| wlar1[m] = wl-entry(m1, stat), wlar0[m] = wl-entry(m0, erasing), m < # wlar0, indices-erasing(wlar1, nx0), indices-erasing(wlar0, nx0), valid-eraseq(wlar1, q1), q0 ⊆ q1, ∀ n. n ∈ q0 ↔ n < # wlar0 ∧ wlar0[n].status = erasing ⊦ m < # wlar1 ∧ stat = erasing |
m ∈ q0 ↔ m < # wlar0 ∧ wlar0[m].status = erasing, wlar0[m] = wl-entry(m0, erasing), wlar1[m] = wl-entry(m1, stat), m < # wlar0, indices-erasing(wlar0, nx0), indices-erasing(wlar1, nx0), valid-eraseq(wlar1, q1), q0 ⊆ q1 ⊦ m < # wlar1 ∧ stat = erasing
Used terms: m