| # apebs = # wlar, apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), vols0 = ∅, vtbl = vtbl0, recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs, m0 < # wlar, is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data), is-encoded(vtbl1, buf), unmapped-vols(vols), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum), valid-vtbl-weak(apebs, m0), VTBL_VOLID × VTBL_LNUM ∈ recs, to-vtbl(vols) ⊥ vtbl ⊦ vtbl = ∅, ∃ v. v ∈ vtbl |
# apebs = # wlar, apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), m0 < # wlar, is-encoded(to-vtbl(vols) ∪ vtbl, buf), unmapped-vols(vols), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, m0), VTBL_VOLID × VTBL_LNUM ∈ recs, to-vtbl(vols) ⊥ vtbl ⊦ vtbl = ∅, ∃ v. v ∈ vtbl
Used simplifier rules: ⊦ is-encoded(vtbl0, buf) → (is-encoded(vtbl1, buf) ↔ vtbl0 = vtbl1); (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)% ⊦ recovery-entry(m, m0).pnum = m; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic