| apebs[m1] = mkpeb(aehdr, avhdr, buf, m2, boolvar), m1 < # apebs, valid-eraseq-strong(apebs, to-vtbl(vols), q0), eq-entry(n, v × m) ∈ q0, ∀ v0, m0. (valid-peb(v0, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)) ↔ lref = v0 × m0) ∧ (lref = v0 × m0 ∧ v0 ∈ vols ∧ m0 < # vols[v0] → avhdr.sqn ≠ valid-sqns(v0, m0, apebs).max), ∀ apebs, vols, n, v, m. valid-eraseq-strong(apebs, to-vtbl(vols), q0) ∧ eq-entry(n, v × m) ∈ q0 → valid-peb(v, m, apebs[n]) ∧ (v ∈ vols ∧ m < # vols[v] → apebs[n].vidhdr.sqn ≠ valid-sqns(v, m, apebs).max) ⊦ eq-entry(n, v × m) = eq-entry(m1, lref), m1 ∈ q0, valid-peb(v, m, apebs[n]) ∧ (v ∈ vols ∧ m < # vols[v] → apebs[n].vidhdr.sqn ≠ valid-sqns(v, m, apebs).max) |
Used terms: apebs, vols, n, v, m