| # apebs = # wlar, apebs[m] = mkpeb(aechdr(m2), avhdr0, buf, m3, false), wlar[m] = wl-entry(m2, used), m < # wlar, valid-peb(mkpeb(aechdr(m2), avhdr0, buf, m3, false)), valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-sqns(v, m5, apebs) -- avhdr0.sqn = ∅ ∨ ¬ avhdr0.sqn < (valid-sqns(v, m5, apebs) -- avhdr0.sqn).max ⊦ valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf, m3, false)) ∧ avhdr0.sqn = valid-sqns(v, m5, apebs).max |
# apebs = # wlar, apebs[m] = mkpeb(aechdr(m2), avhdr0, buf, m3, false), wlar[m] = wl-entry(m2, used), m < # wlar, valid-peb(mkpeb(aechdr(m2), avhdr0, buf, m3, false)), valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf, m3, false)), valid-sqns(v, m5, apebs) -- avhdr0.sqn = ∅ ∨ ¬ avhdr0.sqn < valid-sqns(v, m5, apebs).max ⊦ avhdr0.sqn = valid-sqns(v, m5, apebs).max
Used simplifier rules: ⊦ m ≠ bag.max → (bag -- m).max = bag.max; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.leb = m; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.vol = v; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)%⊦ valid-peb(apeb) → (valid-peb(v, m, apeb) ↔ v = apeb.vidhdr.vol ∧ m = apeb.vidhdr.leb); (ss)