| # wlar0 = # wlar1, # apebs = # wlar1, avhdr0.leb = VTBL_LNUM, avhdr.leb = VTBL_LNUM, avhdr0.vol = VTBL_VOLID, avhdr.vol = VTBL_VOLID, wlar0[n0] = wl-entry(m4, used), apebs[n0] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), wlar1[m0] = wl-entry(m2, used), n0 < # wlar1, m0 < # wlar1, bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset0, wlar0), is-encoded(to-vtbl(vols0), buf0), is-encoded(to-vtbl(vols1), buf), unique-sqns(apebs), valid-ebatbl(apebs, wlar1, vols1, m0), valid-ebatbl(apebs, wlar0, vols0, n0), valid-eraseq(q1), valid-eraseq(wlar1, q1), valid-eraseq(apebs, q1), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs, q0), valid-global-sqn(apebs, m1), valid-global-sqn(apebs, n1), valid-wl(apebs, wlar1), n0 < # wlar0 → (wlar0[n0].status = erroneous ↔ apebs[n0].bad) ∧ (wlar0[n0].status = free → apebs[n0].vidhdr = empty) ∧ (wlar0[n0].status ≠ erroneous ∧ wlar0[n0].status ≠ erasing → apebs[n0].echdr = aechdr(wlar0[n0].ec)) ∧ (wlar0[n0].status = used → (∃ v, m. valid-peb(v, m, apebs[n0]) ∧ apebs[n0].vidhdr.sqn = valid-sqns(v, m, apebs).max)) ⊦ n0 = m0, VTBL_VOLID ∈ vols1, VTBL_VOLID ∈ vols0 |
# apebs = # wlar1, # wlar0 = # wlar1, avhdr.leb = VTBL_LNUM, avhdr0.sqn = valid-sqns(VTBL_VOLID, VTBL_LNUM, apebs).max, avhdr.vol = VTBL_VOLID, wlar1[m0] = wl-entry(m2, used), apebs[m0] = mkpeb(aehdr, avhdr, buf, m, boolvar), apebs[n0] = mkpeb(aechdr(m4), avhdr0, buf0, m3, false), wlar0[n0] = wl-entry(m4, used), m0 < # wlar1, n0 < # wlar1, bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset1, wlar1), is-encoded(to-vtbl(vols1), buf), is-encoded(to-vtbl(vols0), buf0), unique-sqns(apebs), valid-ebatbl(apebs, wlar0, vols0, n0), valid-ebatbl(apebs, wlar1, vols1, m0), valid-eraseq(apebs, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs, q1), valid-eraseq(wlar1, q1), valid-eraseq(q1), valid-global-sqn(apebs, n1), valid-global-sqn(apebs, m1), valid-peb(VTBL_VOLID, VTBL_LNUM, mkpeb(aechdr(m4), avhdr0, buf0, m3, false)), valid-wl(apebs, wlar1) ⊦ n0 = m0, VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols1
Used simplifier rules: ⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.vol = v; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.leb = m; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)% ⊦ wl-entry(m, stat).ec = m; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).echdr = aehdr; (s)% ⊦ used ≠ erasing; (s)% ⊦ used ≠ free; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).bad ↔ boolvar; (s)% ⊦ used ≠ erroneous; (s)% ⊦ wl-entry(m, stat).status = stat; (s)