| apebs[n] = mkpeb(aehdr, avhdr, buf, 0, false), n < # apebs, ubi-io-inv(apebs) ⊦ buf = mkempbuf(LEB_SIZE) ↔ true |
apebs[n] = mkpeb(aehdr, avhdr, buf, 0, false), n < # apebs, ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf, 0, false)) ⊦ buf = mkempbuf(LEB_SIZE)
Used simplifier rules: ubi-io-inv-fwd: n < # apebs ⊦ apebs[n] = apeb ∧ ubi-io-inv(apebs) → ubi-io-peb-inv(apeb);% ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)