| wlar[n] = wl-entry(m3, stat), apebs[n] = mkpeb(aehdr, avhdr, buf0, m0, boolvar), apebs[n, mkpeb(aehdr, avhdr, buf1, m1, boolvar)][n] = mkpeb(aehdr0, avhdr0, buf, m2, boolvar0), ∀ v, m, n1. vols[v][m] = ⌜n1⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n1].status = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ apebs[n1].vidhdr.valid? ∧ apebs[n1].vidhdr.vol = v ∧ apebs[n1].vidhdr.leb = m ∧ n1 ≠ n0 ⊦ vols[v][m] = ⌜n⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ stat = used ∧ n < # apebs ∧ n < # wlar ∧ avhdr0.valid? ∧ avhdr0.vol = v ∧ avhdr0.leb = m ∧ n ≠ n0, n < # apebs |
vols[v][m] = ⌜n⌝ , wlar[n] = wl-entry(m3, stat), apebs[n] = mkpeb(aehdr, avhdr, buf0, m0, boolvar), apebs[n, mkpeb(aehdr, avhdr, buf1, m1, boolvar)][n] = mkpeb(aehdr0, avhdr0, buf, m2, boolvar0), m < # vols[v], v ∈ vols, # apebs ≤ n, ∀ v, m, n1. vols[v][m] = ⌜n1⌝ ∧ v ∈ vols ∧ m < # vols[v] ↔ wlar[n1].status = used ∧ n1 < # apebs ∧ n1 < # wlar ∧ apebs[n1].vidhdr.valid? ∧ apebs[n1].vidhdr.vol = v ∧ apebs[n1].vidhdr.leb = m ∧ n1 ≠ n0 ⊦
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n ↔ ¬ n ≤ m; (ss)