| # apebs = # wlar, avhdr0.sqn = valid-sqns(v, n, apebs, m).max, wlar[m] = wl-entry(m7, stat0), apebs[m0] = mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0), apebs[m] = mkpeb(aehdr1, avidhdr(v, n, m3, m2, m1), buf1, m5, false), aehdr1.valid?, avhdr0.sqn < m3, m0 < m, m < # wlar, m0 + 1 < # wlar, m0 < # wlar, valid-peb(v, n, mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0)), m2 ≠ 0 → m2 ≤ datasize(buf1) ∧ m1 = checksum(buf1, m2), ∀ v, m. unique-elems(valid-sqns(v, m, apebs)) ⊦ aehdr1 = aechdr(aehdr1.ec), m = m0 |
Used simplifier rules: ⊦ aehdr.valid? → (m = aehdr.ec ↔ aehdr = aechdr(m)); (elim) Used terms: aehdr1, m3