = m, VTBL_VOLID ∈ vols, vtblpnum0 ∈ q, ∃ m. m < # wlar ∧ wlar[m].ec < free-ecs(wlar).min + WL_THRESHOLD ∧ wlar[m].status = free
Used simplifier rules: lf-valid-wl-not-erroneous: n < # wlar, stat ≠ erroneous ⊦ apebs[n] = mkpeb(aehdr, avhdr, buf, m, boolvar) ∧ wlar[n] = wl-entry(m0, stat) ∧ valid-wl(apebs, wlar) → ¬ boolvar;%ubi-io-inv-fwd: n < # apebs ⊦ apebs[n] = apeb ∧ ubi-io-inv(apebs) → ubi-io-peb-inv(apeb);% ⊦ ubi-io-peb-inv(mkpeb(aehdr, empty, mkempbuf(LEB_SIZE), 0, false)); (s)%⊦ aehdr.valid? → ( ubi-io-peb-inv(mkpeb(aehdr, empty, buf, n, false)) ↔ buf = mkempbuf(LEB_SIZE) ∧ n = 0); (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ free ≠ erroneous; (s)