| # apebs = # wlar, recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), vols = ∅, m0 < # wlar, is-encoded(vtbl, buf), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, m0), VTBL_VOLID × VTBL_LNUM ∈ recs ⊦ to-vtbl(vols) ⊥ vtbl ∧ is-encoded(to-vtbl(vols) ∪ vtbl, apebs[recs[VTBL_VOLID × VTBL_LNUM].pnum].data) ∧ valid-vtbl-weak(apebs, recs[VTBL_VOLID × VTBL_LNUM].pnum) ∧ valid-recs(apebs, wlar, recs) ∧ recs[VTBL_VOLID × VTBL_LNUM].pnum < # apebs ∧ VTBL_VOLID × VTBL_LNUM ∈ recs ∧ unmapped-vols(vols) ∧ # apebs = # wlar |
# apebs = # wlar, apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), recs[VTBL_VOLID × VTBL_LNUM] = recovery-entry(m0, m1), m0 < # wlar, is-encoded(vtbl, buf), valid-recs(apebs, wlar, recs), valid-vtbl-weak(apebs, m0), VTBL_VOLID × VTBL_LNUM ∈ recs ⊦ unmapped-vols(∅)
Used simplifier rules: ⊦ is-encoded(vtbl0, buf) → (is-encoded(vtbl1, buf) ↔ vtbl0 = vtbl1); (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)% ⊦ recovery-entry(m, m0).pnum = m; (s)%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ ∅ ∪ vtbl = vtbl; (s)% ⊦ ∅ ⊥ vtbl; (s)% ⊦ to-vtbl(∅) = ∅; (s)