| m0 < # apebs, valid-eraseq-strong(apebs, vtbl, q0), ∀ v, m. (valid-peb(v, m, apebs[m0]) ↔ lref = v × m) ∧ (lref = v × m ∧ v ∈ vtbl ∧ m < vtbl[v] → apebs[m0].vidhdr.sqn ≠ valid-sqns(v, m, apebs).max), ∀ apebs, vtbl. valid-eraseq-strong(apebs, vtbl, q0) → valid-eraseq(apebs, q0) ⊦ valid-eraseq(apebs, eq-entry(m0, lref) ' + q0), m0 ∈ q0 |
apebs[m0] = mkpeb(aehdr, avhdr, buf, m1, boolvar), m0 < # apebs, valid-eraseq-strong(apebs, vtbl, q0), ∀ apebs, vtbl. valid-eraseq-strong(apebs, vtbl, q0) → valid-eraseq(apebs, q0), ∀ v, m. (valid-peb(v, m, apebs[m0]) ↔ lref = v × m) ∧ (lref = v × m ∧ v ∈ vtbl ∧ m < vtbl[v] → avhdr.sqn ≠ valid-sqns(v, m, apebs).max) ⊦ valid-eraseq(apebs, eq-entry(m0, lref) ' + q0), m0 ∈ q0
Used simplifier rules: ⊦ ( ((aehdr = apeb.echdr ∧ avhdr = apeb.vidhdr) ∧ buf = apeb.data) ∧ m = apeb.fill) ∧ (boolvar ↔ apeb.bad) ↔ apeb = mkpeb(aehdr, avhdr, buf, m, boolvar); (elim) Used terms: apebs[m0], aehdr, avhdr, buf, m1, boolvar