| # apebs = n1 + vtblpnum1, # wlar0 = n1 + vtblpnum1, apebs[vtblpnum1] = mkpeb(aechdr(m), avidhdr(v, m1, m2, m3, m4), buf1, m0, false), buf = mkbuf(LEB_SIZE), buf0 = buf, n = LEB_SIZE, n0 = 0, vtblpnum = 0, vtblpnum0 = vtblpnum1, nx < vtblpnum1, bflipset-cons(bflipset, subarray(wlar0, 0, vtblpnum1)), indices-erasing(wlar0, nx), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aechdr(m), avidhdr(v, m1, m2, m3, m4), buf1, m0, false)), unique-sqns(apebs), valid-eraseq(subarray(wlar0, 0, vtblpnum1), q), valid-eraseq-stronger(subarray(apebs, 0, vtblpnum1), q), valid-global-sqn(subarray(apebs, 0, vtblpnum1), sqnum), valid-recs(subarray(apebs, 0, vtblpnum1), subarray(wlar0, 0, vtblpnum1), recs), valid-recs-sqns(apebs, recs), valid-wl(subarray(apebs, 0, vtblpnum1), subarray(wlar0, 0, vtblpnum1)) ⊦ m3 = 0, n1 = 0, dups(nx), ubi-io-read-data-pre(vtblpnum0, vtblpnum, n0, n, buf0, apebs) |
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ m < m + n ↔ n ≠ 0; (s)% ⊦ # mkbuf(n) = n; (s)% ⊦ m ≤ m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)%⊦ ubi-io-read-data-pre(n, n0, m0, n1, buf, apebs) ↔ n < # apebs ∧ ¬ apebs[n].bad ∧ n0 + n1 ≤ LEB_SIZE ∧ m0 + n1 ≤ # buf; (s)