| # apebs = # wlar, apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), vols0 = ∅, vtbl = vtbl0, recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs, m0 < # wlar, is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data), is-encoded(vtbl1, buf), unmapped-vols(vols), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum), valid-vtbl-weak(apebs, m0), v ∈ vtbl, VTBL_VOLID × VTBL_LNUM ∈ recs, to-vtbl(vols) ⊥ vtbl ⊦ ⟪vols[v] := mkebatbl(vtbl[v]); vols[v] := fill(vols[v], unmapped); vtbl := vtbl -- v⟫ ( ( to-vtbl(vols) ⊥ vtbl ∧ is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data) ∧ valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum) ∧ valid-recs(apebs, wlar, recs) ∧ recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs ∧ VTBL_VOLID × VTBL_LNUM ∈ recs ∧ unmapped-vols(vols) ∧ # apebs = # wlar) ∧ # vtbl < # vtbl0), vtbl = ∅ |
# apebs = # wlar, recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), vols0 = ∅, vtbl = vtbl0, m0 < # wlar, recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs, is-encoded(vtbl1, buf), is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data), unmapped-vols(vols), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, m0), valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum), VTBL_VOLID × VTBL_LNUM ∈ recs, v ∈ vtbl, to-vtbl(vols) ⊥ vtbl ⊦ ⟪vols := vols[v, mkebatbl(vtbl[v])][v, fill(vols[v, mkebatbl(vtbl[v])][v], unmapped)]; vtbl := vtbl -- v⟫ ( ( to-vtbl(vols) ⊥ vtbl ∧ is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data) ∧ valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum) ∧ valid-recs(apebs, wlar, recs) ∧ recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs ∧ VTBL_VOLID × VTBL_LNUM ∈ recs ∧ unmapped-vols(vols) ∧ # apebs = # wlar) ∧ # vtbl < # vtbl0), vtbl = ∅